Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File:                     JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier:          /eOwTrrK/xytmi1S7ut0WzaxvyE0f12Y35o3IRNfjsE=
Subject key identifier:   F7:FA:F3:59:4B:E2:C1:2B:7F:99:37:83:8E:EF:68:5B:35:01:04:0F
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer:       /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial:       018F8824A3CAA76CAEC71ADA33F71891D869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number:          0FA4
Signing time:             Fri 17 May 2024 20:00:53 +0000
Manifest this update:     Fri 17 May 2024 20:00:53 +0000
Manifest next update:     Sat 18 May 2024 20:00:53 +0000
Files and hashes:         1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: mcxRpbbSOv6vRkL6APQNEUlEvdeZOWBb4n1OEUmEmmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:a3:ca:a7:6c:ae:c7:1a:da:33:f7:18:91:d8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2546049998791fe85770313ba660c4125192980b
        Validity
            Not Before: May 17 20:00:53 2024 GMT
            Not After : May 18 20:00:53 2024 GMT
        Subject: CN=f7faf3594be2c12b7f9937838eef685b3501040f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:b0:d4:9b:35:a6:53:fa:56:70:76:62:e1:
                    ee:4e:12:07:eb:dc:5d:98:b0:b9:4e:4b:d6:f2:24:
                    ff:5a:3a:95:04:bc:07:73:e6:e8:55:df:2a:6e:f2:
                    69:89:de:b1:ad:5c:17:2a:87:d4:d0:bb:db:11:53:
                    b9:fd:90:ad:89:87:2c:38:2f:95:e7:e7:7a:50:bb:
                    b1:38:e0:c4:16:fd:6a:38:87:fa:9f:ed:cc:3d:6f:
                    a5:4f:da:43:8e:14:c7:3f:ee:05:38:a4:36:14:5d:
                    ad:17:b9:62:72:8d:85:f0:94:0b:7c:3b:e5:63:80:
                    e3:47:d0:f3:5b:c1:33:cb:3b:67:bf:7d:d9:c0:6c:
                    69:e4:8c:66:cc:d9:e8:88:f9:c8:79:d3:67:3b:ee:
                    68:d5:04:e7:9b:f6:8e:51:cb:4a:4a:40:bb:4a:a8:
                    7d:6a:bb:59:82:bd:30:ae:5f:96:b7:9a:36:c4:6a:
                    09:ae:df:c5:8b:9e:cd:22:2b:b8:61:8e:87:5c:27:
                    a9:c2:f6:7d:01:c1:4a:6d:04:96:a1:2d:60:2f:6c:
                    d0:86:02:e1:1e:d6:12:33:3c:cc:34:e1:c6:17:60:
                    c8:81:17:82:c6:c0:eb:3f:d0:ca:3d:aa:ce:8f:13:
                    1a:93:05:41:3e:78:eb:b7:50:16:19:ab:97:9b:cb:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FA:F3:59:4B:E2:C1:2B:7F:99:37:83:8E:EF:68:5B:35:01:04:0F
            X509v3 Authority Key Identifier:
                keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:f0:45:31:c8:66:56:f2:b9:50:4f:4e:8c:19:ae:cb:d8:
         30:27:98:f0:a1:00:c3:87:4d:1f:84:45:8a:72:57:2a:c3:aa:
         53:a9:78:cc:24:e2:ea:17:39:60:33:53:12:de:55:3b:ab:3c:
         80:d1:bf:a8:49:b8:03:12:88:a7:fa:3d:9c:a4:2f:a1:71:a4:
         e0:74:e9:bf:0d:90:e1:20:53:a4:e5:ab:61:22:f5:58:9a:61:
         15:43:0e:40:9f:4b:cd:f3:ab:69:13:9a:cc:3f:d3:51:ee:03:
         f7:68:01:ad:6d:2e:77:40:4c:13:5e:4c:35:0d:f2:99:f6:dd:
         c3:b9:7d:a6:9f:c5:4a:65:b2:4f:50:7a:38:95:dd:93:3a:78:
         a1:bd:d2:a8:3c:4f:fa:f7:33:5a:ef:a2:10:ca:eb:61:08:64:
         69:4c:7c:06:8b:19:59:53:53:d1:6e:9f:2c:66:5e:d5:6d:5f:
         98:c5:2a:fc:d5:55:db:d7:d8:78:74:4e:81:e0:50:bf:ad:af:
         b1:6e:cf:cc:23:ae:ed:94:0b:03:19:b3:67:7e:e0:8b:3d:7f:
         0f:e8:8d:7b:38:f0:f1:dd:5f:3b:a5:f3:24:f2:12:d1:8f:57:
         d1:2d:c0:a8:29:b5:f5:d6:c8:81:43:06:55:19:e2:c2:81:c5:
         67:a5:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:48:06 2024 by rpki-client on console-fra.rpki-client.org