Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File:                     J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier:          w9+vABN2zJkuib/FBM2N+cHV6RkehcDd66P0O0XRh0k=
Subject key identifier:   3B:CA:F7:77:2F:93:4A:2E:F3:8E:3B:13:20:68:E3:23:E2:62:AA:3B
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer:       /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial:       018F86A40403822046812F7A7191801AA19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number:          0AEC
Signing time:             Fri 17 May 2024 13:00:46 +0000
Manifest this update:     Fri 17 May 2024 13:00:46 +0000
Manifest next update:     Sat 18 May 2024 13:00:46 +0000
Files and hashes:         1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: LwaQ3wpiwvusLNYoOS9J8qKJQQnbArNWiHfEqW6fbYw=)
                          2: Ys_BvPDAnY2scWgU82pNRiXa5uE.roa (hash: Oh31N0kDL9HbBrc1TMRPZ1bQ6TAYEUXbOQyVY20Q/0E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:04:03:82:20:46:81:2f:7a:71:91:80:1a:a1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
        Validity
            Not Before: May 17 13:00:46 2024 GMT
            Not After : May 18 13:00:46 2024 GMT
        Subject: CN=3bcaf7772f934a2ef38e3b132068e323e262aa3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:d7:df:53:9b:e2:7d:b4:99:9f:bc:55:7e:
                    7e:e6:53:f4:80:d3:20:67:0f:a2:e3:d6:62:51:c8:
                    73:01:b7:5a:ae:bc:de:67:cb:a1:e3:79:f4:da:5e:
                    21:c3:8d:e6:68:4f:b1:84:93:c4:bf:54:23:74:38:
                    cc:1f:e2:4b:8b:8a:fb:1b:70:c2:da:9a:5e:a9:0f:
                    2f:34:fe:3f:22:a5:ac:6d:23:b5:22:72:0a:11:a9:
                    9a:28:d0:90:1c:a3:b8:d8:c8:88:36:24:47:11:06:
                    de:05:80:f5:8b:50:66:9e:27:91:98:a0:5b:cb:1c:
                    47:1f:59:a2:da:c8:7a:af:40:c7:4a:c2:12:d6:7d:
                    5b:d1:c9:1f:d2:a8:ef:e7:0e:91:57:20:df:9b:76:
                    95:8f:c1:0a:11:ef:2b:d1:bb:79:e8:86:90:10:3f:
                    3d:e1:5c:62:7a:cc:1e:75:1a:16:b9:48:7c:af:a7:
                    f0:e6:bc:69:c1:90:71:88:07:b8:29:53:84:28:ff:
                    47:ce:ad:43:44:ba:06:7a:9c:34:0c:f5:01:68:8f:
                    ea:66:64:20:a6:f7:af:42:d1:31:89:8f:1e:63:74:
                    72:1e:d0:39:f2:87:e4:7b:3c:f5:b1:d0:f9:50:fe:
                    1c:0e:19:51:a9:16:de:6a:a8:9b:83:89:88:3c:5b:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CA:F7:77:2F:93:4A:2E:F3:8E:3B:13:20:68:E3:23:E2:62:AA:3B
            X509v3 Authority Key Identifier:
                keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:05:18:3f:70:f7:84:52:5c:69:56:d7:11:c9:b3:6f:99:3b:
         1f:55:1c:77:96:77:5a:d3:cc:c2:69:b7:27:0e:47:a3:a1:6d:
         f6:e5:27:b4:bd:0d:3a:f3:68:12:54:bc:93:a3:db:6d:c4:17:
         5e:1a:f8:98:f1:a1:fc:1e:0c:1a:59:d3:6e:94:75:40:f8:1b:
         ce:a6:df:0a:e1:ce:8b:bc:95:97:65:c9:53:fc:d2:e1:98:85:
         89:21:b5:d4:28:4e:05:79:92:3d:44:8c:df:05:57:b2:d8:b6:
         7d:ca:b8:9a:54:af:4d:84:2e:f2:3e:00:22:35:f6:0d:ff:0b:
         22:42:dc:37:dc:24:55:c2:e7:c0:63:17:7b:b1:35:2b:c5:1f:
         2c:00:ca:37:64:64:80:3a:d3:71:bf:35:2f:e2:69:f4:b7:2b:
         35:e6:98:3b:bd:ec:4a:cf:de:7d:da:0c:4e:41:96:2a:09:ba:
         25:a3:4e:31:1c:c8:37:1c:10:c3:ad:17:2c:a1:c9:64:a2:6d:
         85:a5:26:61:18:35:d8:c6:63:ff:41:bd:8c:06:d0:ea:fb:ff:
         fa:14:a9:99:54:99:88:e9:4f:7a:49:39:c0:dd:ad:90:83:4a:
         08:54:15:d2:f6:59:dc:9d:f3:50:6a:b0:8a:46:f1:4b:a5:aa:
         a9:26:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:59 2024 by rpki-client on console-ams.rpki-client.org