Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File:                     jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier:          IyRChHMWPLhxJphReYzxwc6GVS56rn50PmzXNUv2aLw=
Subject key identifier:   67:07:1C:CC:08:92:39:AE:51:6D:2E:9A:AE:3E:F6:CD:13:5E:58:45
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer:       /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial:       018F98ABCA4123CF7F735A0DCBB541950588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number:          0E8A
Signing time:             Tue 21 May 2024 01:02:26 +0000
Manifest this update:     Tue 21 May 2024 01:02:26 +0000
Manifest next update:     Wed 22 May 2024 01:02:26 +0000
Files and hashes:         1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: sfY8X4j3tbd7TBsaGU9gTU0bk07OplFwIsc3c5VCtQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 01:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:ca:41:23:cf:7f:73:5a:0d:cb:b5:41:95:05:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
        Validity
            Not Before: May 21 01:02:26 2024 GMT
            Not After : May 22 01:02:26 2024 GMT
        Subject: CN=67071ccc089239ae516d2e9aae3ef6cd135e5845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bd:46:d9:b3:1e:50:d4:0b:eb:2a:1b:84:d9:
                    f9:f8:eb:e3:c0:fd:b0:48:fa:ee:c7:d5:53:c0:98:
                    1d:6c:88:23:cc:2b:49:92:5e:89:34:44:6a:11:19:
                    b8:8b:dd:17:0a:8d:c3:d2:bb:c2:36:52:bb:9d:9d:
                    5b:2b:9d:3e:61:46:ea:e6:16:82:27:08:92:d6:1b:
                    73:bd:af:d0:3c:8d:5f:76:99:95:9a:00:b1:05:07:
                    b4:fe:f5:f2:7d:13:ae:a4:c3:61:b6:91:b2:9e:09:
                    8c:05:f6:3f:ca:60:4e:08:ff:2b:6d:08:23:34:d4:
                    39:87:44:3d:93:77:b8:35:39:aa:a8:2c:1a:dd:0f:
                    e7:30:f8:a9:5d:a7:be:86:7f:b4:48:4d:88:67:64:
                    8f:bf:2b:36:9c:8f:1c:dd:6b:3d:6b:d0:6f:6c:f2:
                    23:c4:b7:c8:57:22:6d:5f:f6:82:f6:ba:2d:3c:50:
                    9e:66:82:96:93:f5:5f:9f:db:63:87:7f:f2:1c:e6:
                    ba:3d:f0:2a:b7:a4:26:33:88:b7:2d:4b:32:96:47:
                    de:cc:e0:73:a1:e6:27:09:0b:8a:ee:2f:6c:25:ea:
                    52:b4:36:1c:d9:a2:10:41:d5:d4:28:cc:5f:07:3b:
                    63:ed:03:86:5f:41:97:ca:1b:b4:69:11:b7:fc:89:
                    2a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:07:1C:CC:08:92:39:AE:51:6D:2E:9A:AE:3E:F6:CD:13:5E:58:45
            X509v3 Authority Key Identifier:
                keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:1c:b2:03:30:36:ac:92:d2:b2:9f:de:5b:3b:3d:68:58:
         d0:26:97:88:46:37:d6:6e:38:08:c1:1f:84:e4:e0:f2:aa:63:
         20:d1:9a:4e:28:a8:8d:cf:82:92:a3:ca:b2:b8:6f:9e:44:09:
         17:9e:97:66:b6:f2:ff:f6:b1:3e:28:67:85:ee:16:6f:96:49:
         4e:2d:db:58:b3:d6:1f:61:cb:56:78:f5:e1:16:5f:77:ec:fd:
         ba:8f:61:17:c3:40:d0:7f:94:59:01:c6:1e:e5:54:af:71:8d:
         1f:95:e5:01:06:92:3f:aa:0e:2e:38:56:55:ed:55:d5:1c:b8:
         aa:27:b0:e9:40:8f:59:c8:8b:13:85:43:1e:12:e0:74:5a:a9:
         da:b4:9b:a2:a6:5c:a1:d7:26:0c:88:2b:0f:ed:99:b4:c2:dc:
         d5:2d:34:7a:93:3d:fa:f3:d5:9c:ad:6d:de:8f:f6:fa:a3:73:
         bf:30:31:3b:ca:f1:07:c9:45:55:c9:5b:2e:81:fb:b6:3e:05:
         15:be:fa:6f:56:ee:c8:5f:9e:fd:45:9c:42:9b:f7:d4:86:31:
         5f:76:ac:fe:b3:35:2c:12:73:95:bb:b8:84:19:83:aa:ac:0a:
         ea:71:30:10:e2:74:c8:f8:e4:e4:a3:70:3e:56:d2:86:4a:42:
         79:19:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:46:37 2024 by rpki-client on console-fra.rpki-client.org