Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File:                     JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier:          osYePc95utMl8zvTSXgV0x5605WKxD5zkBAq+5QnLvQ=
Subject key identifier:   F2:E2:41:9F:63:3B:D1:84:41:2D:64:40:7A:5B:B5:12:12:34:6B:27
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer:       /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial:       018F874A7500C9B1B92CA12D0F53CC78C733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:34 +0000
Manifest this update:     Fri 17 May 2024 16:02:34 +0000
Manifest next update:     Sat 18 May 2024 16:02:34 +0000
Files and hashes:         1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: 5m2PUkYHBplCbgUdxIiNaLURn5a37yhkLm1H9NVT56U=)
                          2: kQvmedxsnFhA0XcOwZ3BmJ4Qepo.roa (hash: HRgymgS1qb2pNqB1YnYq909mq6FDgIpyzSVoo6pOL9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:75:00:c9:b1:b9:2c:a1:2d:0f:53:cc:78:c7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
        Validity
            Not Before: May 17 16:02:34 2024 GMT
            Not After : May 18 16:02:34 2024 GMT
        Subject: CN=f2e2419f633bd184412d64407a5bb51212346b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:90:2d:5b:40:89:08:3c:67:84:90:f7:dd:
                    6d:60:38:52:90:fd:af:3d:3e:44:c4:91:53:6b:cf:
                    2c:80:f0:0b:e8:41:f9:6a:61:fd:a2:f9:46:e1:80:
                    cc:93:59:f0:73:36:36:80:e5:4f:94:fc:60:46:69:
                    89:01:e5:60:08:71:5f:a9:54:da:bc:57:b6:00:7c:
                    10:e5:f7:f6:65:d8:9d:ca:9e:8b:30:40:55:c0:16:
                    bc:a1:0a:46:4a:1a:f3:e2:93:f9:07:1b:65:81:d1:
                    ca:1d:02:5f:af:56:1c:04:51:4d:61:07:c4:4e:7f:
                    c0:6e:b8:1a:6f:50:d1:3a:35:d9:cd:42:e0:3d:a4:
                    72:9e:7b:63:2d:98:05:65:9c:3d:ed:b5:b6:e5:ee:
                    f9:25:e5:db:4c:6f:bc:16:fb:c8:1a:60:df:52:c8:
                    3b:2b:f7:99:9d:75:c5:57:06:6b:ab:67:b8:eb:73:
                    58:01:99:e7:ad:6d:7c:11:75:d5:99:98:fd:86:d3:
                    aa:14:59:87:3d:64:13:a9:cc:92:0e:9c:4f:ed:66:
                    62:ad:56:7d:14:47:c1:93:cf:fb:f6:f3:28:4f:99:
                    b6:df:12:56:6a:08:2a:16:54:8f:4f:22:a5:42:83:
                    e2:53:f6:e9:b0:e3:73:14:82:b3:16:cf:f7:37:e2:
                    60:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:41:9F:63:3B:D1:84:41:2D:64:40:7A:5B:B5:12:12:34:6B:27
            X509v3 Authority Key Identifier:
                keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:fd:85:5b:25:de:4d:1a:82:9e:4e:fe:e0:9f:63:d5:66:f9:
         ec:06:68:9d:c9:ed:37:27:ee:94:9a:6e:64:23:68:90:48:63:
         d8:9c:83:83:3d:0e:59:f2:35:34:9b:ea:5c:34:03:78:5a:d4:
         57:e1:2a:0e:aa:1e:8e:dc:8d:18:cb:80:f1:2c:63:08:e8:2d:
         a4:b8:25:2c:43:96:fc:1e:95:94:e1:a1:f1:cd:b0:c1:b7:7e:
         02:d9:71:51:60:30:73:e1:8b:10:5a:63:95:e0:06:49:f7:b0:
         fc:b1:ee:69:fa:df:0a:b5:81:8b:92:ad:b9:b3:26:bd:a1:f4:
         18:16:bf:b5:b3:e6:d0:e2:c8:a7:26:df:98:34:2e:9e:88:93:
         ce:80:ee:48:88:50:81:50:3e:2f:a2:6a:4a:6a:e2:f3:81:66:
         5a:50:ba:65:7c:88:c0:4e:0b:f2:0c:f7:50:a6:de:01:07:2a:
         ba:af:3f:85:35:15:6e:b4:a8:85:3e:82:f8:5e:b6:3b:03:d7:
         d4:40:9e:3f:e8:f1:9e:cc:8c:2e:b2:1e:dc:7c:fa:0a:f5:84:
         4e:e9:94:b3:b4:28:52:a2:49:d1:04:1d:18:06:90:a0:21:8d:
         18:a9:ca:80:d2:e3:31:df:36:2b:92:ec:23:7e:8a:98:d6:07:
         70:fc:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:26 2024 by rpki-client on console-ams.rpki-client.org