Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
File:                     Jnzx804vAQuQLcFCRVtrtzJs8I0.mft (raw, json)
Hash identifier:          nHap6GccF7BM04YlRuCibduGl8Rf9hyDHEY2xFWewLc=
Subject key identifier:   2B:1E:5F:BD:B1:90:F4:6F:DC:97:8F:69:E5:F5:66:D8:65:75:D3:F0
Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Certificate issuer:       /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Certificate serial:       018F874A4BA7BEDC76FCFD52ED939AE9052F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:24 +0000
Manifest this update:     Fri 17 May 2024 16:02:24 +0000
Manifest next update:     Sat 18 May 2024 16:02:24 +0000
Files and hashes:         1: Jnzx804vAQuQLcFCRVtrtzJs8I0.crl (hash: Md7zNCY/62bmfzZkhsEWTC9UiuUBNI7OfFM/KVyum+w=)
                          2: PSFVOP_hNMu6pGv8OQjI1bho-Y0.roa (hash: fCD0EKA19aiNJcDoxMkWaOfW/Ml6ogZNK+I2jytcbow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4b:a7:be:dc:76:fc:fd:52:ed:93:9a:e9:05:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
        Validity
            Not Before: May 17 16:02:24 2024 GMT
            Not After : May 18 16:02:24 2024 GMT
        Subject: CN=2b1e5fbdb190f46fdc978f69e5f566d86575d3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9d:17:af:00:b8:8b:b5:94:fd:64:80:a3:f5:
                    0c:ef:f7:8c:cb:cb:d2:31:40:b2:cb:fe:ea:fe:4e:
                    a2:22:c9:17:02:83:19:89:df:ec:85:f9:80:16:ef:
                    38:40:40:4f:2a:63:64:c6:cd:12:70:be:13:e1:51:
                    2d:d0:ee:77:bd:e5:0e:6b:ca:66:5b:64:c6:33:8d:
                    31:44:4a:09:4f:25:ca:f3:14:c5:d3:f3:db:f1:3b:
                    88:f0:05:0f:28:61:71:2c:8c:74:f7:82:2e:b2:92:
                    97:1e:e6:21:04:97:ed:29:62:98:96:ac:a6:f0:3c:
                    89:82:2d:a5:ed:95:5a:77:fc:b8:96:8b:3b:e1:d3:
                    39:e6:a2:cf:ab:02:b8:a4:6a:de:8a:00:44:a6:53:
                    f2:3b:06:40:b8:57:8a:e5:be:f1:67:57:4f:58:64:
                    4a:7c:8e:c5:a1:76:1c:b7:34:f6:43:b2:7c:9d:14:
                    bd:3a:90:0e:09:11:30:82:9d:e3:9c:0e:71:9d:6a:
                    dd:99:ed:1d:da:34:0f:5d:27:12:e9:a3:5d:f2:1c:
                    c9:cf:59:57:bc:78:c9:30:1a:8d:d3:2f:da:d9:d3:
                    7f:d3:22:e5:8a:ff:71:cf:93:ee:58:0b:fc:c8:51:
                    47:c7:ad:e9:a7:10:41:af:ef:d3:7d:25:09:18:75:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:5F:BD:B1:90:F4:6F:DC:97:8F:69:E5:F5:66:D8:65:75:D3:F0
            X509v3 Authority Key Identifier:
                keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:9b:c1:12:42:26:61:03:69:b9:19:97:b8:c9:88:57:ab:
         ab:78:1d:3e:33:a9:54:a8:ab:19:37:fa:13:ba:ed:78:3b:82:
         ea:df:12:4d:cc:e6:1a:b7:fa:44:30:de:3d:60:5d:87:4a:85:
         bc:4a:c6:c5:f0:66:06:59:dd:fd:25:b9:22:5d:5f:03:d4:c6:
         1d:0d:26:24:38:a3:9a:f3:8d:74:0d:4f:b8:d0:f5:f1:96:42:
         19:a8:0c:c5:ad:f5:39:6b:34:b5:ae:c0:17:2b:8c:12:e0:16:
         26:80:b5:44:35:08:c2:8a:e8:a6:71:06:70:7d:4e:ba:4b:d6:
         eb:ee:d5:c9:db:2a:5e:b1:28:34:da:8e:66:89:23:92:73:fa:
         b3:1c:ff:01:7a:ba:df:a5:61:c3:eb:0d:84:80:07:bf:67:4f:
         ef:04:d3:d6:21:34:86:b2:3b:8f:9c:51:9d:71:4f:e7:5e:aa:
         e7:4e:d4:1c:dd:36:56:e6:2e:88:d4:1a:f5:22:1b:90:d7:88:
         67:51:60:3d:9e:0e:ff:75:47:2f:e9:32:51:73:4c:bc:ae:2f:
         6b:96:28:d8:9c:f8:94:d7:e5:90:48:62:8e:1d:e7:ca:f8:e9:
         2e:d6:d7:e0:dd:f8:a2:fc:5c:f1:eb:da:18:57:91:87:10:a8:
         35:5e:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:08 2024 by rpki-client on console-fra.rpki-client.org