Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
File:                     JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json)
Hash identifier:          2yPXUkUZHS4u+QoTzh3oeKygV/L6iU8plETzWlKoUIo=
Subject key identifier:   25:87:7E:AB:EB:A8:99:FB:58:42:7E:6C:CD:FA:8A:89:D8:5F:34:90
Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
Certificate issuer:       /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Certificate serial:       018F88241A1DA66CEDEAC6B6C27ABDABE308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
Manifest number:          0470
Signing time:             Fri 17 May 2024 20:00:17 +0000
Manifest this update:     Fri 17 May 2024 20:00:17 +0000
Manifest next update:     Sat 18 May 2024 20:00:17 +0000
Files and hashes:         1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: pTxPrfLZGbSB0OMWdgdB8cgmjRvzAMn5lDukNtdBWjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:1a:1d:a6:6c:ed:ea:c6:b6:c2:7a:bd:ab:e3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
        Validity
            Not Before: May 17 20:00:17 2024 GMT
            Not After : May 18 20:00:17 2024 GMT
        Subject: CN=25877eabeba899fb58427e6ccdfa8a89d85f3490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:0d:4d:32:f3:61:b2:da:14:4e:ef:46:c4:
                    17:a0:50:dc:28:5a:51:06:fc:dc:bc:9c:1c:12:e8:
                    8a:fb:f9:6d:f3:3a:59:fd:ea:a9:d1:71:05:79:1c:
                    6f:cf:5e:ea:cb:44:7b:c4:dd:93:15:22:ab:ab:de:
                    cd:62:0c:5a:4f:c8:2f:69:38:62:64:20:1e:93:01:
                    27:9a:d9:a7:28:1d:61:f1:49:52:46:33:d3:9d:27:
                    c2:30:f4:54:18:70:88:4b:8b:38:87:a3:7d:15:3b:
                    9a:25:56:6b:59:7a:5b:bd:98:f5:c7:af:cc:ad:ec:
                    b4:17:07:24:6b:54:9d:18:17:cc:e1:66:5e:38:58:
                    23:5c:6e:37:d4:44:96:e6:4a:44:dd:92:37:c6:2a:
                    e0:d4:ce:56:1a:7a:b1:bc:17:bf:1c:74:8c:ed:f2:
                    91:37:5b:1a:3d:fc:57:eb:8d:0e:12:70:77:42:11:
                    ee:cc:04:5c:be:4f:54:79:d8:7d:b4:05:24:ce:ff:
                    31:e5:0a:6f:8c:06:66:97:e6:96:f4:5c:b1:e9:7a:
                    eb:a0:87:d5:a8:a4:7b:85:9c:b6:9c:72:2d:fa:de:
                    54:28:d6:08:78:05:c0:aa:5a:c1:85:45:0f:8c:84:
                    2f:99:1d:a1:8c:34:ea:c6:80:ea:9d:6a:3d:b1:07:
                    13:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:87:7E:AB:EB:A8:99:FB:58:42:7E:6C:CD:FA:8A:89:D8:5F:34:90
            X509v3 Authority Key Identifier:
                keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:62:af:2f:55:47:2b:d9:96:e4:8a:b2:bd:56:7c:66:bc:2f:
         4d:98:ef:5d:30:8d:27:bd:74:3a:c7:16:d9:af:1e:78:28:55:
         00:43:08:b0:5b:e9:ac:b8:af:fe:d7:3c:b1:63:cf:10:ab:f7:
         34:17:0e:fd:fa:fe:8c:4f:28:1b:91:7e:7d:b6:27:17:b5:51:
         b0:96:79:4d:a0:8c:93:f5:20:9b:20:54:83:c0:7d:2d:10:dd:
         8e:08:53:8c:2a:01:66:be:f7:13:49:b5:b3:71:cb:b9:22:58:
         d8:e8:08:e8:dc:14:9a:2d:b6:ce:93:8d:d4:35:78:0a:e1:b9:
         14:a4:11:74:96:f7:09:9b:48:d1:cb:e1:72:bd:08:45:7a:a5:
         a1:58:c5:65:4c:ba:2a:e7:9c:2b:a8:e9:89:bb:e1:4c:24:e8:
         94:d3:51:8c:78:08:d8:83:74:c5:02:a3:13:1b:0c:51:4c:95:
         e4:ab:2b:7b:93:84:3e:0e:76:94:28:28:9c:97:e9:e7:59:95:
         54:d7:ff:ea:57:a7:cf:06:ad:e8:fc:53:a9:2d:fe:bc:59:c7:
         cf:09:cb:af:f2:70:f3:9e:92:0c:b3:ca:5b:59:09:a1:bd:77:
         46:88:12:93:d3:74:da:83:6f:ff:21:01:d2:07:bb:e5:78:be:
         e1:6f:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:14 2024 by rpki-client on console-ams.rpki-client.org