Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
File:                     JxyaxSXAuEK79l0-xnaJcDzKMls.mft (raw, json)
Hash identifier:          8xICr++Esj+A8UHbk3gQaQiXUJSdUIvsU6hnEzdLn8M=
Subject key identifier:   3B:95:6D:C7:9A:71:5F:54:81:E7:15:AB:76:A5:42:05:91:DE:B7:4B
Authority key identifier: 27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
Certificate issuer:       /CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Certificate serial:       018F87494AC3922F46B686263EB1E2A21C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
Manifest number:          0D5C
Signing time:             Fri 17 May 2024 16:01:18 +0000
Manifest this update:     Fri 17 May 2024 16:01:18 +0000
Manifest next update:     Sat 18 May 2024 16:01:18 +0000
Files and hashes:         1: JxyaxSXAuEK79l0-xnaJcDzKMls.crl (hash: pqtNOwnTG9Qr3OL91/+efPj/S83qVdmNmf2Qk7dEpLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:4a:c3:92:2f:46:b6:86:26:3e:b1:e2:a2:1c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271c9ac525c0b842bbf65d3ec67689703cca325b
        Validity
            Not Before: May 17 16:01:18 2024 GMT
            Not After : May 18 16:01:18 2024 GMT
        Subject: CN=3b956dc79a715f5481e715ab76a5420591deb74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:e8:df:85:3f:03:b9:46:b2:5d:56:fb:db:
                    71:bc:ea:8c:fe:a1:3d:96:ca:0f:1f:f9:f7:11:b7:
                    cb:ee:08:c1:b0:ca:28:d8:aa:85:e2:76:1b:f6:4e:
                    d4:29:15:2b:ac:94:d7:b0:c5:c8:1d:bd:15:6f:83:
                    33:ff:e5:68:22:e4:b8:b5:3d:42:5d:b6:56:80:80:
                    6c:67:59:0f:64:5e:43:4c:55:02:83:94:84:2f:1c:
                    11:ed:3a:c9:6d:f1:4a:30:70:0c:5e:ac:30:57:69:
                    1d:89:66:37:0b:59:a5:ae:70:95:2d:f2:86:ea:17:
                    58:ae:a1:73:20:6b:63:c0:a6:e0:51:04:b3:7a:26:
                    3c:a1:16:f9:0c:01:f8:8c:c2:6d:32:51:23:35:95:
                    70:e1:38:d7:8b:7d:68:56:f0:d7:f5:1c:fa:f7:81:
                    2a:bb:da:39:54:41:0a:1f:4f:ac:b1:42:88:37:5f:
                    ab:31:7f:00:5b:c6:a8:1d:19:51:fd:a7:0c:5a:ea:
                    c9:9c:0c:e7:40:08:c4:f6:70:bd:87:4f:9e:d4:c6:
                    98:37:d0:d0:54:20:eb:50:6a:88:ad:8f:c0:c9:dc:
                    4b:9c:f1:27:32:b9:74:92:5e:31:d4:6f:97:09:c9:
                    bc:12:c6:57:33:8c:d8:60:b3:ad:45:0d:7a:c8:f8:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:95:6D:C7:9A:71:5F:54:81:E7:15:AB:76:A5:42:05:91:DE:B7:4B
            X509v3 Authority Key Identifier:
                keyid:27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:30:ff:a0:27:1c:25:ca:3f:a8:12:32:52:68:68:29:61:
         33:ae:de:d6:c9:2f:82:e1:e4:be:9c:4a:f0:79:e6:07:93:ae:
         33:92:93:88:95:b1:9c:2b:d1:53:b0:67:33:a9:8c:6d:5a:6a:
         6a:80:8d:af:8b:a6:d1:27:4e:7a:21:6a:ce:a0:43:e8:42:9f:
         67:80:aa:74:f3:c9:27:90:a5:35:0f:67:fb:1b:a3:f6:91:da:
         b0:fa:b3:b6:86:63:c6:d2:52:9e:f1:bf:9f:64:e8:43:72:fd:
         6c:95:e6:bd:8a:75:ee:29:d0:3a:1a:f5:89:63:be:c6:91:69:
         02:88:ae:4f:2e:8f:86:37:37:c9:51:d5:21:55:88:80:2c:a5:
         97:17:69:7c:4d:aa:a9:10:90:75:63:ae:c8:1a:8c:8f:d1:36:
         4e:44:e5:7a:ee:1f:13:5a:e7:2c:c2:1c:a3:75:9c:50:33:90:
         2b:5e:fd:eb:62:e1:b0:97:7b:c7:0a:80:3f:5e:f2:0f:f1:c4:
         c6:41:cf:58:ef:b5:60:7a:05:a0:41:ad:0a:0c:d4:10:26:a4:
         cf:26:e6:d5:35:9d:fa:7b:9a:39:1e:fe:b5:01:fe:a2:0d:57:
         6e:0e:b5:9e:90:e0:7b:71:5b:ef:14:62:7a:ac:d9:1d:88:72:
         5e:3c:32:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:36 2024 by rpki-client on console-fra.rpki-client.org