Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
File:                     JV_ylgEpdHxRvatuGDxg_3h6xeY.mft (raw, json)
Hash identifier:          9lcEjkDLWpf5dcoPoppOc8Qztsl5XqmjeYrHzMbUnaA=
Subject key identifier:   67:6A:9E:1A:6B:D3:82:C3:C1:39:82:6C:CE:C8:99:62:A6:0B:6F:D0
Authority key identifier: 25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6
Certificate issuer:       /CN=255ff2960129747c51bdab6e183c60ff787ac5e6
Certificate serial:       0192FA7B9455335549EFE590C91E40855EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
Manifest number:          1343
Signing time:             Tue 05 Nov 2024 04:00:55 +0000
Manifest this update:     Tue 05 Nov 2024 04:00:55 +0000
Manifest next update:     Wed 06 Nov 2024 04:00:55 +0000
Files and hashes:         1: JV_ylgEpdHxRvatuGDxg_3h6xeY.crl (hash: LjLELhT/PlmTVWe9XTywgMhu5Nr2Ge4ROXbIhvVCN/U=)
                          2: Ma8in0t_8XK703H3nf-SX9AaKpQ.roa (hash: fXg75JlYT7O6+ZmCp71evNcqvBqOIzMzozMrVBJYX7E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Nov 2024 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:fa:7b:94:55:33:55:49:ef:e5:90:c9:1e:40:85:5e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255ff2960129747c51bdab6e183c60ff787ac5e6
        Validity
            Not Before: Nov  5 04:00:55 2024 GMT
            Not After : Nov  6 04:00:55 2024 GMT
        Subject: CN=676a9e1a6bd382c3c139826ccec89962a60b6fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:61:fc:c9:a5:93:18:73:ee:90:8c:66:d3:
                    a7:43:33:40:7c:05:80:a3:88:a3:74:b6:e3:f1:7a:
                    14:2d:ea:d6:95:5e:f6:a8:ed:89:36:52:73:16:5f:
                    55:4c:59:ca:4f:fc:df:78:4a:66:93:04:92:96:1c:
                    11:6a:25:b5:d4:a5:f3:55:d7:03:61:07:a6:22:b0:
                    e1:84:b0:d1:4c:15:08:52:01:f1:6e:68:59:08:05:
                    11:c2:fb:2e:c1:7c:52:16:be:21:a0:b3:07:5b:7a:
                    cf:28:66:01:4a:b3:a2:8f:69:d1:8a:de:9b:87:6e:
                    f4:e7:c8:1f:68:25:61:ce:de:53:3d:c1:c7:12:40:
                    e6:97:44:8a:51:b9:40:03:62:80:dd:d9:ae:c8:46:
                    ee:41:7b:de:14:5f:04:3b:ac:ca:24:3c:2b:82:51:
                    a9:0f:ee:15:d7:17:92:5f:99:cc:67:cb:ea:10:44:
                    0d:95:90:4b:76:36:db:1c:f6:3b:e7:f2:eb:03:20:
                    0b:42:17:a8:c3:1e:74:41:7a:12:01:3f:4c:78:91:
                    f8:8e:5c:22:e7:1a:af:ae:e9:e1:59:d1:82:02:0e:
                    fb:f3:2d:09:51:6f:7f:32:1c:eb:98:33:63:d5:d3:
                    87:cb:e5:91:06:fe:82:0b:ab:f3:a3:49:b4:7e:40:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6A:9E:1A:6B:D3:82:C3:C1:39:82:6C:CE:C8:99:62:A6:0B:6F:D0
            X509v3 Authority Key Identifier:
                keyid:25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:09:da:cd:e6:6b:df:6f:d0:58:a5:8c:c1:75:e1:e2:8d:c1:
         49:21:b9:c7:f5:ad:de:2c:e3:e3:a9:aa:03:67:1c:15:ab:b3:
         76:bc:28:30:06:90:50:86:f0:75:10:6c:00:c9:77:55:b4:84:
         49:b4:2e:62:cb:65:d6:be:d5:48:88:b2:3a:6f:65:68:fd:06:
         e4:e1:da:d3:d4:ce:fb:44:e9:0b:8c:27:7c:5b:ce:c3:89:d5:
         d7:d4:b5:fb:3d:52:01:fc:68:b9:87:1d:4c:a7:af:32:13:bf:
         e1:f9:2b:18:0d:e4:62:22:6b:91:97:dd:a9:ce:fc:20:1b:9d:
         a0:4a:63:3e:d7:2e:f3:9b:47:bc:f4:a7:13:51:d4:05:5f:61:
         50:21:e0:bb:f0:8c:e7:e4:04:a2:83:94:e8:d3:0e:63:a8:79:
         ba:a8:d2:e0:43:98:fc:12:f1:9c:40:9f:9c:fa:7e:a1:19:3b:
         55:af:9b:07:f0:a8:7d:d2:8c:e4:28:29:a9:6f:ac:02:6a:c0:
         2f:74:f7:77:d6:cd:89:b1:0b:25:c6:64:ae:09:37:48:6a:aa:
         0a:42:f2:1c:5b:83:d1:2a:92:d2:fe:d7:1e:0d:51:bc:ed:d4:
         28:3a:f1:0d:7b:f7:a4:2f:37:9b:5f:41:77:57:19:3c:72:01:
         45:83:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 08:11:27 2024 by rpki-client on console-fra.rpki-client.org