Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File:                     _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier:          y0jcT552sxFcP4fha96dNPwgVAzbXyQrt5pF2dJdNuM=
Subject key identifier:   B8:61:35:FA:9C:AC:4B:53:E7:53:51:10:09:DF:99:A8:3E:AC:C4:A1
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer:       /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial:       018F9C871A993596388FD740FA65052E3E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number:          1115
Signing time:             Tue 21 May 2024 19:00:50 +0000
Manifest this update:     Tue 21 May 2024 19:00:50 +0000
Manifest next update:     Wed 22 May 2024 19:00:50 +0000
Files and hashes:         1: VWHRbqIy4bfIL78tnNOYHIfWvdE.roa (hash: TCeJgsSlDW+eStYSkIG5Nfk70oMr77Z8LtEtvfCCZew=)
                          2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: NGQ7aW2sQ4qlKWoWxp/ZZhSS4mNTJ5QVgU4K+LeZq+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:87:1a:99:35:96:38:8f:d7:40:fa:65:05:2e:3e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
        Validity
            Not Before: May 21 19:00:50 2024 GMT
            Not After : May 22 19:00:50 2024 GMT
        Subject: CN=b86135fa9cac4b53e753511009df99a83eacc4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:87:ad:18:ac:ab:90:93:12:02:2e:c1:1e:
                    7f:97:20:18:8a:ea:39:f3:2a:97:ed:0d:9e:5a:cc:
                    d6:5b:8a:18:62:e7:1e:5d:3a:e1:e9:6a:98:0e:2e:
                    2f:7a:da:8d:24:f6:47:9b:ad:8f:8f:26:e3:1a:d5:
                    13:62:b3:42:59:c8:83:fe:77:ab:7e:1e:08:53:a1:
                    9d:d3:ce:9b:81:9b:5c:3c:85:48:8f:2b:ce:9c:fc:
                    1a:f7:d1:4b:45:c0:ec:d2:9d:41:0c:10:57:3d:57:
                    c1:ae:9c:72:38:04:48:c2:38:e1:b2:ab:14:61:b8:
                    60:52:ad:e9:35:30:06:8c:28:2b:ac:48:00:54:95:
                    77:83:eb:f0:4a:a8:26:f2:3c:c6:2d:b8:e2:ab:d1:
                    da:a8:96:c3:c3:8d:92:36:1f:79:3f:b5:a8:9e:eb:
                    75:12:ae:81:6d:5f:60:5c:7e:78:c9:77:6a:d7:df:
                    c2:5e:60:90:80:d9:ad:58:18:c0:0c:60:bc:66:b2:
                    f9:3b:c5:56:fb:8b:64:1c:92:5b:cc:b4:b3:47:3c:
                    63:8e:c1:c7:5a:88:29:9d:ba:f9:6e:3e:e8:19:f6:
                    c9:a4:a7:1a:52:e2:83:74:25:f7:ba:8d:6b:de:e5:
                    a1:f3:8c:bf:46:00:c7:5e:bc:5d:58:df:25:af:01:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:35:FA:9C:AC:4B:53:E7:53:51:10:09:DF:99:A8:3E:AC:C4:A1
            X509v3 Authority Key Identifier:
                keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:03:9e:57:59:47:2a:ea:c8:c1:35:4e:bb:cf:10:8b:5c:23:
         73:c3:9c:b9:cc:e0:32:ea:e3:e9:df:41:76:af:8c:76:35:fb:
         2e:2c:7a:0b:6d:cf:7a:24:06:e9:66:a8:80:c1:db:d2:88:a2:
         ae:d0:ec:01:22:d9:db:bc:48:19:e4:e2:77:2b:17:07:c4:96:
         ce:06:ae:07:ff:21:a0:88:3f:59:91:e6:0e:42:ad:90:dc:14:
         ee:5a:4a:c2:ee:e6:9a:fe:9f:2b:ad:2e:90:fa:f0:66:fa:3b:
         74:2d:a4:0e:b8:bd:62:e1:54:7d:a0:f5:cf:1d:20:26:2d:9d:
         f3:e5:a0:cc:ad:60:02:b8:15:f6:bf:d0:87:c6:6e:24:65:c1:
         9f:5a:8f:60:7c:3a:e6:4f:6d:c4:61:79:8e:fd:52:ad:37:60:
         73:1a:85:f8:d9:a4:78:e7:e1:6b:3b:b1:f2:27:de:f0:fa:b5:
         3b:6f:91:25:ec:df:cb:6d:0e:f4:dd:37:09:e4:5b:1d:89:e1:
         14:e4:8d:3f:2d:16:ce:24:8c:6c:e1:19:cb:71:00:44:c1:41:
         30:0b:5f:03:a0:71:09:73:ca:b5:b8:5a:78:66:60:59:29:a8:
         44:08:24:74:7d:5a:8d:f5:12:a4:a0:00:70:f6:be:ce:2a:d9:
         2e:bc:f3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:52:30 2024 by rpki-client on console-ams.rpki-client.org