Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File:                     jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier:          +FS0AFAhiiauSZpxDzMKgF/qo158FyTD/Snb5K70d0s=
Subject key identifier:   2F:C4:99:E8:61:03:81:3F:9F:07:A4:E6:2E:83:96:64:D8:2D:38:DA
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer:       /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial:       018F8C012FC27CB43A5DD6DCFED15B9A1F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 14:00:38 +0000
Manifest this update:     Sat 18 May 2024 14:00:38 +0000
Manifest next update:     Sun 19 May 2024 14:00:38 +0000
Files and hashes:         1: 28sYzr6HlrUfyxwjjh8ERZZsoLY.roa (hash: OeyX3pMkG5v2yI2ClLjBwXa/3mCRuPeoxeZU0e/eXlw=)
                          2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: Gv6x53D8qKm8Q12pqkvXlOUZFar1NmWkhfth657Gtm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:01:2f:c2:7c:b4:3a:5d:d6:dc:fe:d1:5b:9a:1f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
        Validity
            Not Before: May 18 14:00:38 2024 GMT
            Not After : May 19 14:00:38 2024 GMT
        Subject: CN=2fc499e86103813f9f07a4e62e839664d82d38da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ba:86:d5:b9:02:1d:35:20:5d:d1:33:ee:c3:
                    1e:7a:6f:a8:ee:4b:ad:a5:bd:28:c0:d9:95:14:8e:
                    2b:83:28:4a:cd:d6:f5:48:0c:c4:a5:53:a7:fd:b7:
                    81:e5:7e:1c:fc:e2:f7:e4:79:2a:8f:d8:af:d7:a9:
                    d4:14:21:a3:6c:ef:e7:d4:b8:f5:ee:2c:d5:67:15:
                    d3:c5:9c:db:7d:87:db:9f:7a:d8:05:bc:c6:52:85:
                    58:79:ec:dc:09:7b:1c:01:a4:75:a2:24:05:8f:b9:
                    fb:0c:e8:e2:28:eb:e1:f4:c5:66:d9:10:d0:c3:b8:
                    5d:9e:72:7b:66:03:f7:2a:cb:bb:05:31:13:16:59:
                    a2:1a:58:13:9f:58:43:b6:d1:09:94:be:b6:ba:2b:
                    1b:fe:26:53:c9:ea:a9:50:8a:4a:82:ac:72:89:ed:
                    d1:6f:95:6f:8b:c2:3a:7e:40:83:25:d0:19:5d:b2:
                    99:9c:89:1a:db:ed:be:0a:08:45:df:25:52:02:7b:
                    7f:09:f0:d4:1b:5e:69:e2:3f:6b:fd:9c:7c:0a:bc:
                    60:58:26:13:70:bd:ee:d3:8c:2e:3e:7e:2d:b5:14:
                    7e:d3:79:7e:bd:3e:bb:b5:43:44:79:24:9f:e8:a9:
                    78:13:7f:c5:9c:17:30:55:36:c4:b4:bb:c8:2f:90:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:99:E8:61:03:81:3F:9F:07:A4:E6:2E:83:96:64:D8:2D:38:DA
            X509v3 Authority Key Identifier:
                keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e0:7e:bd:68:d5:99:38:a0:14:ae:d6:91:48:d9:d7:0f:65:
         4d:fc:b7:ec:8f:6b:6f:52:05:c6:c3:b5:12:9c:13:17:78:fa:
         7d:36:5c:6e:b6:16:3d:68:3c:57:e0:d2:10:f5:70:97:ee:b2:
         6e:a2:73:65:95:97:82:43:b3:c8:4b:27:c3:b6:98:42:bd:d6:
         c5:26:8b:2a:e3:69:e6:e3:42:ca:5c:fe:98:7f:a8:40:dc:54:
         70:ae:b3:2a:b4:e5:3d:be:db:ef:9f:62:8c:30:b2:67:8e:a6:
         dc:54:36:a0:28:0d:d5:a5:f9:7d:e1:ea:aa:2c:e3:c3:ac:a8:
         e1:59:76:6e:c7:02:8c:d9:32:51:d7:6c:5a:da:e3:21:32:92:
         8b:9b:6c:c0:4c:0e:cb:2d:de:d0:a9:1a:e4:10:52:49:ac:8d:
         2a:20:43:af:fc:5f:d4:14:69:87:11:d3:b7:6c:d4:ba:0b:39:
         34:eb:5c:5e:08:96:30:92:04:cd:86:c1:ef:66:05:2c:26:4f:
         b0:48:0f:a3:8d:ed:4e:7f:45:f8:e5:67:7a:7d:bc:bc:1a:21:
         ae:02:eb:f3:18:2f:06:3e:38:a6:2c:fd:13:18:7e:bf:fc:ff:
         40:2d:ba:d9:63:9a:62:0f:ef:1e:07:43:a4:7b:6e:16:9c:99:
         67:64:9b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:42:41 2024 by rpki-client on console-fra.rpki-client.org