Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
File:                     jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json)
Hash identifier:          gQqGwc8HVnOiw/TcoZ/TCVXKrs6DDz9Gxl8EwTZCBIA=
Subject key identifier:   22:6E:A7:86:41:21:FD:4C:8F:A1:D9:B2:21:EA:D9:86:59:09:BB:71
Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Certificate issuer:       /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Certificate serial:       018F874AA81D081FE5E143E3A59D2C9C3CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
Manifest number:          091A
Signing time:             Fri 17 May 2024 16:02:47 +0000
Manifest this update:     Fri 17 May 2024 16:02:47 +0000
Manifest next update:     Sat 18 May 2024 16:02:47 +0000
Files and hashes:         1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: 9ro6Nvak/g0hfHfm4w0crQY6SANslUqt7+fNlSZEvjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a8:1d:08:1f:e5:e1:43:e3:a5:9d:2c:9c:3c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
        Validity
            Not Before: May 17 16:02:47 2024 GMT
            Not After : May 18 16:02:47 2024 GMT
        Subject: CN=226ea7864121fd4c8fa1d9b221ead9865909bb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:bb:b3:ed:9d:26:34:98:4c:b9:df:03:b6:
                    01:d5:d8:93:20:0b:3a:95:14:fb:29:7b:a9:5d:10:
                    86:cc:53:fc:5f:b9:f7:16:2d:8e:a9:6c:da:48:d8:
                    1a:78:d1:f1:23:a1:19:b3:a1:23:a2:3a:cb:ae:17:
                    3a:61:7a:55:0f:c2:1c:f5:76:11:90:f4:a3:ff:65:
                    ce:e1:66:8f:f9:51:24:1c:39:40:68:a7:b7:37:98:
                    5c:f8:b5:e4:cd:4b:a5:81:40:50:b4:5d:66:66:e8:
                    cc:aa:8a:32:89:0b:75:6f:70:af:ad:5a:12:62:ff:
                    19:c3:4d:90:41:bd:2c:46:af:d5:53:a9:84:d0:e2:
                    b0:f0:43:cd:08:db:b5:ae:aa:f6:64:45:c6:4c:05:
                    0e:d7:00:41:81:07:62:6a:ba:19:82:0c:ec:15:bb:
                    9e:00:b3:3d:ac:b9:84:d0:1b:60:cf:92:76:be:c5:
                    15:b3:b5:e5:3a:a0:fe:61:fb:d7:58:f0:a1:99:f1:
                    3d:95:5f:8c:9e:3e:2a:e3:1f:65:fd:15:fb:ba:c2:
                    e3:fe:6b:a3:13:45:81:cd:ef:ec:22:31:8c:13:d5:
                    d1:03:15:b2:b3:a0:5a:a9:ee:77:26:d0:6e:26:b2:
                    94:f1:b1:fe:69:48:ec:50:8e:1b:95:08:9d:eb:3f:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6E:A7:86:41:21:FD:4C:8F:A1:D9:B2:21:EA:D9:86:59:09:BB:71
            X509v3 Authority Key Identifier:
                keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:27:ba:32:b1:ae:69:e2:d7:f4:49:e2:cc:88:9f:99:f8:
         e3:ff:ba:bc:e4:f7:9a:7a:d1:a1:47:fb:f0:a0:a1:cb:07:31:
         45:c8:38:25:a0:14:d1:34:e3:6b:57:ff:5c:ad:8d:fc:77:60:
         95:7c:19:05:76:7c:06:3f:70:ab:9a:05:57:ee:51:c1:88:cd:
         84:10:0d:d1:56:8e:36:f8:b5:40:31:43:1c:38:ef:5f:aa:c7:
         a1:ca:57:72:9b:1a:1b:3c:c2:51:e8:53:89:aa:8f:a9:4e:bd:
         17:a2:ec:f3:21:ee:5b:12:ea:06:d3:46:c2:76:1d:59:92:1e:
         7a:bb:18:4a:eb:4c:19:6c:c2:71:8c:b6:b5:96:45:4d:f4:06:
         15:f4:fd:db:8b:84:39:f4:c2:e7:2d:13:7a:97:0a:d5:bb:c9:
         30:c1:13:59:83:2b:1c:7f:08:50:b1:3a:9a:de:64:46:f9:83:
         9b:79:d1:21:a3:2e:d8:44:f3:f4:fc:3f:b8:b2:d4:54:c2:af:
         19:af:e3:30:08:3c:d7:9b:d4:9b:70:f0:1b:a9:23:d1:2d:e1:
         ba:21:9a:90:a7:df:37:e2:50:7c:5a:13:58:7f:0b:9a:0e:a4:
         af:df:a1:4e:ff:a1:f4:1e:6d:bb:10:f4:77:62:5f:f9:43:76:
         00:34:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:54 2024 by rpki-client on console-ams.rpki-client.org