Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File:                     jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier:          +nJrO6JDMdc/kEaUJeg251BLyFrcSL4lCspVxoGo3Xs=
Subject key identifier:   1C:AF:47:FA:9E:89:3F:2B:69:14:C6:C5:B7:0A:36:BF:F7:87:68:62
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer:       /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial:       018F874AF3A0E15F1538A30C37F1BB1B6866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:03:07 +0000
Manifest this update:     Fri 17 May 2024 16:03:07 +0000
Manifest next update:     Sat 18 May 2024 16:03:07 +0000
Files and hashes:         1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: kxW9mVEYq2MJD7ZnZbUg0o2s7wapa4QBeYCLyXlYRu8=)
                          2: sWx47EgK5Rc6Vb_KNXhSp-_4P9w.roa (hash: jaErkMHr+C5TyJngDeUUuPrv56tkpba5uQucvVVXnIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f3:a0:e1:5f:15:38:a3:0c:37:f1:bb:1b:68:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
        Validity
            Not Before: May 17 16:03:07 2024 GMT
            Not After : May 18 16:03:07 2024 GMT
        Subject: CN=1caf47fa9e893f2b6914c6c5b70a36bff7876862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:18:ba:0e:3c:4c:e0:e0:c9:11:8d:94:1f:
                    ee:f6:89:56:95:fa:79:d7:74:f8:b5:35:a3:f7:74:
                    aa:93:0f:34:b7:54:c4:b4:b7:40:38:e6:4e:6c:0a:
                    b5:f9:32:c1:dd:10:8e:fa:12:bf:9d:71:10:44:15:
                    26:f5:15:76:75:f8:44:d6:c1:cc:fc:d3:b9:29:ce:
                    e1:80:87:06:30:87:77:a0:be:4c:12:7e:82:a1:e0:
                    2a:c7:d3:ff:41:6c:21:11:30:fb:d1:fd:c5:99:6a:
                    92:77:45:f2:e3:f4:be:4d:2a:80:f2:f9:46:a5:75:
                    5c:ae:5c:07:40:56:ed:09:3e:64:d2:75:b9:3f:05:
                    1a:2e:b3:ef:2c:0e:2b:96:92:56:af:65:ed:ed:d8:
                    81:ea:87:4c:be:42:99:71:33:22:9b:c5:46:69:69:
                    3d:40:e8:b6:65:18:e2:73:e0:1c:05:c8:95:9c:42:
                    50:c9:58:f9:b3:a6:2d:37:e1:85:7e:a8:f3:39:ec:
                    80:4e:5b:7d:b4:6b:d5:54:30:f8:be:f4:91:50:e0:
                    3b:23:71:7e:a2:60:39:cc:82:a8:c6:ab:f9:a4:13:
                    6c:67:ea:04:02:a2:8b:69:1a:68:ef:3c:92:d7:11:
                    e4:49:3b:d1:f0:1f:41:35:09:ae:3c:a5:0f:0d:c0:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AF:47:FA:9E:89:3F:2B:69:14:C6:C5:B7:0A:36:BF:F7:87:68:62
            X509v3 Authority Key Identifier:
                keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3d:28:2f:8e:2f:f5:c4:31:df:b1:69:54:bc:c5:c8:7b:84:
         75:88:98:61:f0:49:97:28:e3:1c:bc:94:ba:63:04:9f:27:79:
         9e:85:c1:ea:51:ae:e7:ad:fd:b1:0f:78:ee:0c:c2:25:81:e0:
         6b:48:e1:27:f3:c3:eb:57:d0:00:cf:e7:f9:bf:c5:01:9b:25:
         cb:83:df:85:bf:79:11:cc:8a:a5:13:99:01:78:ce:1e:92:51:
         30:75:9e:86:90:39:00:2a:a9:5f:81:a9:ab:55:aa:dd:51:2a:
         58:13:e5:c7:90:62:49:f3:c0:84:fe:66:ff:9f:64:dd:99:43:
         09:23:0f:1e:07:51:71:98:d8:7b:1b:26:ac:1a:6c:d0:ef:c1:
         2c:b1:93:79:b4:88:45:84:1a:ef:b1:6e:d6:d9:d1:a3:00:7b:
         14:da:fb:6b:c7:c0:63:6e:60:ae:ae:9c:c4:e1:7a:88:2d:00:
         f1:65:a1:8d:0a:28:8d:f8:e1:40:64:45:9c:33:ac:52:62:77:
         28:83:5d:e1:af:23:c4:86:4e:b2:a7:d7:d7:6b:6b:2f:16:99:
         06:6c:2b:23:52:9b:eb:b6:a3:01:7e:28:da:0b:d1:27:6b:25:
         cd:eb:d0:2c:dc:46:72:7d:b3:84:e6:ba:55:8a:e0:f5:58:2b:
         41:14:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:18 2024 by rpki-client on console-fra.rpki-client.org