Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
File:                     ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft (raw, json)
Hash identifier:          jlK0GnOD3TlNOiAdaUFMuWRCDO4omIZXID6rY3PWV6w=
Subject key identifier:   07:03:27:3E:C6:13:9B:B8:9A:1F:F2:07:35:3E:C9:AE:BC:AC:6F:E8
Authority key identifier: 8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F
Certificate issuer:       /CN=8eeebe4a6c22d2b0fed176cb77510d9916f1811f
Certificate serial:       018FB2A14C97A1560B5019401A4FE19A68CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
Manifest number:          0473
Signing time:             Sun 26 May 2024 02:01:06 +0000
Manifest this update:     Sun 26 May 2024 02:01:06 +0000
Manifest next update:     Mon 27 May 2024 02:01:06 +0000
Files and hashes:         1: ju6-Smwi0rD-0XbLd1ENmRbxgR8.crl (hash: Uy9ArclPspiMISBQflKs6ai+YskBDSSlRE+KtN3qDfA=)
                          2: knJ3v9SuBpUggvU871xdzBEfYLU.roa (hash: e40bX06EmnEzxwP6ecyEMZb9QrUcKFNFjkQraV+6IFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 18:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:a1:4c:97:a1:56:0b:50:19:40:1a:4f:e1:9a:68:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eeebe4a6c22d2b0fed176cb77510d9916f1811f
        Validity
            Not Before: May 26 02:01:06 2024 GMT
            Not After : May 27 02:01:06 2024 GMT
        Subject: CN=0703273ec6139bb89a1ff207353ec9aebcac6fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:78:37:4f:4e:81:c9:7b:14:52:48:b2:f1:
                    1e:46:d8:59:e9:fe:d1:ed:86:ac:59:ef:ec:ad:13:
                    2f:16:85:75:2a:00:85:fb:09:5d:1b:9a:da:0e:2b:
                    e8:fb:2b:2e:5a:8c:06:5f:07:41:22:39:2f:24:c7:
                    8e:ce:9b:0f:3b:68:19:12:55:89:5f:94:cb:88:52:
                    5d:2c:87:49:ca:8e:48:0e:f8:c5:8b:7d:89:26:95:
                    ba:52:21:72:e7:06:e8:9c:9c:26:f6:a8:0b:14:f4:
                    0a:14:ed:7d:07:f5:f5:2f:38:f4:31:a2:06:e2:be:
                    79:13:fa:ce:05:33:59:74:28:fd:12:1b:e5:d3:ce:
                    c3:91:26:1b:bf:ac:d4:08:f5:90:09:03:32:77:fd:
                    3d:4f:83:75:60:6b:1c:43:73:85:55:96:3b:65:a3:
                    91:0b:1e:f1:b1:45:5a:63:8f:ad:4b:d3:e0:60:9d:
                    ee:c5:b2:bb:a3:9a:fd:13:c0:e5:47:c3:fa:92:07:
                    31:76:f1:f7:ae:05:7f:ef:74:cd:d8:77:a3:b8:83:
                    d3:6e:31:d0:c9:6b:79:a4:37:34:a0:c3:29:d7:5d:
                    a0:ae:10:5b:dd:75:f6:9e:ec:dc:e7:2d:cd:2a:9e:
                    43:1e:70:30:ff:6b:2c:e8:49:51:cd:de:c3:22:a0:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:03:27:3E:C6:13:9B:B8:9A:1F:F2:07:35:3E:C9:AE:BC:AC:6F:E8
            X509v3 Authority Key Identifier:
                keyid:8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:d4:5d:14:6d:6f:c2:0e:b5:06:af:73:71:e8:25:ef:69:
         d7:60:3d:6b:8c:50:77:07:f6:f8:f8:ea:b8:1e:4e:9d:9c:56:
         d2:8b:69:99:48:c1:06:6a:85:12:bf:c5:25:c6:5c:10:73:fa:
         76:ba:5c:1b:b6:aa:bb:8f:f9:55:7d:fb:40:68:13:16:cd:cd:
         72:34:88:88:46:34:99:97:b6:bb:1d:ba:57:24:e8:fc:f0:14:
         29:5f:18:f4:90:b2:1c:4c:e0:14:59:b2:79:2b:23:07:03:b8:
         44:68:6a:d1:cd:7d:54:4b:f6:c3:c3:04:02:da:b9:11:e1:45:
         7f:94:e3:e3:f0:cb:ec:7e:ac:a9:15:59:26:5c:20:f8:10:06:
         75:3c:4a:cf:99:ce:63:d0:7b:7f:a5:76:aa:4c:44:1d:a9:71:
         05:16:ce:b2:21:bc:25:a3:41:20:48:03:4a:11:11:77:67:32:
         0e:3b:1d:b1:6d:4b:39:b7:3d:b6:18:d6:45:dc:d0:f3:b3:81:
         5d:dc:f5:1b:f0:69:6d:07:dc:c6:9e:13:53:62:a8:df:ec:da:
         7a:0b:24:d8:58:ad:de:c9:48:e4:2b:c4:a5:ce:bc:a6:21:06:
         84:bb:24:08:a3:3c:7d:bd:23:be:1f:f5:78:f3:8c:67:44:ce:
         5d:15:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:58:53 2024 by rpki-client on console-fra.rpki-client.org