Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          jPa5nu6iLLla6PlEFyUJrlrHp12EN19XxznKNn+I7jo=
Subject key identifier:   18:62:37:28:7C:D3:75:41:36:5E:91:0C:54:A0:38:36:4A:24:CC:22
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       018F87ED01363AEF2C5E81D9C2811FED1F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          C2
Signing time:             Fri 17 May 2024 19:00:07 +0000
Manifest this update:     Fri 17 May 2024 19:00:07 +0000
Manifest next update:     Sat 18 May 2024 19:00:07 +0000
Files and hashes:         1: 3Oe23J5XEbSORNxVhcIVHe9-afU.roa (hash: 98DXag6o3ByqrW8I+WSexLaKTGhk7jo7LPb1S443zhg=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: gYXeRgRiBemNHIE6n7qCNogXop7rFrRRlbQNQI1ZIhA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:01:36:3a:ef:2c:5e:81:d9:c2:81:1f:ed:1f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: May 17 19:00:07 2024 GMT
            Not After : May 18 19:00:07 2024 GMT
        Subject: CN=186237287cd37541365e910c54a038364a24cc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:1e:0c:3e:e9:11:81:be:cd:38:15:2f:e6:
                    f7:61:3c:88:2c:d8:b4:b7:75:01:79:a5:11:12:f4:
                    f3:88:02:b1:91:70:0a:20:a6:cf:c9:02:9f:f6:33:
                    01:8d:68:e6:95:f8:3d:c5:d2:76:26:20:b8:04:8a:
                    55:f9:55:ed:a1:80:d5:6c:83:fb:ef:f0:0a:75:a1:
                    4a:58:00:d1:6a:cb:79:25:53:6b:26:0f:76:f4:6c:
                    55:90:35:ce:04:3f:a2:a0:18:6e:6b:66:2d:6d:04:
                    4f:68:7b:37:a3:24:75:43:36:aa:be:0e:7e:18:4c:
                    38:d6:ed:87:51:66:be:b5:56:16:01:f8:42:9a:be:
                    35:08:e8:79:0a:17:18:14:35:48:7e:64:e2:eb:ae:
                    b3:da:29:a2:ff:f2:82:c4:06:e4:3e:b3:12:66:4c:
                    41:2a:47:95:43:da:26:de:dd:6a:68:1a:e4:1c:40:
                    e2:7e:47:8c:76:1d:f0:d5:3d:56:f1:05:6c:89:66:
                    c8:a9:c2:84:3a:e5:3a:f7:6c:79:68:f8:4f:64:c5:
                    7b:fc:42:b1:6a:65:cb:ee:6c:d1:f2:97:61:5c:d0:
                    7b:10:a5:16:5d:b6:52:a2:06:73:0c:a4:de:7d:0a:
                    72:d6:ec:de:f3:23:cd:ee:8a:ce:3d:b6:c7:dc:bd:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:62:37:28:7C:D3:75:41:36:5E:91:0C:54:A0:38:36:4A:24:CC:22
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3f:d0:5c:3f:e8:14:e2:9a:0e:20:6b:b2:4b:6e:67:13:bc:
         48:eb:af:09:fa:a9:e6:9e:70:44:9b:a5:03:3f:7a:7c:02:33:
         87:ad:77:ac:cc:9b:2f:eb:43:b3:51:71:94:a7:dd:57:e2:d6:
         cb:3d:d9:13:32:76:1b:20:8f:0e:12:f4:09:83:eb:27:17:5f:
         94:09:86:9b:13:c1:ee:fd:90:69:cd:23:ee:ce:0c:af:e7:97:
         fc:5f:07:35:45:9b:95:4b:04:f2:6e:da:3c:45:5d:d5:4f:d9:
         f5:53:7f:d8:12:d4:cb:7f:22:f5:2d:d1:76:c0:3f:71:95:de:
         ea:bf:8d:64:8e:71:ab:ce:df:45:bc:84:0c:13:c8:a9:7a:e5:
         f9:8c:63:0d:df:95:f3:e8:41:60:d4:89:27:65:70:d5:23:3c:
         9b:04:3a:b5:ba:63:7a:a1:71:5b:5f:02:85:a5:f0:61:4f:e1:
         99:ad:4f:f2:0d:6a:c5:1b:68:db:1b:cd:90:d8:52:f2:87:43:
         72:7d:4c:6f:f5:71:a2:36:cb:cd:4d:0f:7e:87:64:30:3b:4a:
         0a:48:35:7e:29:e3:97:b9:99:ee:b8:a5:18:03:e5:02:fe:24:
         71:4f:03:a7:68:52:75:fd:89:08:e4:a5:25:37:f2:6f:35:98:
         7d:76:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:09 2024 by rpki-client on console-fra.rpki-client.org