Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File:                     JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier:          EQnQGBZtFvND2n4ayUW37WeVpS2xf9GPcIutCL9F3yA=
Subject key identifier:   09:F1:B8:40:A6:66:2A:0D:B2:28:A3:C9:B7:22:52:77:FC:EB:B4:0C
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer:       /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial:       018F877F38823478C06A0D21387E0B3C7F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number:          0133
Signing time:             Fri 17 May 2024 17:00:12 +0000
Manifest this update:     Fri 17 May 2024 17:00:12 +0000
Manifest next update:     Sat 18 May 2024 17:00:12 +0000
Files and hashes:         1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: pz0XscpeHPHRlyMzOTNEjJ/qH+YTOwjTTOlYW/RVt+c=)
                          2: n9LAXfZDNFjDyb4joQvozQroWWY.roa (hash: 0HlAsWkK2KkyLx9Y80XyFC344Mlgr1xICQvBNX6adas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:38:82:34:78:c0:6a:0d:21:38:7e:0b:3c:7f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
        Validity
            Not Before: May 17 17:00:12 2024 GMT
            Not After : May 18 17:00:12 2024 GMT
        Subject: CN=09f1b840a6662a0db228a3c9b7225277fcebb40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:67:ab:cc:fa:ff:e4:13:71:00:8c:38:b0:
                    1a:86:c6:36:6d:a8:fd:b4:ec:09:22:56:0e:71:dc:
                    d2:a2:a5:24:15:d7:d6:de:6a:cc:29:25:26:4d:09:
                    5e:68:14:1f:75:7d:59:5a:ea:86:6d:4b:69:2e:e9:
                    6b:57:3f:1e:98:9f:d7:c7:f6:e3:b8:c2:be:9a:4b:
                    f3:e9:0a:18:10:cc:67:ec:19:ed:f7:7c:9a:c6:c8:
                    49:6c:0d:a9:af:88:55:eb:24:f1:53:60:b2:76:6b:
                    21:91:5c:bd:ca:7e:76:df:f0:40:81:f7:b1:a2:37:
                    d9:32:d9:d8:a7:53:f6:54:69:d9:30:d1:65:fa:ff:
                    80:3d:e4:86:fc:79:05:06:77:bf:98:13:bb:13:cf:
                    2f:26:23:ff:73:6f:19:4f:f0:f6:94:03:ad:79:e1:
                    e5:60:29:cd:d8:ec:8d:95:77:2b:83:03:5d:36:77:
                    57:a8:1d:bd:96:35:21:9b:05:45:04:eb:cf:33:d5:
                    a9:4f:4d:ac:60:a5:ca:46:d0:ec:33:9e:25:88:01:
                    c0:7b:25:c1:08:84:e9:29:9c:64:7e:1f:16:4f:1b:
                    81:66:57:44:28:b9:fa:f8:38:04:2a:1d:88:6e:7c:
                    73:29:4a:b6:16:a7:0a:a0:b6:a3:a2:8c:90:03:f6:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F1:B8:40:A6:66:2A:0D:B2:28:A3:C9:B7:22:52:77:FC:EB:B4:0C
            X509v3 Authority Key Identifier:
                keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:09:ff:84:78:07:ad:07:18:f0:8e:db:c7:29:7b:9d:5f:
         c7:f9:59:8e:f6:9c:93:c2:d2:f7:0e:dd:f2:ec:bd:7b:cd:42:
         fe:79:10:c3:c8:04:a8:ec:46:ee:18:5b:a8:a2:10:ac:87:ca:
         26:b5:37:71:e4:7b:21:87:b3:01:d8:4f:ff:81:e1:a7:8a:f7:
         cb:e0:07:48:3e:23:ee:ef:3a:d9:1c:ac:1b:94:f6:ea:ea:87:
         6e:94:ba:22:47:ef:38:ad:13:48:f5:24:4e:ca:49:5c:4f:f3:
         2e:43:11:6d:8f:b5:5e:e5:2c:3c:c0:91:19:1d:d4:84:91:d3:
         e9:fe:76:27:c9:b0:ed:35:da:63:30:e1:87:6e:34:34:b1:e1:
         85:21:1d:b3:fc:2c:41:dc:8b:d1:51:6a:e3:76:68:a1:1e:3b:
         8f:e4:dc:df:b9:c0:61:cf:37:bd:7e:52:21:b4:98:c1:f5:d8:
         43:0d:4a:f8:25:7f:a5:47:8c:0b:85:53:89:4a:c8:7e:bf:1b:
         71:3c:b5:58:c3:9f:a6:cd:3d:b8:8b:77:aa:54:a8:d9:99:d8:
         8d:16:1f:8a:9a:59:48:35:00:81:0d:75:b9:69:dd:98:60:3b:
         f8:63:0e:a5:1b:5e:0c:24:74:c2:74:8c:63:56:38:a8:99:29:
         53:73:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:48 2024 by rpki-client on console-fra.rpki-client.org