Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File:                     JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier:          q+v77FAld/jNpw3TkZ8V8AFWJRwnqABmFlXCndV74wU=
Subject key identifier:   3E:07:3F:53:DA:16:23:46:5E:9C:AF:6E:CA:59:AE:4F:60:6F:70:E3
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer:       /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial:       018F87B6AA9B2A355343D157B8C4164B3572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:46 +0000
Manifest this update:     Fri 17 May 2024 18:00:46 +0000
Manifest next update:     Sat 18 May 2024 18:00:46 +0000
Files and hashes:         1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: Hwpul9AfSAlPhV5U6sNYvJDg0DH7t3t3jCkLHffJfms=)
                          2: UfTZFBTcyZE1rjLtwICTjyQpbb8.roa (hash: 7FjMVTmNzUARjwpVHwPSRJ+Cg47Zw0D3KH+LLamwCCU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:aa:9b:2a:35:53:43:d1:57:b8:c4:16:4b:35:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
        Validity
            Not Before: May 17 18:00:46 2024 GMT
            Not After : May 18 18:00:46 2024 GMT
        Subject: CN=3e073f53da1623465e9caf6eca59ae4f606f70e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:7e:26:57:ed:15:12:0e:0c:a4:0e:bb:fe:
                    bb:94:96:a7:a9:ee:f0:15:87:6d:d5:85:21:34:13:
                    6d:f5:d3:3c:ac:9e:bb:1c:15:7f:4a:5d:1a:cb:7b:
                    81:23:cd:db:83:a4:c6:7a:a5:d6:f6:d0:47:5b:67:
                    e7:d9:78:3e:f8:b5:a6:e3:55:fa:6d:67:6c:9e:39:
                    6b:a3:7c:96:65:a0:bc:5e:6f:3a:aa:85:ef:44:dd:
                    d4:dc:05:0e:59:42:78:14:0b:63:4b:fa:b5:1a:a2:
                    aa:90:dc:09:12:d7:89:77:dc:c3:b1:2d:8e:aa:ef:
                    3f:f9:18:60:89:3f:f8:74:41:cf:7a:8c:69:d5:d4:
                    3c:5c:b8:1f:92:fd:5d:1c:37:8e:27:7b:26:d3:c0:
                    f7:69:fb:a1:af:69:97:fc:c4:ec:34:d8:74:39:5b:
                    83:8b:b2:b7:8c:2c:7d:50:5a:74:29:d9:28:51:01:
                    a3:1b:ab:b8:5d:62:16:e1:a5:b4:e0:71:e2:60:10:
                    da:31:bf:95:41:fa:4b:a1:4c:80:fa:e5:5a:42:4f:
                    36:5c:67:21:9a:76:05:8b:8a:89:f9:59:3b:6c:9c:
                    cc:9e:74:c1:5a:97:a4:5b:f4:cb:45:5e:93:84:ce:
                    3b:1e:c2:ff:1a:b8:36:64:cc:6c:ee:b2:b7:e2:21:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:07:3F:53:DA:16:23:46:5E:9C:AF:6E:CA:59:AE:4F:60:6F:70:E3
            X509v3 Authority Key Identifier:
                keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:5b:1f:b7:63:00:23:2b:95:c3:bd:43:0e:f3:da:4c:4c:
         ce:76:f3:61:35:60:12:8a:af:d2:c0:5e:86:c3:c3:0f:25:bb:
         bb:8e:a7:d4:38:7b:bc:8e:8f:fc:c5:1e:eb:c6:0c:20:7b:87:
         b5:21:51:f1:9f:92:78:d0:d5:32:67:21:e2:d9:6e:74:77:d0:
         dc:d6:d9:4c:7f:3c:21:95:65:e8:06:40:8a:b3:ca:8c:41:f7:
         98:85:6e:a4:f4:9d:be:a8:65:ed:f2:32:30:8f:80:11:a9:80:
         e4:f3:98:2f:0c:07:b1:6a:ba:e3:67:84:22:d3:1b:9a:5d:7c:
         14:14:f4:f8:f6:6f:9d:01:b3:6f:ca:93:df:9e:6e:68:0f:53:
         b2:04:a4:f2:b1:13:5c:9a:42:9f:7e:cb:8c:fa:ec:6d:6e:44:
         2d:e5:fc:0f:af:4f:be:7d:f5:5e:dd:f1:6c:d3:16:36:99:1e:
         30:b8:58:3d:50:8f:b7:e1:fc:90:4f:b6:df:12:64:42:56:be:
         b5:a0:56:e7:6e:af:08:cb:58:5d:0f:ef:3d:0d:f1:35:e3:54:
         ed:e6:b2:95:0b:40:ad:c9:d1:64:0f:00:75:d3:6c:b1:14:8f:
         20:b1:53:5b:e9:9f:ae:4e:a6:c4:65:73:de:fe:78:2e:15:0b:
         9f:05:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:21:05 2024 by rpki-client on console-fra.rpki-client.org