Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File:                     JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier:          id1Bkboc3ecDXrJ+srsqhKi3LNePhozuO45rckWxBC0=
Subject key identifier:   4D:74:88:6C:F3:61:5E:02:DB:79:DD:52:6C:20:12:6C:5C:A4:8C:12
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer:       /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial:       01901DEC88678E85CB7BB8582CB8F5F6C400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number:          0F05
Signing time:             Sat 15 Jun 2024 22:02:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:38 +0000
Files and hashes:         1: EGnxwDx_IuXYa659Q0tLIGCNaMc.roa (hash: s67ffbgtutQeXzHEqgNskK7GNHRCIzpjtn5rEZdJYCY=)
                          2: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: NKo/kvxkUVzX9fOoDHAc/Koce1HziHhvRfDdYfARGUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:88:67:8e:85:cb:7b:b8:58:2c:b8:f5:f6:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
        Validity
            Not Before: Jun 15 22:02:38 2024 GMT
            Not After : Jun 16 22:02:38 2024 GMT
        Subject: CN=4d74886cf3615e02db79dd526c20126c5ca48c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:7e:94:64:c2:7e:1a:51:0e:ca:c2:ba:d0:
                    a5:ce:c2:6d:c8:83:8d:ee:13:d1:59:3e:ca:fd:f6:
                    1a:87:bb:6b:53:78:c9:18:02:43:70:91:ca:30:50:
                    b8:c4:7f:ad:e9:5e:24:4e:5b:a8:b6:53:af:da:46:
                    65:8b:39:74:6b:9c:49:8b:26:e6:7a:d9:11:09:8f:
                    e6:0e:77:78:54:0a:af:f0:d1:30:4f:bf:b4:ee:04:
                    97:4c:c9:7a:a5:4b:c6:b8:4a:aa:cb:2a:76:b7:0d:
                    ba:5f:0f:e8:59:ba:43:ae:5d:95:cf:7b:1e:5b:6c:
                    89:1a:72:77:5d:77:4e:ed:36:6b:80:d2:f2:81:18:
                    5f:6b:4d:ae:aa:97:b9:3f:82:fb:63:22:89:0a:5e:
                    0c:26:d3:14:fd:15:a1:3f:a5:f8:bd:98:89:8a:31:
                    39:b6:c9:aa:b0:8f:b6:16:dc:37:ed:4c:73:84:85:
                    ed:1f:7f:dd:01:6f:e6:31:84:61:2e:81:4d:19:d7:
                    57:bb:d0:75:87:88:22:c6:b0:b8:f4:d4:71:65:45:
                    dc:3c:b8:cf:26:88:40:8d:80:d4:20:5c:b3:0f:2e:
                    43:fa:c0:37:67:0c:84:ee:fd:7c:e8:5b:b1:d6:35:
                    b7:12:17:d9:8e:37:a5:af:6c:c2:ee:1f:27:1d:13:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:74:88:6C:F3:61:5E:02:DB:79:DD:52:6C:20:12:6C:5C:A4:8C:12
            X509v3 Authority Key Identifier:
                keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:55:1d:89:c5:84:b3:8b:34:8a:9f:69:63:4e:2f:34:42:50:
         2b:4a:33:71:76:28:1a:24:7d:98:64:f5:7e:8f:47:f8:4a:bf:
         d3:21:af:1c:4c:3f:f7:40:59:4b:87:4e:f8:91:de:e9:c9:37:
         0c:6a:27:0f:68:eb:77:63:c6:c5:79:46:47:1d:ee:b4:d6:49:
         15:dd:63:97:a4:f2:a5:e4:f3:2b:ba:3f:4c:4c:26:29:bd:26:
         2a:ff:e3:3c:0a:98:81:a2:09:93:16:fa:fd:3d:76:4b:54:b1:
         35:f7:fb:32:fc:5e:4a:05:3d:7f:b0:b4:c4:3a:83:d0:2c:07:
         22:6d:b2:56:e1:ac:de:eb:0d:78:05:6e:3a:0e:71:7e:1f:e7:
         88:c6:cd:c4:17:6c:67:c8:ab:a6:bd:0a:c8:5c:8d:4c:ed:e2:
         c0:40:7a:76:84:99:0c:2d:c9:53:fd:9a:60:4b:48:98:47:41:
         77:70:64:ac:84:23:e3:11:2f:8f:60:2d:46:1c:ac:21:73:29:
         ac:62:12:88:e0:ea:a5:d8:aa:f1:15:4d:8e:46:8e:f8:c5:e5:
         42:34:0e:2b:bc:6a:37:61:fa:08:49:a8:54:e1:b2:e6:0c:77:
         06:70:94:c7:fc:73:21:b4:47:28:4a:6b:3e:bc:da:bd:c9:0b:
         14:7e:ca:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7IhnjoXLe7hYLLj19sQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw
ZjU0YzYwHhcNMjQwNjE1MjIwMjM4WhcNMjQwNjE2MjIwMjM4WjAzMTEwLwYDVQQD
Eyg0ZDc0ODg2Y2YzNjE1ZTAyZGI3OWRkNTI2YzIwMTI2YzVjYTQ4YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUl+lGTCfhpRDsrCutClzsJtyION
7hPRWT7K/fYah7trU3jJGAJDcJHKMFC4xH+t6V4kTluotlOv2kZlizl0a5xJiybm
etkRCY/mDnd4VAqv8NEwT7+07gSXTMl6pUvGuEqqyyp2tw26Xw/oWbpDrl2Vz3se
W2yJGnJ3XXdO7TZrgNLygRhfa02uqpe5P4L7YyKJCl4MJtMU/RWhP6X4vZiJijE5
tsmqsI+2Ftw37UxzhIXtH3/dAW/mMYRhLoFNGddXu9B1h4gixrC49NRxZUXcPLjP
JohAjYDUIFyzDy5D+sA3ZwyE7v186Fux1jW3EhfZjjelr2zC7h8nHRM3nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE10iGzzYV4C23ndUmwgEmxcpIwSMB8GA1UdIwQY
MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct
MTBjNzUwYzZlMzUxLzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx
LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVUdicWE
s4s0ip9pY04vNEJQK0ozcXYoGiR9mGT1fo9H+Eq/0yGvHEw/90BZS4dO+JHe6ck3
DGonD2jrd2PGxXlGRx3utNZJFd1jl6TypeTzK7o/TEwmKb0mKv/jPAqYgaIJkxb6
/T12S1SxNff7MvxeSgU9f7C0xDqD0CwHIm2yVuGs3usNeAVuOg5xfh/niMbNxBds
Z8irpr0KyFyNTO3iwEB6doSZDC3JU/2aYEtImEdBd3BkrIQj4xEvj2AtRhysIXMp
rGISiODqpdiq8RVNjkaO+MXlQjQOK7xqN2H6CEmoVOGy5gx3BnCUx/xzIbRHKEpr
PrzavckLFH7KWw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:58 2024 by rpki-client on console-ams.rpki-client.org