Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File:                     JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier:          Gh7U4o3K040ATJlhA5078Hk3tkyekNcgmxqLLUrDh3Q=
Subject key identifier:   65:18:F4:75:6E:7B:A0:AB:EE:69:02:13:0F:31:63:B9:B4:BE:02:63
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer:       /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial:       019041C0C9E719B342C61460787D15DD71B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number:          8F
Signing time:             Sat 22 Jun 2024 21:01:11 +0000
Manifest this update:     Sat 22 Jun 2024 21:01:11 +0000
Manifest next update:     Sun 23 Jun 2024 21:01:11 +0000
Files and hashes:         1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: 1HrHlBJLiMyOrUG9zXZb5A9g6hCEEiFqU7KovqmI6aA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:c9:e7:19:b3:42:c6:14:60:78:7d:15:dd:71:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
        Validity
            Not Before: Jun 22 21:01:11 2024 GMT
            Not After : Jun 23 21:01:11 2024 GMT
        Subject: CN=6518f4756e7ba0abee6902130f3163b9b4be0263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:b3:c0:52:b4:6d:53:97:26:ad:2d:ee:f3:
                    0b:29:b4:40:da:4f:f9:45:1c:dc:30:08:59:5f:c5:
                    8b:6b:d8:6b:f2:12:ba:31:62:32:74:9a:19:5e:13:
                    e6:17:dd:96:59:e2:1c:27:8f:a4:25:20:9c:27:87:
                    00:39:39:c4:e5:86:a3:81:40:f9:ae:16:8f:87:50:
                    14:65:90:43:ce:96:e8:22:a5:ff:3b:34:55:c1:01:
                    57:84:90:28:0e:58:50:8d:68:d8:4d:79:4e:4c:2c:
                    b1:29:9b:a8:8e:33:df:55:d1:3d:8e:8f:3c:30:43:
                    d6:b8:04:ea:a7:03:12:ff:87:30:1b:a3:09:8f:c8:
                    01:2f:0c:f7:f5:8c:ca:c9:3f:66:6d:73:a7:a8:71:
                    f5:25:2e:79:68:fb:44:8b:65:df:82:11:9f:6a:f5:
                    e6:62:bf:eb:14:07:20:df:a0:c2:9f:34:ab:a8:d0:
                    8f:1b:e8:80:83:7e:92:11:46:9e:a3:a9:c9:48:aa:
                    53:e9:cf:0f:38:a6:a8:d3:fd:34:4a:8d:5a:88:69:
                    21:77:7b:0d:b7:9b:be:7f:c6:f3:3b:94:2d:a6:08:
                    7b:e4:5b:25:63:04:07:5c:a5:87:7d:a5:0d:13:99:
                    bb:f6:49:48:d2:8d:00:6d:f0:11:80:0f:37:ab:1c:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:18:F4:75:6E:7B:A0:AB:EE:69:02:13:0F:31:63:B9:B4:BE:02:63
            X509v3 Authority Key Identifier:
                keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:62:96:6f:fa:6c:7f:3c:1d:d0:6f:14:60:ec:66:58:7a:b6:
         52:4c:86:00:7c:a7:a3:03:60:f3:3c:e4:27:df:e1:2a:0f:43:
         52:16:a3:d5:07:cb:da:93:4b:f0:0c:a8:b9:a0:1e:b3:f7:cf:
         57:24:06:09:b4:3d:87:22:09:6d:fd:38:79:31:f0:8c:27:c8:
         96:bf:4f:32:e8:e7:c9:d3:93:6f:f3:92:7e:0b:79:6f:71:a8:
         98:6a:fe:07:85:37:19:ae:85:4a:fa:68:87:91:0b:81:4d:78:
         5a:cf:0f:fa:98:67:d9:00:73:72:b1:8e:75:40:ef:4a:67:ff:
         8b:1c:31:cd:38:8f:b5:1e:af:a8:9f:7e:93:c3:cf:ea:ca:15:
         67:70:bf:3f:c9:73:57:c3:f7:f0:69:be:70:5a:c6:e7:8b:36:
         5f:e0:22:6e:32:61:d1:bc:60:3f:68:d9:e7:cc:56:db:1c:47:
         26:55:2b:36:2b:2f:39:83:65:0d:98:c3:a2:a0:2d:63:43:6b:
         5e:03:5a:eb:7f:59:69:a1:6d:56:79:91:b6:0e:e5:ad:94:35:
         c7:00:c5:d2:42:ab:f5:cb:6c:a7:23:92:79:30:34:e5:e5:2c:
         1a:b8:62:00:a5:22:bf:84:54:64:35:15:df:e9:41:0c:91:dc:
         dd:a3:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:06 2024 by rpki-client on console-ams.rpki-client.org