Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File:                     jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier:          H+LgPIX21LWtlGaDyBoFNXnWtTJLzDVNHtTbM15yQN0=
Subject key identifier:   D3:AE:05:FC:2E:F3:7D:BA:AD:BE:9A:B8:48:B2:C8:04:05:98:8F:63
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer:       /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial:       01901D466FB635E5AE441964084DC4B2A0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number:          0481
Signing time:             Sat 15 Jun 2024 19:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:13 +0000
Files and hashes:         1: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: jadjtMSZpAcxe57d4kGD/IZCKY6VGDmgEsnf60+T9tk=)
                          2: keApGoX20Fi5wT691V2viEmsicg.roa (hash: xrM5+BP/GhlptQq/JHKSnVxaEn/uhlYwm+DGu3cE998=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:6f:b6:35:e5:ae:44:19:64:08:4d:c4:b2:a0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
        Validity
            Not Before: Jun 15 19:01:13 2024 GMT
            Not After : Jun 16 19:01:13 2024 GMT
        Subject: CN=d3ae05fc2ef37dbaadbe9ab848b2c80405988f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:fd:d8:0a:66:28:33:b1:58:23:5c:e5:02:
                    97:08:58:e2:b5:5b:8a:33:14:9b:03:b4:ab:c9:b2:
                    b9:b9:27:0f:d5:37:d0:c3:da:4c:5d:63:30:fc:33:
                    7b:b2:7f:83:96:02:34:d4:3b:c8:de:36:e5:cc:95:
                    70:ec:c5:3f:c3:60:7b:62:67:7f:51:a7:c0:27:21:
                    f5:42:82:70:72:fa:fc:6e:dc:65:09:c9:ef:5d:c0:
                    97:5e:bf:fd:73:68:fb:75:16:24:51:b0:89:60:73:
                    cf:7a:9e:44:1b:65:58:12:c0:0c:b1:a6:5c:84:d3:
                    9c:e0:53:3c:67:79:5f:1f:62:ab:46:a8:09:3d:17:
                    c4:6d:e1:b8:8e:b6:32:b4:76:14:79:5d:6d:7c:62:
                    7d:eb:aa:15:ac:0b:26:c5:3c:18:0e:55:ca:20:00:
                    19:98:b7:27:a5:9a:b6:93:2f:fb:2d:32:8a:16:6f:
                    07:d4:4d:53:ed:73:1a:d4:87:62:f5:54:83:23:06:
                    d2:ba:69:0b:7a:ed:f8:b5:51:58:4d:54:1c:f0:89:
                    c0:3d:11:4f:74:bc:1b:35:95:d4:c6:00:3c:a3:e3:
                    71:cc:b6:55:7e:a4:f8:98:84:87:f9:e5:93:21:cc:
                    c8:61:8a:2a:69:ef:c8:61:bc:dc:da:f1:89:bd:ee:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AE:05:FC:2E:F3:7D:BA:AD:BE:9A:B8:48:B2:C8:04:05:98:8F:63
            X509v3 Authority Key Identifier:
                keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:54:24:7f:e0:5a:1b:59:c6:1e:2a:be:0b:83:3d:38:14:4c:
         4b:02:fa:46:e4:a7:7f:3a:f8:20:93:d1:44:e8:27:23:c8:4d:
         2d:96:6f:f9:5d:e4:1c:33:61:27:c9:ec:a7:3f:cf:02:73:58:
         ad:b7:04:3a:f9:3f:88:3d:dd:4e:15:26:68:75:d9:89:71:0c:
         38:2c:e5:54:de:a9:8f:c4:e3:67:cb:69:db:ef:b8:e9:4e:67:
         13:44:0c:72:ce:c3:85:36:59:e0:81:8d:c7:9e:2c:03:48:fb:
         0c:bf:d8:e1:bb:f8:dc:b7:d1:7e:4d:2d:e1:26:d2:39:74:4f:
         d3:a4:5c:55:c5:c4:46:88:dc:ff:a3:55:06:48:0b:97:f7:10:
         0f:dd:2e:05:de:3d:5e:3c:42:ab:14:49:2e:e3:0e:ea:eb:56:
         e9:ae:59:89:e6:18:7a:ff:21:31:c5:da:e7:25:03:a4:b8:0b:
         ea:c4:f1:04:1d:8f:c1:f2:30:d7:e7:9a:98:bf:6e:44:d2:a7:
         a6:e4:9a:b4:04:cf:bd:8e:ee:c3:9d:9d:a5:c8:6d:f1:d2:50:
         d5:97:43:93:00:27:6f:7c:73:fe:54:fc:cc:25:12:ab:fd:bd:
         01:f7:b7:3d:93:09:c8:49:46:e1:cf:af:b0:10:18:73:e7:00:
         24:f0:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:51 2024 by rpki-client on console-ams.rpki-client.org