Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File:                     jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier:          UqMjP1kzBbOaRAVF/1+VfdE3D7D38jZHcX/dmH9k3AQ=
Subject key identifier:   85:67:8E:92:A1:22:40:21:F7:75:00:25:D4:41:6D:8E:72:FA:B3:CD
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       01901E8FD6784DA83644F3E318592C926283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:01 +0000
Files and hashes:         1: DkMhjhcdFBU_UX27HKMTHjO86DQ.roa (hash: XHkv/mIUMbpzQvVlhpbQ9zPXPIL5Q9RBZZ7aahs8AxU=)
                          2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: wPWk4Mr2q52c6QmH0+KwdTBnMIQPn7sjJVaMfjObRkY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:d6:78:4d:a8:36:44:f3:e3:18:59:2c:92:62:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Jun 16 01:01:01 2024 GMT
            Not After : Jun 17 01:01:01 2024 GMT
        Subject: CN=85678e92a1224021f7750025d4416d8e72fab3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:e2:02:86:09:a2:d2:6f:fa:af:a0:87:7e:
                    ab:f0:d9:76:3b:47:a5:2b:32:17:81:62:ae:de:ed:
                    6c:62:ff:0a:db:e1:cb:54:91:cb:5e:88:0e:04:ce:
                    c8:f3:d7:fc:50:b1:0c:22:25:59:11:2c:79:19:23:
                    21:ff:30:0c:7a:29:24:20:2f:d8:28:aa:2f:ac:52:
                    c7:3a:14:a2:65:ee:a5:8e:e6:44:11:13:67:88:a6:
                    0d:5e:89:61:6f:2e:67:bd:e3:f6:22:61:44:b7:1b:
                    36:80:fd:86:8d:22:7c:d2:f4:e8:0f:4e:1e:b3:a3:
                    d5:68:80:d9:79:73:f8:ff:00:c0:d7:43:ea:29:58:
                    31:d3:90:66:7d:66:a9:9a:8d:59:a3:d6:f9:6d:65:
                    d9:57:f2:a7:84:25:f3:d3:14:d6:f5:f4:c6:fa:ec:
                    73:5d:a1:f6:2d:d7:d5:d2:31:10:b1:ab:48:fd:6f:
                    71:42:b6:79:9a:24:dd:e9:6a:a2:8f:35:c6:9c:af:
                    f4:e1:1d:c6:18:34:f3:4e:0e:80:70:e9:c7:45:7a:
                    e6:f5:a5:8f:88:cd:ca:8f:fb:72:af:15:df:98:af:
                    1d:7f:3d:a9:ee:9a:b2:29:92:a1:1a:f2:c8:d1:7e:
                    2d:1d:8b:63:02:b5:66:d9:59:5c:da:eb:11:cb:15:
                    d5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:67:8E:92:A1:22:40:21:F7:75:00:25:D4:41:6D:8E:72:FA:B3:CD
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2a:5a:c9:94:14:54:ac:52:4a:1f:91:ba:c7:85:5f:96:e1:
         51:0c:a9:a7:60:68:e2:63:5f:e6:25:9c:0a:76:4b:8a:6c:ec:
         f2:bc:75:98:29:2d:c6:d1:87:ee:aa:f8:dc:0d:68:11:d4:e6:
         2f:71:db:3b:99:1f:93:7a:58:bb:d8:45:b5:18:9a:a5:37:3e:
         17:4c:3a:6d:95:a1:db:7a:04:70:6c:38:db:c5:b4:78:1b:fa:
         fc:5e:27:68:5a:ae:61:9a:93:6f:36:b3:18:1c:08:0d:2a:1d:
         e6:d4:26:49:d0:91:14:b2:99:cf:15:71:58:72:ac:f7:10:af:
         4d:2a:db:3c:ea:88:42:28:b7:f1:2a:ee:84:8d:a4:bd:24:f9:
         5f:b4:6d:b1:6f:54:d0:05:92:7a:dc:40:19:f8:48:83:4b:67:
         1c:eb:21:06:cf:1b:01:f3:e1:89:6f:3d:37:a9:f2:81:67:fe:
         28:20:d6:8a:23:d1:7e:5b:fc:ac:c5:0f:2e:71:4e:49:9b:39:
         0f:97:65:49:b1:65:df:2a:f3:3d:a2:48:7a:43:ca:32:e0:65:
         e3:b2:d7:6e:8e:a4:b7:1e:be:16:90:49:0c:9d:36:09:87:00:
         bc:f9:e8:20:5e:e8:d8:1d:3b:88:29:0e:30:bd:da:2f:fa:cc:
         ee:0a:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:06 2024 by rpki-client on console-fra.rpki-client.org