Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File:                     jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier:          Nd4nBTUfE0YWU3GsxMLd9RGKw2t+MTucZM+Cmd2tM1I=
Subject key identifier:   19:E9:C3:9F:1F:98:CF:01:3A:EC:26:6F:47:A6:EC:9C:B4:A2:52:D5
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       0190452FD77E4C1E2AAFEF6EACA35F573C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 13:01:21 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:21 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:21 +0000
Files and hashes:         1: DkMhjhcdFBU_UX27HKMTHjO86DQ.roa (hash: XHkv/mIUMbpzQvVlhpbQ9zPXPIL5Q9RBZZ7aahs8AxU=)
                          2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: XMdi9H69/5FkUQUhO3Nq2gFXydUDipxSxu+6cfkGmSg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:d7:7e:4c:1e:2a:af:ef:6e:ac:a3:5f:57:3c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Jun 23 13:01:21 2024 GMT
            Not After : Jun 24 13:01:21 2024 GMT
        Subject: CN=19e9c39f1f98cf013aec266f47a6ec9cb4a252d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:61:4e:7c:6a:7c:86:d0:45:a8:cf:e1:78:
                    22:b0:29:22:57:17:bf:23:55:c3:c9:da:fc:43:b2:
                    24:63:70:ef:fb:e7:9a:b9:c1:3b:12:ec:3f:5b:fa:
                    f5:aa:e3:6c:dd:b8:97:56:cc:ba:c5:5a:80:92:40:
                    21:e9:d1:81:20:fd:3a:c6:84:2b:a7:2e:d5:39:17:
                    93:c2:30:3e:31:28:02:7d:59:97:2f:0f:d1:8d:66:
                    f4:be:8b:9f:0d:0d:c4:98:58:d0:85:79:32:29:1d:
                    c2:05:79:b0:8a:8b:c8:4e:de:2c:2a:54:57:91:98:
                    37:1a:99:2a:5a:2d:90:4d:23:88:f1:0a:99:50:c5:
                    72:19:f3:cf:df:6f:11:46:45:32:08:c4:b2:36:2b:
                    d7:b4:a2:7a:8b:08:b0:b5:44:17:0e:28:0a:52:9d:
                    ac:15:49:5a:de:7b:66:76:5d:5b:b5:b4:8a:aa:8f:
                    84:03:99:cb:fc:98:ff:cc:4d:69:3f:2c:6e:fe:1c:
                    03:b9:f3:78:84:11:ca:62:91:3d:b2:dd:a9:9e:fe:
                    ed:fe:6b:a2:69:2a:8c:d2:3d:28:21:f2:ff:d1:22:
                    df:c6:21:19:ff:64:74:59:0c:c4:ac:5e:eb:9a:fd:
                    30:03:4f:b8:8b:3e:3b:30:e4:c7:3c:82:7c:9e:46:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:C3:9F:1F:98:CF:01:3A:EC:26:6F:47:A6:EC:9C:B4:A2:52:D5
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:0c:ba:59:68:bc:57:8b:0d:09:be:75:92:db:d1:b9:09:
         4d:ed:db:63:f5:cc:22:6b:ad:50:6c:62:e6:c2:3f:84:0b:91:
         c9:00:43:14:3e:cd:9f:87:47:93:27:59:95:e5:a6:87:b2:20:
         d6:fa:85:42:dd:09:42:13:b3:13:14:1c:df:2f:92:4a:2c:b0:
         27:93:f6:cf:95:d4:d7:3f:56:8d:4f:1e:8a:da:98:e8:e5:07:
         7f:37:b6:f1:2a:12:95:8d:6a:13:0e:f4:ae:54:61:4a:66:15:
         1a:f6:5c:72:36:97:3a:52:ba:11:e2:21:59:9f:30:b5:56:b6:
         c6:44:ea:e9:24:e5:44:d5:d5:a1:38:0b:ea:0e:36:96:8f:87:
         2a:1f:af:94:ee:5f:c3:46:1f:fc:9e:44:d6:16:f4:fa:ab:71:
         4e:df:84:08:79:77:4b:3e:16:06:b9:20:b2:56:00:29:54:5c:
         30:2f:ac:a6:e3:38:2f:28:3f:a8:9a:6a:24:bc:6b:f9:ac:05:
         47:43:0c:96:72:11:78:4e:34:59:76:d4:8e:32:18:62:9a:5e:
         75:9a:6e:26:01:b9:2d:bd:cf:f1:9a:91:ec:4e:94:f9:25:fc:
         bc:50:87:e0:16:16:6e:1e:ff:5e:3b:49:57:28:ac:56:a8:76:
         1e:65:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:12:18 2024 by rpki-client on console-fra.rpki-client.org