Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
File:                     jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json)
Hash identifier:          ZD1uwYL8FDy9ELC+6dkRyDDx7u/KlMjMMYUgHzG2Rzs=
Subject key identifier:   5B:33:32:74:F8:B6:CE:65:8E:66:C9:9E:8F:FE:9A:17:E9:12:87:67
Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
Certificate issuer:       /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Certificate serial:       01923ADDB3921A5D69C22ED06A2B7007B2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
Manifest number:          36
Signing time:             Sat 28 Sep 2024 23:01:00 +0000
Manifest this update:     Sat 28 Sep 2024 23:01:00 +0000
Manifest next update:     Sun 29 Sep 2024 23:01:00 +0000
Files and hashes:         1: 0olqnyOo0nUVh1ilCqapAJXTxGo.roa (hash: QbTOs16h4O3NAsC3Tw1vvuOWffwH1LUoNZ7NKT8DzBo=)
                          2: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: apr20JyfMz3VSOhhaI2nKbKKIB64Sww48qypYD8jnG4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:dd:b3:92:1a:5d:69:c2:2e:d0:6a:2b:70:07:b2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
        Validity
            Not Before: Sep 28 23:01:00 2024 GMT
            Not After : Sep 29 23:01:00 2024 GMT
        Subject: CN=5b333274f8b6ce658e66c99e8ffe9a17e9128767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2e:13:1d:d7:67:0b:12:66:42:56:24:f3:c1:
                    3b:fe:6e:c3:2b:ff:fb:92:f9:87:92:04:5e:3e:0e:
                    c6:a6:c4:3b:b5:8a:66:4d:6b:e7:71:d1:98:4c:87:
                    50:f7:48:8e:06:06:45:6c:e1:8b:90:6a:46:c5:5f:
                    a6:b6:47:1d:de:e3:56:22:9e:09:60:92:e2:c6:d1:
                    24:b4:fd:36:d8:93:32:81:35:b1:36:31:32:21:91:
                    42:1a:b5:f3:4c:d3:f9:32:70:4c:e5:75:d3:d3:63:
                    d7:f3:73:d0:a4:30:65:9d:4c:21:c2:8a:4d:39:30:
                    17:59:c3:84:49:36:41:0f:11:77:d1:3c:79:d2:76:
                    16:e0:f3:76:00:1b:26:c4:b7:55:d7:55:d1:54:0d:
                    03:19:ab:58:a9:44:46:59:36:57:7d:17:5f:5b:69:
                    0f:07:fa:94:22:26:02:7c:ce:e3:72:92:38:52:35:
                    2c:d4:51:3f:54:9e:04:bc:8b:0a:8f:2f:b9:f0:87:
                    cd:f6:2a:5e:b6:9d:30:02:2d:80:9b:0b:0f:56:6c:
                    0f:b3:79:43:98:a7:41:39:ef:1e:f8:67:66:44:7a:
                    41:1f:a7:52:3f:9f:80:b4:8c:30:93:f2:fe:4f:bc:
                    53:6d:fb:49:fc:74:6b:85:32:4d:8f:d6:59:ef:a4:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:32:74:F8:B6:CE:65:8E:66:C9:9E:8F:FE:9A:17:E9:12:87:67
            X509v3 Authority Key Identifier:
                keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:87:f7:66:52:f0:0a:82:f4:d5:1d:fb:ee:e1:d7:e0:e6:ed:
         f9:a9:03:d5:3c:b8:66:ae:96:1e:02:89:ae:5a:a5:bb:87:1f:
         03:a2:fd:c2:b9:94:9c:6f:56:71:e0:6e:0c:f0:22:86:62:88:
         d8:6c:e9:c3:d8:36:21:72:9c:57:44:af:f1:3d:bf:bc:97:6f:
         7d:68:f5:a9:01:5d:a9:03:4c:e2:cc:d5:51:4d:4b:84:99:74:
         9a:f6:76:ae:ff:9f:24:62:24:a5:47:4f:a0:ac:76:52:16:f9:
         85:f8:10:01:83:e3:5d:6f:e8:dc:51:27:ed:d3:ec:e5:de:78:
         b9:db:2c:f1:35:78:e0:90:ca:e6:61:a5:52:55:87:ec:7b:91:
         bc:17:27:68:a7:05:7e:08:cd:b5:cc:ea:04:90:8a:43:95:b6:
         8c:7b:55:5f:cb:c4:db:cb:e7:ff:0d:c4:16:d6:15:9b:1f:0a:
         21:a2:b0:c8:54:e1:15:e6:38:39:85:1a:aa:00:00:6e:d2:f3:
         03:d3:de:ef:a3:11:fe:86:93:3b:b2:aa:70:d2:8f:c8:cf:49:
         98:73:5e:97:16:1e:be:1f:8d:0c:a8:3e:b5:f5:a7:d5:3d:c0:
         e4:89:58:b1:69:e6:d4:3d:61:46:58:b5:5c:4d:07:09:f5:27:
         95:b8:7f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:14:34 2024 by rpki-client on console-fra.rpki-client.org