Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
File:                     jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft (raw, json)
Hash identifier:          Wa++4UqRZAKGeSfWAkDxDR62CBgddobZgelYvP9d4/c=
Subject key identifier:   78:C7:B9:E4:2B:F9:77:A9:D4:63:F6:06:E4:08:2C:0E:B1:8C:3F:54
Authority key identifier: 8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18
Certificate issuer:       /CN=8eb045110c41edb25931f4a523c39dd4c941d718
Certificate serial:       019038F4A9EE768D7BC16B6FAFA886D2F8FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
Manifest number:          11D4
Signing time:             Fri 21 Jun 2024 04:01:16 +0000
Manifest this update:     Fri 21 Jun 2024 04:01:16 +0000
Manifest next update:     Sat 22 Jun 2024 04:01:16 +0000
Files and hashes:         1: RwOMJxZGlKUf52-2VhDhTgffE7w.roa (hash: jBCtRCqKHEvQ+hfKtXHRnTwR74/dHQDINfDr1CrRlTw=)
                          2: jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl (hash: kkfMXPU7UPtxPE40AvZ8MIp4UXoIMqvvxmOJgDbptes=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:f4:a9:ee:76:8d:7b:c1:6b:6f:af:a8:86:d2:f8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb045110c41edb25931f4a523c39dd4c941d718
        Validity
            Not Before: Jun 21 04:01:16 2024 GMT
            Not After : Jun 22 04:01:16 2024 GMT
        Subject: CN=78c7b9e42bf977a9d463f606e4082c0eb18c3f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:42:56:43:99:b3:4e:b2:3c:6e:48:e4:89:35:
                    a5:2d:a2:7b:f7:92:83:fa:bc:bd:62:a7:52:07:b7:
                    1f:95:d7:ed:eb:70:1a:4d:a8:02:78:1d:31:4b:1c:
                    f0:e6:36:e5:30:06:4f:39:44:30:78:22:d3:da:df:
                    54:e8:49:09:ed:f5:8c:de:8c:98:9d:f7:8d:d1:51:
                    40:b0:6f:47:23:00:c7:4a:bd:68:24:55:4a:a5:3e:
                    74:59:15:27:63:00:04:ac:b9:14:92:05:11:5b:64:
                    f9:66:e8:e0:12:f4:14:3d:a4:eb:82:97:eb:35:99:
                    95:e0:3d:cc:7f:14:5c:39:6f:7c:f9:38:02:5f:f1:
                    d8:28:cf:9c:0e:6d:34:ab:18:9c:18:fe:a8:cf:5e:
                    20:5e:16:1b:f8:46:57:46:23:51:b6:f9:50:37:a7:
                    f9:93:96:66:f2:bf:25:01:a6:b0:7d:3c:d2:ee:18:
                    8b:2f:b6:26:8a:f7:18:f3:98:50:99:1b:0f:19:a1:
                    4a:3b:e0:14:a6:91:e5:01:6d:11:83:e7:51:83:68:
                    a5:ab:c7:a7:33:94:37:e0:11:dd:49:14:a7:cc:8a:
                    19:91:df:2f:f6:65:f1:81:f8:e5:b9:55:62:d4:09:
                    c6:52:3f:86:1b:81:e7:65:db:da:c1:c7:83:71:0d:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:B9:E4:2B:F9:77:A9:D4:63:F6:06:E4:08:2C:0E:B1:8C:3F:54
            X509v3 Authority Key Identifier:
                keyid:8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:98:c7:49:e2:ab:90:f1:d1:39:56:61:27:12:22:4e:bf:
         38:2e:22:5e:e6:fc:ff:0f:a5:f0:f9:5b:0f:2f:b2:17:cf:f0:
         a6:2e:5e:a8:80:11:32:fe:0a:b6:ad:2a:16:68:6d:a9:1f:e2:
         06:3f:40:25:1f:d7:23:8a:a2:10:43:0d:92:04:f2:70:de:37:
         77:6f:95:ba:d3:34:7e:5b:47:7a:5f:4d:01:0b:4b:17:12:d6:
         6a:b4:96:41:9a:05:2d:f1:a7:96:3d:66:cc:ce:8d:85:ff:bb:
         db:85:ff:53:0f:ab:23:d9:40:d8:ca:4c:24:bd:5d:45:4c:40:
         60:89:28:d2:f1:6c:e4:73:ab:56:c1:ce:85:19:54:55:50:f7:
         26:b2:e3:77:52:7f:c3:39:08:84:d1:75:b9:fa:f3:74:7c:aa:
         84:bd:38:0a:ea:ff:2f:f8:5e:f5:58:85:a1:9c:2e:82:a0:0e:
         7e:c9:67:a4:33:b2:f8:96:8d:b9:ba:ca:0a:4b:fb:10:d4:d3:
         0b:9e:60:d7:0b:e0:41:44:5b:a1:12:59:06:8e:8a:f1:cd:3d:
         e3:14:da:de:d0:1b:5e:82:0c:5e:df:28:ad:fe:87:09:01:be:
         2d:39:55:f2:d3:bf:b3:51:f2:67:1d:a5:f6:96:a5:22:8c:15:
         ae:ed:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:38:06 2024 by rpki-client on console-fra.rpki-client.org