Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
File:                     jxy5c3UkxDf2-nUhF2uwq3H77mM.mft (raw, json)
Hash identifier:          Soap0Cvj0Qe7aTD9pMS+thQh6fqYn3u13YdsqsYNNWg=
Subject key identifier:   5C:B1:36:29:2E:E7:6C:45:1A:11:57:58:53:A4:EE:C9:9C:5E:CA:21
Authority key identifier: 8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
Certificate issuer:       /CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Certificate serial:       019040B01EB28425E6A128057F8643282A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
Manifest number:          0357
Signing time:             Sat 22 Jun 2024 16:03:22 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:22 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:22 +0000
Files and hashes:         1: 4TLGiRKRAWmZsvWhVdIK7lZ_KQo.roa (hash: o/7HkR/4TcBOBNgU8fnTyekebm3MkdHLsrLzAEPnzvQ=)
                          2: jxy5c3UkxDf2-nUhF2uwq3H77mM.crl (hash: hnE7kFK3usM2C+rOulUwAhLFfMPR+NbNtmoNUYsa20E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:1e:b2:84:25:e6:a1:28:05:7f:86:43:28:2a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
        Validity
            Not Before: Jun 22 16:03:22 2024 GMT
            Not After : Jun 23 16:03:22 2024 GMT
        Subject: CN=5cb136292ee76c451a11575853a4eec99c5eca21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:d6:fc:52:c3:2d:74:8b:40:ea:8a:83:1b:
                    18:c6:24:40:f6:fd:94:f9:89:d3:21:a3:46:02:be:
                    3c:67:c1:d5:cb:94:12:20:4e:3c:49:88:ce:81:ed:
                    4a:4a:36:a4:52:19:63:54:b6:b1:1e:94:36:b5:38:
                    43:dc:08:26:04:6f:a0:7c:06:3a:33:d7:2e:36:e7:
                    43:52:d1:6e:ad:3f:40:59:94:da:91:8a:83:0d:de:
                    7f:df:a9:c6:40:7d:c7:1f:2b:eb:87:f4:4c:4c:d6:
                    fd:4c:9d:91:13:cc:9e:b1:05:4f:9c:14:bc:cd:ea:
                    2e:37:60:88:d3:6d:71:93:2b:8b:5b:4f:d7:46:1b:
                    8b:1c:f1:ed:8b:0c:35:45:67:a7:e5:51:5b:27:5e:
                    0e:33:42:d4:d8:3e:d1:c5:05:53:41:c5:1e:7d:eb:
                    3d:2d:12:57:a4:e5:e1:6e:3a:6d:e8:55:d9:f3:04:
                    17:08:a8:53:1c:3e:55:cd:a6:9a:5e:3e:f7:c7:15:
                    2b:12:d0:58:8a:85:48:15:ce:f9:18:2b:f9:a0:7b:
                    f9:50:5f:0f:20:bb:a2:32:d4:a9:ce:9c:fc:4c:19:
                    ec:70:9e:7c:9f:6b:c0:0d:48:af:3f:e5:86:60:ba:
                    d9:cf:1a:b6:29:54:28:bb:6d:98:23:36:cb:6d:2b:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B1:36:29:2E:E7:6C:45:1A:11:57:58:53:A4:EE:C9:9C:5E:CA:21
            X509v3 Authority Key Identifier:
                keyid:8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:df:50:d8:aa:1f:e4:bf:ec:7f:28:bc:eb:bd:24:5d:15:b3:
         1c:bc:cf:f1:87:a6:70:2b:51:8b:07:d8:8d:b9:47:e6:96:27:
         90:0f:c5:59:b7:f6:18:36:ea:62:8a:ac:48:24:86:f1:fc:08:
         35:02:ff:cf:30:11:07:56:bb:e2:52:54:0f:c0:7a:57:c3:93:
         0e:1c:a8:c5:d3:a4:a5:7d:9a:7e:c9:fa:97:66:8b:9c:10:88:
         00:93:c7:6a:a1:8f:b2:7b:e7:40:3f:f1:de:0e:f0:a5:82:55:
         17:0c:24:e2:df:5a:2d:0b:32:a4:6d:cb:51:88:27:f4:68:4c:
         87:c5:61:a7:de:5b:48:f2:e6:29:d0:1c:9d:26:62:9b:ba:0b:
         e9:3c:25:3e:05:64:55:7f:78:ae:4c:2c:4d:4f:22:b0:21:cb:
         ab:6e:c6:c2:6a:4a:83:d9:5e:5c:2f:74:2c:7b:02:4a:7b:7a:
         3d:7c:7c:67:ad:46:78:c8:89:90:28:92:f9:22:22:a8:56:2a:
         57:ca:dd:a6:b2:6d:5e:07:49:d2:85:f8:68:af:89:d5:6f:04:
         c8:24:22:80:34:e0:40:c7:0c:33:3d:67:43:63:53:d0:33:a8:
         44:cb:70:7c:7d:da:6d:96:a2:3c:fe:da:f2:8f:02:c4:04:74:
         78:8f:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:33:41 2024 by rpki-client on console-ams.rpki-client.org