Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File:                     JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier:          z5vfvlmPQ4d7JkprYhly8bytvkne689ljbu98lEEY8o=
Subject key identifier:   34:EB:F5:79:D1:E8:90:0B:E2:44:81:D0:DB:7F:6A:79:C0:BF:E5:94
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer:       /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial:       01901DEDA18DA55E2B3F086F5696C7A496E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:50 +0000
Files and hashes:         1: 0HUpR_9z6nnMtAJTjN5x9uPw49I.roa (hash: sxeHl54biT5ZA3QbwV+eyh/MkfD+27Nszh0eVECbYdc=)
                          2: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: AgzVHXVXYzUq+FMEndoQFZmWNDifebFsVFX/+eSEO9E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a1:8d:a5:5e:2b:3f:08:6f:56:96:c7:a4:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
        Validity
            Not Before: Jun 15 22:03:50 2024 GMT
            Not After : Jun 16 22:03:50 2024 GMT
        Subject: CN=34ebf579d1e8900be24481d0db7f6a79c0bfe594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:be:47:ca:52:7c:89:84:8e:e8:e3:41:e3:
                    cf:6f:c2:bf:06:f4:0c:40:fa:bd:91:8a:ff:d9:d4:
                    07:8f:dc:3a:e5:c6:f0:4d:5c:ff:97:62:1f:f9:b7:
                    01:4b:75:94:cc:94:af:58:a5:2e:13:44:36:69:44:
                    02:57:b9:54:a4:a0:b4:b3:6b:69:9a:75:1d:2a:57:
                    fb:64:29:04:0f:7e:30:67:f6:d5:56:de:3e:03:85:
                    0c:7e:1d:91:4b:a7:a2:45:19:ac:f7:e4:6b:a0:5d:
                    90:fe:53:37:98:80:1a:63:8c:50:de:4c:a0:4f:99:
                    f4:c0:d6:26:b6:43:42:89:67:87:a0:c8:0e:86:00:
                    09:df:f0:75:2e:4b:ca:b2:fd:44:70:3b:08:62:31:
                    26:a4:18:69:86:74:f6:2b:0a:55:e9:9a:07:d9:36:
                    22:79:48:01:e9:15:b6:19:5b:9b:59:cd:e8:ee:e9:
                    ba:79:9f:c0:56:8b:6d:c8:41:07:c3:cb:6e:69:e2:
                    b7:7d:10:7e:f2:58:23:80:a7:5b:9c:44:cb:af:79:
                    f0:a6:ea:55:27:3b:f2:89:d6:29:cf:c5:17:f9:3c:
                    8b:e1:f0:93:30:2c:9b:ea:57:66:a2:66:3c:ae:f9:
                    77:99:c4:17:3e:72:5d:68:98:11:13:e2:3c:ad:4d:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:F5:79:D1:E8:90:0B:E2:44:81:D0:DB:7F:6A:79:C0:BF:E5:94
            X509v3 Authority Key Identifier:
                keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4c:de:49:5c:bd:48:b7:b2:bf:e3:97:f6:73:b0:62:df:1e:
         fd:cd:95:b2:3e:7f:54:6a:06:bc:51:d7:97:cd:a8:46:ce:6d:
         09:ee:9b:bd:59:d8:a6:b6:0a:6f:ba:ca:3f:68:ca:6f:d0:7e:
         03:fa:d1:38:9d:66:6a:c5:c6:6a:b5:06:1a:3b:93:8f:cc:69:
         91:af:27:06:df:b0:4b:9b:df:b9:32:4d:d1:00:99:ab:8a:91:
         d7:ca:ff:f4:1a:56:7d:73:68:16:43:75:fe:bb:3c:29:90:6d:
         43:68:70:fc:cb:84:b3:09:64:e8:ad:59:54:e1:65:4b:a5:71:
         78:f2:2b:ac:a0:0a:20:cb:26:92:87:51:f8:99:4f:26:a9:35:
         e7:0d:72:28:f9:f0:c1:24:37:3a:76:9b:b8:76:16:29:11:c1:
         83:6b:3d:e8:6c:18:ab:ba:5f:51:3c:6e:5f:74:21:70:d5:d5:
         31:9a:2c:90:19:a6:24:13:66:ca:f2:a8:73:f8:e1:11:54:78:
         d1:bc:c8:14:ca:08:e8:78:4e:a0:0b:89:b8:d8:45:53:81:05:
         e4:d2:c0:40:5a:16:24:15:e8:e1:4c:44:1f:a1:86:c5:a6:42:
         f5:0a:09:a1:d1:7e:bf:f8:a6:77:7a:13:dd:2d:d7:0c:23:b9:
         e8:ca:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:03:42 2024 by rpki-client on console-ams.rpki-client.org