Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          H29xMbvzCIB2nDPJ5Y7nQ58n1jhgyluS3+u7PZP8awQ=
Subject key identifier:   DD:8D:D6:7D:1F:C0:3C:E2:4C:7C:43:65:4E:9C:D5:13:72:43:51:61
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       01901DEC1B8738BFC73461DC7B4205C00DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          06BD
Signing time:             Sat 15 Jun 2024 22:02:11 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:11 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:11 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: s6Sl+hCoKl8kD8PzuwuYYWCPiheucaIspMCxgfWXVds=)
                          2: QfC0dTPaHTJs2kX8a-EtEofPdDU.roa (hash: b3j+HNk7mqt9ZS5pDr3rVOF/uCBmWsQWxb0OzHj4JLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:1b:87:38:bf:c7:34:61:dc:7b:42:05:c0:0d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Jun 15 22:02:11 2024 GMT
            Not After : Jun 16 22:02:11 2024 GMT
        Subject: CN=dd8dd67d1fc03ce24c7c43654e9cd51372435161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:b5:23:85:56:dd:16:66:a6:dd:12:cd:72:
                    4f:d3:4a:04:5c:91:80:d1:7f:17:4b:0f:3f:a1:e3:
                    92:87:64:5c:13:14:6b:0d:24:09:f2:4e:32:23:c8:
                    55:84:86:09:2f:af:bd:15:68:6b:11:80:6f:43:61:
                    03:82:dd:d3:2e:dd:72:5b:c3:4d:89:14:9d:c6:e9:
                    77:ea:a5:cc:d6:5d:55:e6:1d:c3:ad:46:47:1c:c4:
                    a3:a1:54:d9:e0:f6:1f:7a:7d:53:59:ee:d3:fd:f3:
                    3b:57:fa:d7:de:13:8f:10:b6:86:88:c6:cb:3a:58:
                    36:d3:c6:d7:b6:47:7e:f4:4f:96:2c:eb:de:80:6d:
                    e6:70:98:51:eb:16:e8:18:7c:a5:fd:8f:cd:0a:fc:
                    27:b0:bb:43:f8:e9:95:b2:4c:ce:81:26:08:cc:a2:
                    3a:28:af:6b:7c:d6:2f:8b:40:59:af:23:fd:62:c3:
                    fa:59:61:30:9b:8a:2f:1b:a9:fc:d8:17:19:8a:3e:
                    a7:d0:8a:c0:18:36:72:b3:b5:fe:20:05:e1:78:67:
                    8b:24:4d:9c:80:64:18:72:74:4d:16:5f:3c:b5:d0:
                    33:04:09:a7:03:40:c8:9c:c3:12:b9:6d:41:39:84:
                    df:94:36:5f:ec:91:96:50:e0:2b:70:2f:4e:ee:ac:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8D:D6:7D:1F:C0:3C:E2:4C:7C:43:65:4E:9C:D5:13:72:43:51:61
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:44:29:d3:52:cf:fa:23:37:dd:e5:96:24:fc:b7:86:1b:b3:
         de:44:b9:e7:5d:b0:da:07:a3:4e:c6:bd:d4:00:6c:00:a1:76:
         f0:e2:d1:04:75:d5:93:0d:98:cb:bc:83:b4:d0:f7:a1:04:11:
         52:d1:62:3c:84:f7:e3:01:57:c8:83:71:78:b1:da:e6:16:1b:
         02:44:b9:36:e8:f6:8a:40:2c:f6:50:41:cc:0b:3b:6d:75:20:
         cd:50:34:f4:4b:90:cf:d9:45:65:e9:59:8d:27:50:b4:32:7b:
         8a:ab:73:1a:0a:6b:52:f6:c3:5c:67:40:18:38:2c:5f:d4:1b:
         44:e3:dc:d1:bc:ed:86:99:11:ef:59:6d:9a:d5:2f:a7:fd:e9:
         82:40:7e:aa:31:23:50:9d:53:91:d6:ea:a0:4b:48:53:cc:8a:
         eb:f1:47:8a:18:24:d5:33:eb:dc:82:f6:51:cb:47:b8:4a:df:
         70:82:20:10:42:a5:37:5f:97:11:6b:36:38:cb:62:4d:24:5d:
         c7:b9:4f:51:37:3a:c6:27:95:2e:e5:02:32:d7:53:b6:b6:4e:
         b4:ae:09:70:01:39:59:40:bd:cb:19:35:12:1a:02:20:de:3a:
         92:39:73:0f:bd:f1:41:64:03:46:48:db:2f:ac:09:67:c5:3f:
         61:5d:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:01 2024 by rpki-client on console-ams.rpki-client.org