Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File:                     JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier:          TFFU5xTnVwnvXD0JSrGj9YkWtRyGLe2Pen9Wx4vv2as=
Subject key identifier:   BE:D6:AC:09:F6:3F:5A:32:B8:E4:B4:94:92:50:AF:73:4B:B5:18:42
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer:       /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial:       019066A8D5BB068302C99E3549D741F3AE2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number:          79
Signing time:             Sun 30 Jun 2024 01:00:59 +0000
Manifest this update:     Sun 30 Jun 2024 01:00:59 +0000
Manifest next update:     Mon 01 Jul 2024 01:00:59 +0000
Files and hashes:         1: 5EhGWDiv-mdrFJtaGPcIV4hAZHU.roa (hash: paQm0Cth2qgQ0W2I327E4nKtaA3xuIR5I8vqj1tpRT0=)
                          2: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: M4lA5Hm5xrS1qwn3FAdo4jNY4aBRQqiCbyQbgAIfoVI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:66:a8:d5:bb:06:83:02:c9:9e:35:49:d7:41:f3:ae:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
        Validity
            Not Before: Jun 30 01:00:59 2024 GMT
            Not After : Jul  1 01:00:59 2024 GMT
        Subject: CN=bed6ac09f63f5a32b8e4b4949250af734bb51842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:40:58:66:74:94:6e:7c:40:06:02:f8:4e:
                    85:6c:86:f3:e8:37:03:60:69:68:19:49:f5:0d:48:
                    a5:d3:92:3c:4f:ec:b9:3f:f8:8c:41:36:1b:ed:93:
                    8b:be:87:d9:18:ad:36:0d:56:82:24:9a:c1:27:b3:
                    d5:cc:d3:1b:e0:55:d0:3a:20:4a:4f:f9:d5:08:88:
                    7d:27:d9:20:c5:e1:91:2d:26:ff:71:c0:25:84:35:
                    b6:39:34:93:dc:b8:77:91:21:2f:b6:ad:8d:bc:03:
                    86:34:7d:7f:ee:22:c5:5d:81:58:b7:56:da:c0:c4:
                    8b:52:79:27:58:93:87:ae:e9:3b:5f:45:3a:be:42:
                    b6:87:8f:ce:cc:11:f2:d4:77:e6:eb:3e:3d:75:1b:
                    69:85:77:ec:aa:63:ea:a7:86:60:9d:72:c7:c1:cb:
                    a3:a4:ec:76:49:0b:9b:5f:58:3d:fd:66:39:c8:86:
                    87:b6:22:ed:ba:81:a6:27:a5:6b:5f:79:c1:45:3c:
                    b7:73:2d:59:6c:60:1a:79:56:6e:c9:2c:06:26:03:
                    46:7d:31:ec:ab:1b:25:fd:e9:53:b6:bd:5a:ae:e3:
                    da:1b:ff:36:d3:6a:40:45:da:c0:ef:48:15:ed:cd:
                    29:1b:c7:cd:aa:9b:aa:1a:1a:61:06:cd:02:5c:ce:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:AC:09:F6:3F:5A:32:B8:E4:B4:94:92:50:AF:73:4B:B5:18:42
            X509v3 Authority Key Identifier:
                keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0c:bd:44:44:4b:08:76:5d:4a:dc:db:61:b4:23:57:ab:8b:
         ec:a9:50:51:16:8c:a1:de:bb:40:04:ac:7e:f2:2e:cf:54:69:
         32:a7:8a:bb:f6:26:bf:7c:49:c7:0c:9a:76:d4:4e:c8:19:01:
         82:73:2a:41:9d:a8:af:87:ab:23:f9:b9:97:93:a2:04:bf:f3:
         ca:49:7e:49:ed:4a:ae:cb:96:b4:49:cc:a6:8c:0c:1c:70:52:
         aa:84:93:f5:bc:28:15:19:68:16:a1:21:14:0d:77:e5:b3:04:
         0b:42:11:6b:2c:be:ed:5e:72:bd:4e:3f:67:44:4b:dc:24:e5:
         57:51:3c:ba:ef:fb:ae:f1:ad:32:94:a3:29:f6:4a:92:00:9e:
         39:50:ce:a3:d9:34:28:be:b8:4f:77:9e:19:29:8a:85:15:bd:
         19:96:57:fa:15:59:fd:6a:e0:c1:26:35:de:8e:5a:03:56:6f:
         5f:54:f7:0c:54:40:be:1c:0c:b6:a8:e8:37:f9:0c:54:d9:bc:
         0b:d5:00:dd:7e:17:ea:27:18:eb:fc:fc:a7:88:85:ee:b9:6f:
         d0:73:23:43:50:ee:49:05:c7:0f:b7:82:06:dc:1f:f2:e2:31:
         8a:95:29:c1:8b:1d:fd:6a:72:a8:b2:cf:37:71:7f:ae:aa:9a:
         b6:7f:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:49:42 2024 by rpki-client on console-ams.rpki-client.org