Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File:                     JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier:          kukeKHHMyrx2hzUIkhMYsnBNdS5BsBOHJzPPnztxiLU=
Subject key identifier:   30:7A:E1:D5:03:DC:78:97:F4:18:A2:FC:62:A1:32:89:AA:AE:7A:13
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer:       /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial:       0190448C57C5130E09EBD160A108BDCCB41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number:          0369
Signing time:             Sun 23 Jun 2024 10:02:46 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:46 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:46 +0000
Files and hashes:         1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: 3Tk9qAGLk1cMu6XJZRMml/Ss+zyNUjsjyAJvBx546qo=)
                          2: qqUMQQrSsllOa0o6dQkKNnM3J-w.roa (hash: ltLz1oTKJzOhQXIlkIaWZuFlWVMId1p31670FD76lN4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:57:c5:13:0e:09:eb:d1:60:a1:08:bd:cc:b4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Validity
            Not Before: Jun 23 10:02:46 2024 GMT
            Not After : Jun 24 10:02:46 2024 GMT
        Subject: CN=307ae1d503dc7897f418a2fc62a13289aaae7a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:17:f3:1a:63:7c:44:26:8b:23:9a:c8:25:
                    3b:2f:ea:0a:97:8e:d0:52:3e:6e:ee:cb:fc:21:54:
                    5e:3c:1b:52:6e:bc:39:b1:c6:f5:b3:af:af:85:07:
                    bc:44:f2:95:00:53:a6:91:b3:65:fc:9c:e7:af:33:
                    21:f9:28:90:0e:9a:c0:b4:36:bc:5d:a9:c5:d9:ea:
                    88:da:5f:19:0f:1f:c4:56:95:93:d3:93:bb:af:a7:
                    e3:ed:a2:cb:b6:8d:6f:4c:bf:38:fe:ec:cb:49:94:
                    69:ab:2b:4c:e5:7b:f7:99:ec:7d:e6:3e:96:f8:df:
                    97:90:fb:db:08:84:07:af:36:40:4f:f3:91:0c:6a:
                    b5:6a:b3:83:0d:a1:25:33:19:35:38:14:76:4d:59:
                    0a:8d:f1:74:56:4a:ee:22:36:cf:5a:e2:d0:b3:d3:
                    c9:24:9e:f2:0b:84:53:87:57:79:1e:23:62:fc:f0:
                    bf:1e:80:33:64:0e:13:1b:08:8c:e5:0a:4f:0c:5e:
                    2b:9d:34:06:68:78:1f:8f:02:0d:ee:7a:b4:bc:c3:
                    b9:b7:b9:5c:34:77:15:86:f7:f0:37:82:a0:9e:39:
                    31:ca:ca:42:91:2a:6e:07:57:24:94:fa:15:6c:87:
                    1c:88:4a:02:b6:13:94:a2:04:ae:af:1d:e9:3a:6e:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7A:E1:D5:03:DC:78:97:F4:18:A2:FC:62:A1:32:89:AA:AE:7A:13
            X509v3 Authority Key Identifier:
                keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:4e:13:ca:1e:ef:2b:0b:9e:1d:a7:54:45:b8:96:7e:95:
         e4:5c:d8:16:99:16:27:71:8e:f4:ef:85:f6:f2:e6:4b:7c:f5:
         6f:f0:75:5f:99:6a:ac:82:a1:f2:c9:1b:88:26:79:03:5e:4e:
         21:ec:a6:5b:7d:c3:57:b7:9a:38:44:81:6a:f9:6e:ec:a6:f0:
         bd:e2:d6:a8:f1:2f:2b:d5:56:51:1e:70:3d:8a:26:88:5a:7a:
         2e:b8:d5:22:85:97:82:df:89:78:37:ff:c0:63:f0:b1:53:84:
         39:37:0a:2f:7e:c6:34:01:d5:ac:59:12:fc:9b:cd:f9:f2:ca:
         1a:5d:d4:b3:08:7e:78:98:72:2b:ab:f2:75:4b:f1:67:0f:3b:
         96:79:b9:a3:7c:2b:d4:8e:49:e4:d0:53:19:55:6e:5f:16:c5:
         ee:f0:6d:a0:93:4f:bf:ae:d6:84:eb:d6:5c:1d:da:bc:ae:db:
         69:e2:4d:30:50:6c:78:22:a4:b1:65:cf:f0:59:5e:b2:3c:a3:
         b4:86:ab:f6:52:e0:ca:29:2a:0a:82:1d:6b:6f:23:fe:8d:82:
         d6:68:fa:94:65:e1:49:2a:3d:ed:43:67:cb:0b:d5:29:f0:d4:
         07:35:77:bc:9c:c2:72:c1:0d:68:11:56:5b:db:df:c2:aa:1a:
         05:f8:f9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:33:00 2024 by rpki-client on console-fra.rpki-client.org