Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File:                     JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier:          3xmpU1lZr5CHADMidjp3yvxvgGV7lFmwzBU1L8nxGbo=
Subject key identifier:   2A:86:C6:FF:05:3B:1E:7F:A9:49:74:8A:92:45:3C:04:B0:74:BB:BD
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer:       /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial:       01901D46451B2C42F0EBD126B543E0545D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number:          029E
Signing time:             Sat 15 Jun 2024 19:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:02 +0000
Files and hashes:         1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: pLzRGYQ8Vgu73IQWfMCqDpeYO5TO1JNzTe50kaR8rSA=)
                          2: am8hP4m0ND60Md7Nwew3bygO_KY.roa (hash: aRBGzYoECmVPIYmKOBs+x+eQMCfDNaC/NgoP29UC/no=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:45:1b:2c:42:f0:eb:d1:26:b5:43:e0:54:5d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
        Validity
            Not Before: Jun 15 19:01:02 2024 GMT
            Not After : Jun 16 19:01:02 2024 GMT
        Subject: CN=2a86c6ff053b1e7fa949748a92453c04b074bbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:cd:e9:95:c1:43:ea:a2:ef:63:0a:00:85:
                    4a:cb:ed:a5:ed:1a:f4:f6:14:92:78:c8:06:ae:96:
                    e9:54:16:a2:a3:64:74:60:f0:fb:14:66:83:fb:5f:
                    6c:96:79:86:28:84:1e:c3:7d:70:85:23:ff:35:39:
                    96:87:94:6e:db:3b:54:b0:10:40:ee:5c:0b:ef:17:
                    23:06:dc:75:b6:af:15:ba:fb:ca:28:18:9a:71:61:
                    05:bb:e5:95:43:c0:2f:94:a5:71:4c:c4:d7:be:d4:
                    c5:cf:e0:3d:5c:92:ff:a5:60:60:25:a9:b7:3a:cd:
                    de:c0:ae:cb:20:1d:57:47:a4:c6:36:e1:7d:63:76:
                    7e:9a:6e:ea:d6:e6:8a:b7:d5:f6:91:42:e8:c1:b3:
                    6e:cb:c6:f9:a3:09:77:9a:ed:fd:02:75:d9:6d:06:
                    5e:f0:d5:4d:c4:18:f4:d4:19:b2:4d:c8:d1:bf:08:
                    68:6f:55:2b:e8:e1:08:7a:80:35:ac:84:d8:a2:a4:
                    ad:df:71:3b:00:98:2c:97:bb:c9:29:db:82:83:c6:
                    05:ca:14:a4:3a:4a:1b:22:ea:44:45:5d:44:4c:58:
                    dd:24:9e:8f:64:e9:1d:83:0c:50:1e:c9:e8:2d:1a:
                    22:e9:c0:e7:c7:7a:8f:f8:f8:79:8d:52:74:7a:e6:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:86:C6:FF:05:3B:1E:7F:A9:49:74:8A:92:45:3C:04:B0:74:BB:BD
            X509v3 Authority Key Identifier:
                keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9f:7b:b0:58:dd:b4:06:4c:ee:d0:79:9e:a3:e1:e0:1a:02:
         10:99:ea:f7:53:47:51:a1:22:cc:bf:56:2e:34:bd:e3:67:69:
         a4:bd:96:bb:74:bf:4d:d3:48:b4:c0:5f:66:53:5f:88:9b:16:
         78:7e:a0:f6:70:de:04:2b:7d:10:20:40:21:69:54:1b:9a:5a:
         95:74:fa:05:65:68:b7:1f:be:2c:db:08:f2:69:f7:d9:81:8a:
         cd:fa:19:7c:ae:83:af:04:ee:54:07:b0:36:df:be:f1:27:24:
         aa:89:5f:e4:6e:ec:61:c7:7c:de:b9:04:f7:c4:a3:f7:9b:1d:
         ad:85:15:1d:2f:d1:6e:09:50:c7:e0:c7:76:8e:97:53:ad:7c:
         4c:2b:6e:95:1f:06:ab:b7:62:ea:75:55:b4:d3:cc:d3:a3:24:
         ef:4f:a9:0e:fc:32:d8:d2:73:a3:e4:4e:ed:72:59:14:17:35:
         01:ac:6e:48:9e:98:f5:cd:bb:a6:fb:9b:52:38:83:06:cf:7c:
         af:79:74:20:b5:57:15:d7:09:a6:8f:2b:5a:bb:81:10:1e:14:
         69:84:4b:06:04:6a:78:9d:f1:36:79:74:2e:46:d9:53:a1:82:
         17:83:5b:e7:f9:bd:c3:45:ca:8d:ec:60:6f:dc:3b:2f:f4:f1:
         d6:86:d9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:31:14 2024 by rpki-client on console-ams.rpki-client.org