Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          aqTJXiQo2YYaGLw2dlUaI6foNz6Y4sRnKTPkD6b/WWg=
Subject key identifier:   F3:8E:33:67:F1:84:A5:D1:D6:68:39:62:D2:4D:EB:42:7F:87:73:27
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       018FB4C6A6815CA52F4193CA3C68EF6968B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          07DC
Signing time:             Sun 26 May 2024 12:01:08 +0000
Manifest this update:     Sun 26 May 2024 12:01:08 +0000
Manifest next update:     Mon 27 May 2024 12:01:08 +0000
Files and hashes:         1: 1HbC3ihkQnTCyJAdj3Dx55aYCU0.roa (hash: 5btH+RL0rcMK5w9gdmmyvvCCon9RL+02yUUweQerWXQ=)
                          2: 2WhceVJ-1wKt4iYT9MvwcmwkGNE.roa (hash: oxpye8OsKv8shkhbFy3+ICSxMJL7kBJlTT0ZEf+DEn4=)
                          3: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: rfbRXsB+80XEN9pIVoAA5ogvhR2PRHwEJg6ANNhOCpQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:c6:a6:81:5c:a5:2f:41:93:ca:3c:68:ef:69:68:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: May 26 12:01:08 2024 GMT
            Not After : May 27 12:01:08 2024 GMT
        Subject: CN=f38e3367f184a5d1d6683962d24deb427f877327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:e6:0d:c6:5e:ee:03:ac:d0:d6:93:8e:82:
                    36:61:57:3c:2b:d7:c8:df:9d:4b:29:f5:e9:96:ff:
                    be:91:43:42:e3:f6:b9:3e:bc:a2:82:1f:a0:c2:7c:
                    9b:f9:81:9a:5f:39:b9:89:b1:59:f5:38:f5:61:1a:
                    cb:ad:cd:6d:71:4e:91:56:e4:f5:51:ed:e5:b4:e7:
                    23:8e:df:2f:3b:4b:4f:e8:d0:71:10:c4:25:de:af:
                    86:f4:d9:fa:56:b6:12:eb:b3:51:a9:ac:77:87:75:
                    83:65:f2:a1:db:0e:69:69:d4:e5:3c:1f:ef:45:d5:
                    4f:78:c4:a4:4b:9f:75:41:42:6f:59:c7:f6:35:17:
                    12:38:ba:d8:57:a3:a3:82:3f:13:2a:1d:01:42:b4:
                    55:2b:92:44:55:da:25:78:2d:98:7d:7b:19:0f:06:
                    7f:da:92:94:9c:74:f7:57:18:e1:fb:da:7b:89:0e:
                    19:78:c9:27:16:b2:ba:79:e8:c1:08:3d:36:47:8f:
                    51:7e:e0:b1:44:cb:bd:52:73:21:d0:e7:f9:53:25:
                    db:9b:ee:35:a6:72:11:84:e8:19:ec:aa:63:73:1c:
                    4e:70:24:dd:bc:fd:03:5a:ef:eb:ef:a8:66:1a:32:
                    e4:52:6c:9c:e2:01:53:f3:18:66:c8:93:26:0d:30:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8E:33:67:F1:84:A5:D1:D6:68:39:62:D2:4D:EB:42:7F:87:73:27
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:20:70:cd:fe:75:f6:40:c9:29:a9:bf:d7:c1:d7:cd:16:5b:
         05:4f:ca:df:7a:b2:5b:ac:10:65:bf:08:2f:6e:d8:cd:f5:4f:
         d5:39:16:17:a8:7c:60:18:dc:9b:39:b4:9f:26:6a:bf:50:0e:
         7e:e0:10:a3:3a:7b:d7:37:41:b6:37:53:eb:b6:a9:2d:36:7b:
         37:40:fe:4b:1d:b0:b0:a1:4a:4d:c5:a1:7d:32:af:b4:9e:ea:
         ae:ec:53:e0:e9:3c:38:b2:5a:d9:c3:de:cb:46:26:fd:59:cd:
         cc:a3:f0:d8:ed:c6:39:28:44:68:90:b4:8d:91:ad:0f:2a:17:
         91:dc:d6:b0:ff:1d:3d:14:58:6a:68:a5:73:6a:5f:70:dd:a2:
         a3:ff:69:00:83:5c:48:20:12:28:07:57:6c:ab:79:4e:ef:20:
         74:a2:98:05:4c:80:6e:70:19:7b:94:27:db:5a:00:c1:cf:c0:
         aa:af:ae:e2:83:a8:fe:fb:b0:f8:3b:8a:01:27:ef:9a:28:53:
         15:bc:24:53:6e:1b:c5:f7:b8:20:f1:ee:33:8e:01:3b:f4:f8:
         7f:5e:41:17:60:fa:a3:85:ad:97:ca:f7:7c:45:45:b7:52:eb:
         20:a5:f4:0f:bb:a2:d7:77:a9:58:3e:5b:11:82:6c:55:eb:fb:
         c2:e2:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 15:14:35 2024 by rpki-client on console-fra.rpki-client.org