Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File:                     jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier:          b4L+Sb2cpE5tIowTAujLl8Ua0wO+pU01eyln/JkJo8E=
Subject key identifier:   44:5C:63:CB:7D:D5:02:EE:F7:57:0B:3E:07:32:9D:C2:D3:58:80:AF
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer:       /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial:       01901DED9A059B632C253DFA5EFC90EE2444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number:          0EDE
Signing time:             Sat 15 Jun 2024 22:03:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:48 +0000
Files and hashes:         1: 13N31proienxtkTuFjsxPmL_HUA.roa (hash: sTzTVbe9GrhW/r0FwUkRbi9ZHkQSqCRoVyCRR7ws9mA=)
                          2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: famkleve5ZeWymCp06E8QX9soU/tEdQ1VTcg74l62Qg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9a:05:9b:63:2c:25:3d:fa:5e:fc:90:ee:24:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
        Validity
            Not Before: Jun 15 22:03:48 2024 GMT
            Not After : Jun 16 22:03:48 2024 GMT
        Subject: CN=445c63cb7dd502eef7570b3e07329dc2d35880af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:b7:a6:f2:63:fa:09:5e:08:a1:8e:13:d7:
                    69:40:4d:eb:b8:cb:71:a4:45:71:57:b1:47:71:89:
                    9e:a8:19:f5:c4:56:1d:2f:2a:b7:9b:97:6a:bd:83:
                    ad:41:42:dd:62:30:f8:64:0f:4d:37:4d:ff:73:2f:
                    30:1f:8e:b8:3f:54:11:8c:cd:e8:a5:ad:04:ab:f6:
                    ef:cc:7a:e2:8a:c6:36:84:a5:50:90:33:9e:a6:10:
                    cc:13:9f:ac:01:ff:de:f5:ad:ea:d5:4f:d6:29:d6:
                    e8:b3:4d:3a:15:05:02:b7:20:27:0e:e5:e0:88:15:
                    1d:b9:c4:40:72:0a:1d:ba:74:0b:90:11:cc:68:f5:
                    5c:db:a1:9f:fc:dd:8e:e2:95:bf:3d:f9:70:f5:3a:
                    07:63:2a:00:5d:49:c9:8a:50:52:02:bc:32:6e:78:
                    8c:cf:dc:24:bd:66:65:e8:3e:6e:61:2a:55:30:16:
                    09:1f:96:fe:89:a8:6b:48:04:8b:a1:c8:f7:bd:a5:
                    87:c3:7d:cc:8e:d6:ac:2d:f3:3a:4a:07:18:75:b5:
                    1b:3b:cd:55:bf:ba:9a:e9:ea:10:29:e2:0d:00:39:
                    2c:a7:32:c5:e9:c0:31:d9:bb:e1:dc:7c:b1:ea:6f:
                    87:16:ac:d8:aa:73:58:e6:61:37:ca:da:2d:5a:0a:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5C:63:CB:7D:D5:02:EE:F7:57:0B:3E:07:32:9D:C2:D3:58:80:AF
            X509v3 Authority Key Identifier:
                keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:46:fe:c7:45:ed:87:ea:6a:85:15:4e:27:e5:28:4e:52:
         1a:63:a1:42:6e:9b:b9:10:6c:25:57:5d:59:56:8e:ef:43:07:
         74:93:fc:7f:3a:f0:4c:c3:c8:3d:e5:fb:a6:db:c6:94:a7:ef:
         1d:db:1b:02:2f:ab:db:a3:8d:d4:9a:0d:5e:c7:e0:7c:69:b2:
         d4:95:e0:1b:1b:e8:2f:93:fa:fe:e7:6f:81:38:7b:31:15:b2:
         3b:fa:23:b0:25:59:dd:ec:f7:a2:32:63:77:48:7a:18:69:dd:
         5b:92:80:1f:93:32:95:5c:46:b3:74:ee:9c:f1:f3:17:25:af:
         f0:24:93:29:9a:db:99:2f:cc:db:b3:8f:a2:df:36:9b:48:3c:
         b8:34:5e:81:7f:a2:67:9d:61:b1:cc:97:10:9b:ee:38:11:e2:
         fb:2f:cf:d5:5c:ce:23:a5:d2:9c:89:7a:b9:a6:13:95:43:79:
         70:04:20:ef:08:14:9a:99:9f:bc:ba:35:2c:0d:42:6b:c0:4c:
         46:2e:16:48:ba:d4:83:24:a7:9d:e6:86:50:1c:0f:91:66:de:
         57:98:95:5c:75:bd:62:76:31:4e:98:20:72:00:58:14:b4:da:
         2a:2a:ca:e7:4e:21:70:86:60:f8:d9:41:b4:33:bf:5a:3e:d2:
         0c:49:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:19 2024 by rpki-client on console-fra.rpki-client.org