Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File:                     jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier:          yvaDN86/MBBLv6u/bRw0w3/Gfgl/4kHx4lpDBdgQ5Uk=
Subject key identifier:   75:13:21:13:E9:51:9F:B8:B4:52:15:76:AF:88:BB:7C:2B:3C:35:C3
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer:       /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial:       01901BFCD6673F4D4D28746FAD411D2FEB6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:13 +0000
Files and hashes:         1: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: 8KHx9szsZKcqXq2ejq0IXUj0xr+r+dr2PUMtUbanJA0=)
                          2: y82bj7yPjubw2QDdXLWZ8xn_zjg.roa (hash: l+DyYCFxsTaD5jUJFyFQgcvoEeuc9aX7yhsegqBMh/Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:d6:67:3f:4d:4d:28:74:6f:ad:41:1d:2f:eb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
        Validity
            Not Before: Jun 15 13:01:13 2024 GMT
            Not After : Jun 16 13:01:13 2024 GMT
        Subject: CN=75132113e9519fb8b4521576af88bb7c2b3c35c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:4f:18:d6:7f:2b:a4:42:cc:f9:a0:f6:22:
                    9b:70:ad:e7:ca:03:1c:f7:e2:b2:b5:a0:64:27:7d:
                    ab:6a:e5:00:a1:bf:50:cf:7e:04:63:64:7f:f2:59:
                    02:cb:1a:f7:8e:85:60:3a:5c:a1:bf:6d:42:72:52:
                    b7:14:df:57:a9:8c:44:1e:cd:aa:3a:7d:9b:88:0d:
                    66:18:9e:1b:5d:e6:8a:71:60:e3:02:b2:9b:53:47:
                    d0:1e:99:d7:02:dc:24:8b:07:e5:f1:3f:ac:53:67:
                    bd:64:dd:43:a9:12:a1:ab:ba:ca:24:0e:5b:7e:ac:
                    b4:db:57:cd:1c:b4:3d:7d:05:df:7d:33:e9:9c:e9:
                    2f:38:d9:87:67:1d:a0:13:b6:ab:c1:93:cf:2d:68:
                    78:96:67:84:f4:ef:59:ba:26:5f:84:91:6b:71:db:
                    39:36:a8:11:2c:92:a8:a1:e1:9c:02:e1:59:45:8b:
                    59:a5:95:22:95:ff:9c:fb:01:39:83:8a:a2:9d:ed:
                    b2:f0:78:e6:b9:c7:81:3f:7b:0f:0e:b2:f8:76:82:
                    e0:17:10:e7:fe:78:14:b6:62:f5:5d:93:c6:05:10:
                    ab:02:2f:30:59:73:f8:0e:65:09:a3:d6:c1:23:3a:
                    8c:09:8f:76:e0:01:47:55:ff:64:a7:f7:81:23:80:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:21:13:E9:51:9F:B8:B4:52:15:76:AF:88:BB:7C:2B:3C:35:C3
            X509v3 Authority Key Identifier:
                keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fc:41:5d:10:23:89:8b:71:71:80:ff:d8:2d:44:b3:c7:1d:
         71:85:68:61:5c:0f:09:c9:db:ca:7f:51:a0:bf:9f:87:9a:76:
         e2:4c:8b:17:41:44:3b:7f:a5:e6:f0:42:fa:43:3c:91:a6:59:
         53:60:d1:70:b9:e6:7e:5d:03:70:d1:d1:24:48:b2:15:26:22:
         8c:1c:d7:98:da:f9:07:e5:36:e0:77:e0:4c:33:d9:97:c7:f5:
         8e:5e:32:c2:09:57:ea:5e:f9:d1:6e:d0:ca:c1:91:d7:66:22:
         7a:99:35:49:2d:e7:46:92:59:3c:0e:bc:cb:be:d8:3c:f6:75:
         cd:21:41:7b:17:7e:b9:b1:0f:d2:39:62:30:1d:e4:7c:86:75:
         c8:d0:29:f3:c6:9a:5f:51:87:78:64:3e:43:ee:b2:a4:13:2b:
         93:d3:85:9c:c1:98:77:aa:fa:8c:f7:8a:79:65:bc:fa:a6:c6:
         ba:98:5a:10:f1:93:fd:71:1f:13:73:5d:7c:b1:da:47:4e:b5:
         87:b0:dc:76:db:4a:a8:8b:3b:ba:bf:b8:f7:11:b9:8e:c1:66:
         c8:e8:57:83:af:f5:7a:bf:41:c3:08:6b:de:08:0e:92:44:36:
         c3:de:a1:78:8e:60:0d:8d:11:25:7d:2f:df:86:09:ca:5f:5f:
         e6:58:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:29:25 2024 by rpki-client on console-fra.rpki-client.org