Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File:                     JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier:          YLPwhU3sh1R83tyuaNrSWfTq5E7tiuJXvUU+CJR/kQg=
Subject key identifier:   41:2D:23:16:02:D6:6E:E7:C9:19:F5:74:9B:45:75:CB:7E:3D:36:8D
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer:       /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial:       019045D444623544005CF4D31F59C46D85E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number:          0F20
Signing time:             Sun 23 Jun 2024 16:00:57 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:57 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:57 +0000
Files and hashes:         1: 8RFn73qCQ_qySwsQuTvS9p_y2GU.roa (hash: yi+acZ7IVW4R8SYhD9687DDLgoulSXfZFCxqgy88jKo=)
                          2: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: EarCoQ7WWAV8RbFoHcsfWcSLfBtQQyP9tfUR4D5v7hU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:44:62:35:44:00:5c:f4:d3:1f:59:c4:6d:85:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
        Validity
            Not Before: Jun 23 16:00:57 2024 GMT
            Not After : Jun 24 16:00:57 2024 GMT
        Subject: CN=412d231602d66ee7c919f5749b4575cb7e3d368d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:02:3a:bc:32:a8:84:85:1d:a1:6a:ae:08:
                    b3:6d:62:aa:62:5d:1c:de:85:f1:3d:32:e8:36:1f:
                    82:de:3a:b0:12:67:bb:36:a1:41:6f:89:b7:30:ad:
                    09:a7:96:7d:cb:45:7d:f3:b7:ca:f3:ba:36:0b:96:
                    51:31:4d:d2:bb:a0:38:ff:4c:49:39:ee:2f:5b:05:
                    a2:07:27:5d:5b:09:97:bc:a3:2d:f9:82:df:86:58:
                    7c:92:32:99:18:25:f6:06:70:67:a9:3d:52:9b:84:
                    16:f9:56:f1:53:22:49:ad:8f:2b:26:4a:f9:b7:91:
                    2d:10:8e:95:82:c9:7a:2c:12:a7:f6:f1:cb:3a:ab:
                    75:c0:a8:e4:2b:2c:ba:2d:0e:17:8a:49:e0:b2:d6:
                    32:4e:ec:6b:f8:f9:21:f3:12:69:5b:d5:aa:d2:4f:
                    1f:2e:03:6c:c0:41:dc:65:d2:a8:b1:3c:61:67:d4:
                    31:b2:99:53:e7:a9:39:d8:2e:a4:a3:f9:75:14:92:
                    3d:e8:b6:55:18:d9:d7:7b:e3:a5:4f:ec:e6:2b:41:
                    eb:70:8a:1e:e6:a6:54:84:d9:dd:5a:7c:b6:c2:97:
                    e1:8d:53:d8:b7:8c:7d:d2:e3:40:77:7a:3e:bb:4f:
                    e1:47:40:de:93:46:a6:3d:5e:e8:84:6a:fe:c8:a3:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:23:16:02:D6:6E:E7:C9:19:F5:74:9B:45:75:CB:7E:3D:36:8D
            X509v3 Authority Key Identifier:
                keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:81:01:fd:1f:e3:7f:97:23:b1:57:da:8b:8e:14:6f:98:8d:
         24:79:76:2a:61:ce:44:9a:5b:54:9b:b8:b5:f5:b1:46:4c:db:
         6c:f1:99:98:ee:d2:0b:78:ab:16:54:b1:d1:49:16:cb:54:11:
         7c:4c:36:c8:2a:f7:13:01:11:8b:b2:18:5f:08:96:0a:5f:21:
         1d:d5:fd:80:c9:d1:66:88:29:16:09:da:a1:01:ea:68:a9:aa:
         76:3e:74:ac:85:c5:ea:23:9f:e3:53:02:61:70:59:8c:64:ae:
         83:59:55:3e:ec:30:8b:ef:1f:44:51:43:59:27:20:45:f4:8d:
         29:8b:93:d0:4d:3b:92:f3:c9:df:70:78:2f:4a:20:6b:59:b9:
         06:2f:3d:e1:ff:20:0c:dd:8b:27:48:af:4e:6d:08:b6:c6:4f:
         03:46:bf:a2:d4:0d:91:28:23:6c:19:46:de:72:ac:91:91:7c:
         d1:8d:85:7f:56:5c:99:18:ca:8d:ec:90:76:ba:88:a0:73:f1:
         16:0c:8c:c2:fa:62:49:2f:82:60:45:34:ca:d4:ab:aa:85:49:
         5a:a0:5f:d1:a1:c9:b5:a2:a9:fc:48:2b:85:1d:d3:e1:46:0d:
         bc:8b:63:5f:3b:cb:ce:c9:86:27:36:e8:5f:ff:52:ca:c3:3b:
         3e:f4:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:50:50 2024 by rpki-client on console-ams.rpki-client.org