Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File:                     jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier:          zU8+7ZyKtVD2WCfFrVaYEMHV/7/9dOlgwikf1tl2jeU=
Subject key identifier:   BC:64:60:75:34:FD:1E:F6:0C:80:AE:0B:9F:B8:F7:F6:76:47:60:7C
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer:       /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial:       01901D0F7E40F134E8F80AF23CE40F702409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number:          10C4
Signing time:             Sat 15 Jun 2024 18:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:12 +0000
Files and hashes:         1: 9PIKHl84kaeIVGJRk6_xafgogDU.roa (hash: cvht2CA13cCQlodfI0kxr98XhesIHPvn5n6QGi2fscI=)
                          2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: 7VMVL2g2DJu+ZDVABKUn7kfzS/5oLD4Tgde76JDaDNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:7e:40:f1:34:e8:f8:0a:f2:3c:e4:0f:70:24:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
        Validity
            Not Before: Jun 15 18:01:12 2024 GMT
            Not After : Jun 16 18:01:12 2024 GMT
        Subject: CN=bc64607534fd1ef60c80ae0b9fb8f7f67647607c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:ee:b2:19:18:8e:7a:1d:04:76:fe:e2:74:
                    eb:24:aa:2f:d4:38:00:6f:c7:5b:2c:d5:25:dd:df:
                    2d:02:bc:80:9f:9d:92:20:4b:9c:15:46:06:3e:0a:
                    9c:21:3e:67:af:51:ca:cc:b0:5c:14:3c:24:21:bc:
                    47:31:43:4f:1f:7f:81:f0:ed:de:41:7c:e7:0f:0d:
                    09:45:06:5e:98:6e:f6:76:8b:38:86:89:73:df:a5:
                    50:eb:b6:7c:2b:43:98:d2:6e:65:63:e2:92:9b:36:
                    78:86:c5:57:44:99:14:0f:55:6c:4a:da:1c:67:32:
                    8b:c7:72:7b:3e:a6:66:ea:13:ba:b4:20:7d:2c:50:
                    ed:38:26:28:3a:0d:f6:6b:fb:d3:bb:50:ed:96:46:
                    ae:5e:94:86:40:bd:69:53:73:7d:4c:e0:f1:3a:90:
                    f1:01:42:f1:e9:4e:96:25:61:a1:73:ca:38:8b:65:
                    c1:e1:42:41:7e:0e:e2:a2:43:a9:46:6e:84:d8:62:
                    c5:f1:8c:c3:db:ea:91:87:eb:2b:cc:39:64:4d:d8:
                    ad:06:15:e3:4d:49:8f:1e:43:01:63:75:c8:94:bd:
                    c2:75:7b:8c:60:3b:83:57:35:38:68:fc:b4:f4:20:
                    a1:38:00:07:9b:8c:74:d8:39:9b:cc:3d:f9:fe:e5:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:64:60:75:34:FD:1E:F6:0C:80:AE:0B:9F:B8:F7:F6:76:47:60:7C
            X509v3 Authority Key Identifier:
                keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:42:8c:e5:3d:7b:e6:c8:fe:a7:36:d0:a8:25:63:c4:b0:3f:
         1b:61:05:9b:a1:f5:7b:60:72:1f:c3:0f:ec:d9:62:82:50:40:
         ef:98:0b:f3:97:35:7c:87:c0:76:b7:66:3d:67:82:ca:21:54:
         27:8a:bc:3d:96:48:6e:16:cf:ee:9c:37:7e:84:76:ae:50:a2:
         0f:9e:84:e2:10:72:27:ec:80:cb:8b:d9:04:9a:90:12:1b:29:
         da:cc:76:25:b9:12:2a:66:82:d2:4c:e4:b9:65:ea:bb:50:bc:
         bf:b7:f9:c8:b9:71:c4:2d:1f:03:17:95:3b:ef:d1:a1:39:30:
         2b:12:7e:1d:02:31:6c:0e:58:6c:a0:50:05:e9:f7:55:6c:94:
         0e:4b:1e:75:f8:bd:26:1c:3c:a2:5a:ec:67:df:8c:10:cf:30:
         ac:e8:13:14:e3:5c:d0:1e:e6:92:b1:28:59:57:f2:2d:99:41:
         d8:0a:24:dc:90:b9:21:88:6c:02:be:ac:d1:5e:6b:bd:2c:7b:
         3f:12:7e:06:50:17:de:b0:c0:f2:6b:c3:4b:fd:c8:3b:f3:ba:
         13:24:55:e4:3a:8e:b2:7e:08:ef:7f:a4:fa:80:d5:4c:06:29:
         a9:d6:81:bd:fd:76:8e:81:d3:05:8a:64:72:75:fa:a8:37:38:
         34:f8:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:10:10 2024 by rpki-client on console-ams.rpki-client.org