Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File:                     jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier:          qEeYAmMD3RfUoHbm1GyfzE8CV/ZQQyF7X7+PFzBCxbw=
Subject key identifier:   19:54:07:6D:7C:6D:97:70:F9:F7:8C:2A:41:36:03:C2:BD:81:2B:FD
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       018F8D14E2C97E7237C43453F446492E9166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number:          0D5F
Signing time:             Sat 18 May 2024 19:01:47 +0000
Manifest this update:     Sat 18 May 2024 19:01:47 +0000
Manifest next update:     Sun 19 May 2024 19:01:47 +0000
Files and hashes:         1: QmloTwHmKmhH5yTgs5RYG5We5V0.roa (hash: SDb4w6Xih9Jc30muPCmHxCC2JvDjlGQ8i3Yn58XL+7U=)
                          2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: coHL7ebzQe6VMhPBIIoyfb24+1Guls2NlmYt4VH4axA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:e2:c9:7e:72:37:c4:34:53:f4:46:49:2e:91:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: May 18 19:01:47 2024 GMT
            Not After : May 19 19:01:47 2024 GMT
        Subject: CN=1954076d7c6d9770f9f78c2a413603c2bd812bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:6f:5e:97:2e:ea:85:37:16:ea:e4:25:6b:
                    69:87:b3:31:54:c6:7b:c2:49:db:27:5b:13:19:72:
                    8c:91:b9:14:82:35:6a:89:de:7c:86:c9:80:2c:68:
                    fc:56:69:44:74:03:e5:eb:07:22:bf:2f:71:82:54:
                    99:d4:cc:db:51:eb:cc:68:87:7d:a1:01:f3:15:7e:
                    c7:04:2d:f2:87:66:cc:ee:40:e3:bb:0d:3f:30:a8:
                    77:8d:c0:dd:bc:d1:d1:b4:97:98:3a:eb:2f:1a:f4:
                    43:47:ff:7c:08:66:97:76:4f:e3:5c:10:b4:7f:7b:
                    51:2e:7e:95:4d:a0:36:84:37:08:eb:38:e9:3a:29:
                    bb:24:3c:0b:74:a7:8b:2e:9f:7c:77:86:65:5c:d3:
                    ca:ef:53:1b:4f:02:de:27:0a:3b:04:88:84:9d:49:
                    c9:9f:6b:c4:d5:3e:c4:6a:c4:30:be:ca:d7:ae:df:
                    56:be:10:5e:82:5f:5a:45:ff:b9:d9:ac:2e:b6:c4:
                    f6:28:37:7c:1a:f5:58:41:80:ed:09:66:06:55:86:
                    60:d6:15:07:b1:96:60:e8:4a:f1:42:4a:1d:96:75:
                    1f:ac:0e:66:03:80:4a:27:c8:2d:eb:e2:d4:17:44:
                    cb:f6:17:e7:59:fd:07:a8:30:44:b1:39:29:3a:99:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:54:07:6D:7C:6D:97:70:F9:F7:8C:2A:41:36:03:C2:BD:81:2B:FD
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0f:8a:22:9e:6a:5f:05:a9:f0:ed:32:33:8b:d0:c8:2a:99:
         91:ad:49:36:87:a8:47:32:7b:0b:99:21:f4:b8:22:c2:7e:2d:
         66:5b:a7:16:3d:cb:00:a6:28:71:ee:0a:0c:f2:e9:b8:75:aa:
         0c:03:57:71:a6:95:81:e4:9c:c0:b8:6b:b3:c4:34:77:24:a5:
         28:ce:7c:d6:58:9b:14:6d:f6:bd:c0:cb:89:40:e7:56:50:74:
         1d:b0:73:33:7e:41:9a:ee:fd:fb:7e:ab:8e:c0:8d:25:d5:60:
         b6:a9:4d:3e:b6:ae:3c:91:02:ff:94:c1:4a:e8:4b:1a:6e:fd:
         12:2f:5b:aa:79:b3:73:55:76:5c:b3:3d:c1:d4:6e:a1:1e:f6:
         c6:91:ac:09:54:03:41:5c:2c:ce:51:c9:3d:7d:12:58:83:28:
         05:78:25:82:93:28:f9:0a:a9:99:33:77:d7:ba:b4:c2:27:88:
         e0:2b:ca:ca:f3:90:a4:17:ed:9d:2f:11:ce:3c:68:f7:f3:8b:
         b4:bf:6c:41:41:39:9f:a1:bb:98:7e:dd:f3:67:b8:64:09:e0:
         28:05:cb:c9:0a:40:8f:ef:6e:ba:48:14:bf:85:cb:ae:67:85:
         5e:6c:bc:9b:4f:68:30:86:1b:18:88:6f:47:dd:9c:6c:1f:85:
         26:df:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:11:24 2024 by rpki-client on console-fra.rpki-client.org