Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File:                     jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier:          AvHTC08c2s8YiCm3P38KLg6725qqAecxLGITzUPB0AE=
Subject key identifier:   64:03:C9:EB:05:31:4B:47:B6:0D:9A:DC:B4:EB:7F:0F:7B:59:C3:B1
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer:       /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial:       018F882476D6F8DF179F1AF0B8E42487F1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number:          1076
Signing time:             Fri 17 May 2024 20:00:41 +0000
Manifest this update:     Fri 17 May 2024 20:00:41 +0000
Manifest next update:     Sat 18 May 2024 20:00:41 +0000
Files and hashes:         1: 6G89pW9vGPjY4ZUh0bXzJpHdGnw.roa (hash: mI18Va7uu1ECGGUiA+LPSKLZzTwvnJMsTmBV5a0iNT8=)
                          2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: zPVcdv60dx91aBh4OHMJottQGkcUTIUZdNBNPBpYfnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:76:d6:f8:df:17:9f:1a:f0:b8:e4:24:87:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
        Validity
            Not Before: May 17 20:00:41 2024 GMT
            Not After : May 18 20:00:41 2024 GMT
        Subject: CN=6403c9eb05314b47b60d9adcb4eb7f0f7b59c3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b4:75:bd:33:83:e3:1e:10:10:d1:ea:e9:b8:
                    86:fc:8e:a8:59:b6:26:3b:e8:6a:4d:0d:87:8d:e9:
                    71:5c:45:20:87:0d:03:1f:38:47:4a:95:30:62:30:
                    9b:8d:72:ce:fa:4a:ba:09:56:ba:4c:69:2a:e3:4a:
                    c6:b1:4c:41:c8:d6:f6:68:20:64:6f:04:0b:3c:0b:
                    98:75:e9:6a:c3:8a:9b:b4:a4:06:bf:9c:6d:b6:7a:
                    6c:08:b2:92:b3:5b:a4:34:f3:b7:ee:be:8d:b0:2f:
                    b5:b8:c2:62:7b:a5:b5:7e:4a:03:ad:6d:2e:bd:9c:
                    27:0f:a2:79:50:c2:c2:45:fd:89:59:b4:a9:46:f8:
                    15:fa:59:cd:07:e5:43:79:23:9a:62:49:0a:66:20:
                    c7:55:02:be:3a:37:f7:61:c6:d0:a9:3a:9e:a8:b8:
                    eb:2d:41:4b:ba:fe:da:6b:c6:53:71:83:de:00:e1:
                    6a:38:c6:57:74:04:1a:d4:c8:94:da:e1:15:f7:cd:
                    21:0e:cc:b1:d9:e4:c1:d1:38:dd:1b:07:0a:5d:21:
                    9d:21:24:93:fb:53:15:1b:5f:82:fd:d9:74:f6:87:
                    ba:55:9b:11:1e:36:a9:fc:ed:59:28:2a:62:fc:9b:
                    f2:26:d3:32:d3:a6:06:23:c6:86:98:bf:bc:19:4c:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:03:C9:EB:05:31:4B:47:B6:0D:9A:DC:B4:EB:7F:0F:7B:59:C3:B1
            X509v3 Authority Key Identifier:
                keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:bb:27:f8:bf:f0:96:b2:e5:2b:c2:1e:6d:ab:42:a8:fd:
         2f:d6:17:e5:20:9c:56:2a:48:91:57:3f:b4:19:58:76:d5:71:
         21:92:48:72:85:3d:13:7d:92:82:85:b4:35:59:e9:6a:04:5e:
         69:da:f4:c9:95:01:14:b8:bb:a0:f3:57:3b:61:a6:0e:25:ee:
         90:80:93:92:6b:d5:75:e8:b0:8d:fc:f7:5c:9f:b7:84:af:cd:
         4c:be:11:ee:27:2d:bf:50:57:52:6a:d3:e4:c0:0d:8a:ec:1c:
         cc:bb:d0:3c:62:f4:89:f0:b1:b4:26:b9:82:d0:af:e2:76:7f:
         c0:a5:de:c5:05:c8:a7:e6:11:e2:7a:20:8e:60:b0:18:26:bd:
         53:89:3e:d0:be:05:07:ce:c9:97:2d:ee:8b:bd:66:6f:95:60:
         df:3e:9b:71:35:0e:58:b5:99:f1:1e:f6:36:e2:57:51:22:e6:
         e7:2f:65:8d:d8:b4:62:aa:be:61:29:2a:22:3a:09:7f:e4:9d:
         11:f6:56:cf:2f:9b:07:48:da:67:b3:25:2a:d8:b1:de:c0:4b:
         f5:9f:81:9d:8c:7b:c9:e7:0d:ee:39:45:4b:91:af:52:2c:b0:
         c0:e1:5a:c3:c3:37:dd:d8:86:b5:fb:8a:21:07:68:dc:6f:b2:
         14:a0:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:59:28 2024 by rpki-client on console-fra.rpki-client.org