Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
File:                     jlDZuD8_AVrYi_a3xShIZ0rly24.mft (raw, json)
Hash identifier:          KxZm7SOj8RhOLFAG04ihdwIYD+b2oCaDNfGQBi9yYt0=
Subject key identifier:   4E:5D:77:F1:DC:25:AC:F4:9F:77:EA:9C:40:6F:3E:07:FB:5C:BC:77
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Certificate issuer:       /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial:       0193568B27DB921B3C81FAD8D20B458C3E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
Manifest number:          06EA
Signing time:             Sat 23 Nov 2024 01:03:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:00 +0000
Files and hashes:         1: h61vszfCOlv0kwCgstvP7eRP7GA.roa (hash: jLGrkaLc3TOBpC5O/TVK3qF+vA7iToxJO3TN3oz+EpE=)
                          2: jlDZuD8_AVrYi_a3xShIZ0rly24.crl (hash: XHx4CANbnP1ombSA58Wj9etuftB2JRcB0AKFRuFqGv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:27:db:92:1b:3c:81:fa:d8:d2:0b:45:8c:3e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
        Validity
            Not Before: Nov 23 01:03:00 2024 GMT
            Not After : Nov 24 01:03:00 2024 GMT
        Subject: CN=4e5d77f1dc25acf49f77ea9c406f3e07fb5cbc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:62:55:4d:d7:22:f2:c1:40:fc:b2:a2:55:
                    af:88:55:56:d7:75:3e:98:4d:9a:b3:f0:14:47:d2:
                    90:ef:c8:4a:1f:28:78:64:f0:96:c2:ea:71:ed:ad:
                    9f:dd:ea:a9:25:a1:53:e2:58:f8:51:38:9a:55:77:
                    d5:e9:32:22:bd:a9:92:ad:4d:b1:b4:80:00:f6:2f:
                    c2:0f:0b:c5:7c:84:b1:fa:b3:6e:d1:5c:4b:9b:17:
                    29:b3:d0:9b:76:ec:62:18:e7:59:49:4e:73:e2:1d:
                    b1:61:65:94:34:0d:8a:93:df:33:54:75:ee:c7:66:
                    30:d2:19:89:eb:4d:af:a5:ef:b3:f5:97:85:e6:28:
                    fc:de:a9:58:b2:0c:84:cd:bb:45:d8:00:e5:48:1c:
                    69:1f:53:58:7b:6b:e0:89:75:33:da:9a:27:cc:a6:
                    89:04:70:ac:e8:20:a6:d6:2e:95:6b:6f:18:8e:31:
                    02:c4:7f:f7:2d:7c:6c:7a:2b:aa:1f:d7:0d:8b:f9:
                    37:f5:72:99:49:43:72:80:13:6e:d9:b5:e6:ed:6f:
                    88:35:ab:8c:79:bc:52:7f:db:60:e4:9c:58:0a:66:
                    ab:2e:37:bc:dc:b7:81:6d:09:ba:c1:93:90:7d:64:
                    6a:5c:a8:f9:97:45:86:14:0e:c5:0e:1c:92:58:8b:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5D:77:F1:DC:25:AC:F4:9F:77:EA:9C:40:6F:3E:07:FB:5C:BC:77
            X509v3 Authority Key Identifier:
                keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:ae:59:4c:e4:96:c4:24:d9:17:6b:21:3f:ec:a3:db:76:
         b1:c4:b5:d3:b7:85:e8:8f:0b:7e:07:e9:ad:3f:18:e7:4c:2f:
         e9:36:74:75:b6:af:f6:9e:34:79:7d:77:21:81:04:99:fc:29:
         59:d4:97:e9:42:1b:b2:b7:78:1d:14:5f:e1:7d:e2:d2:0c:b1:
         82:42:e4:35:b8:41:4b:ff:27:eb:67:81:76:be:17:48:16:e6:
         05:40:d4:b5:21:a2:db:99:0e:df:ec:2e:1c:eb:c5:d4:63:51:
         a1:df:8d:52:ae:fc:77:9d:9c:b2:07:ff:89:e3:da:a9:1b:16:
         c4:e6:97:21:ab:71:2d:fe:c6:cf:ed:9a:66:d7:4c:da:e8:ae:
         01:e2:da:ea:c0:72:0f:29:51:cf:9c:b9:ad:b3:b5:ba:17:df:
         d7:f0:fb:ac:87:d2:50:56:45:4d:e0:53:99:fb:91:6f:fc:ba:
         93:2c:d1:5a:31:ee:82:6d:04:e1:45:bd:6b:26:b8:6e:34:59:
         fd:eb:a4:08:a6:2c:14:41:60:cc:3d:36:de:d3:f9:49:5d:b4:
         28:ad:40:46:5d:13:7b:14:65:b3:83:ab:5d:83:98:0c:1a:b1:
         e2:36:0f:2f:2c:f9:e8:5d:f2:d7:07:4e:00:f9:bc:3b:3b:34:
         13:4d:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:57 2024 by rpki-client on console-fra.rpki-client.org