Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File:                     jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier:          +HplddWHEhFNwa9oiiqnUqwzt5pQYedT4vucMn4wsH0=
Subject key identifier:   FB:05:BC:3B:4C:F6:53:BD:1D:1E:5E:44:CD:85:9A:ED:AC:F1:F3:94
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer:       /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial:       019239CAF56F5545E2AAE0CF2B5482014A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number:          104A
Signing time:             Sat 28 Sep 2024 18:00:55 +0000
Manifest this update:     Sat 28 Sep 2024 18:00:55 +0000
Manifest next update:     Sun 29 Sep 2024 18:00:55 +0000
Files and hashes:         1: 3-36QfNumz87WGmjBK8xmVLenUA.roa (hash: HuripX5JaanLD1DdOuo9ZBkOuUA4Sel/8Ly/9L5e8z8=)
                          2: hZDJcEGRIt-rGImHq0iZbpupt0Y.roa (hash: p4QzMFtS7xdVuUE1djgyOHJwDpTtnL7eCD7a+RBdDPg=)
                          3: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: 1B6TYOjlVu23OZJ4qMFT7BD/NxoaaVmMyxxY+KjmhoI=)
                          4: u6pZ4cdG4Zwgu2mkcQxxR9LTzRQ.roa (hash: 5wHTbQRjcb/mbbnpSpANPHICF5wiJQZ5d4VpHBFOWsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:ca:f5:6f:55:45:e2:aa:e0:cf:2b:54:82:01:4a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
        Validity
            Not Before: Sep 28 18:00:55 2024 GMT
            Not After : Sep 29 18:00:55 2024 GMT
        Subject: CN=fb05bc3b4cf653bd1d1e5e44cd859aedacf1f394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:50:ba:24:d1:a7:6b:36:0f:9a:a9:2d:27:
                    5f:d4:78:3e:a5:53:28:5e:72:46:93:0d:ee:0b:e5:
                    b0:3e:bf:d7:5b:b5:0e:ba:03:6d:77:fb:98:ee:af:
                    a1:f6:28:fb:63:ae:e6:c9:b1:b7:37:a7:16:8a:18:
                    82:e8:49:f0:56:88:6f:84:1a:9d:0e:08:e3:f4:c9:
                    86:88:d6:2e:25:fc:d9:d9:35:26:33:24:eb:00:3b:
                    fc:db:08:dc:78:4c:20:ee:ab:db:44:88:6f:01:6d:
                    47:47:cd:87:10:5f:9d:9b:8a:4a:79:f9:5d:0f:07:
                    5a:44:b2:d0:fc:72:66:6f:a4:c5:d7:7c:c7:62:06:
                    b1:25:8a:cd:ec:f1:23:0f:17:86:f4:6c:54:c2:00:
                    29:e4:18:fc:c5:c0:3d:ca:69:fa:06:ca:15:7c:1e:
                    f0:c8:42:f2:79:05:4a:64:4f:e8:68:c8:3f:a8:49:
                    ea:95:d3:01:27:0a:71:57:0f:78:08:3c:4c:42:5f:
                    c5:58:41:8b:0a:a7:23:85:0d:04:da:41:07:a3:0c:
                    1f:ee:ef:40:12:eb:57:ba:84:7b:de:0b:4f:27:c5:
                    93:a8:88:35:cd:3e:4d:69:d9:4c:41:ce:30:9e:e3:
                    ba:b1:42:ab:9d:23:09:4a:44:63:9d:c2:cd:82:af:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:BC:3B:4C:F6:53:BD:1D:1E:5E:44:CD:85:9A:ED:AC:F1:F3:94
            X509v3 Authority Key Identifier:
                keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:f3:e6:1d:05:4f:a9:97:ca:28:67:ca:f7:14:de:1c:b2:
         ab:a4:72:61:7d:ba:e1:11:c1:87:75:70:9e:6f:86:0c:9b:ff:
         6c:d9:7f:56:3b:57:0a:b4:b9:a3:c3:5e:3b:f5:25:92:52:5b:
         16:79:17:22:20:97:63:cf:b7:0a:04:b2:3a:d8:3a:7e:f3:a8:
         38:e0:d7:84:e9:48:77:95:7c:b0:2d:38:1b:eb:24:61:07:7d:
         bf:64:18:c0:b3:dc:4c:fa:ca:0c:8f:0c:dd:3e:a3:67:de:ce:
         af:8f:87:72:61:32:ee:66:18:fc:6d:05:77:4e:c0:80:c9:d1:
         80:80:53:6f:1a:fb:98:c7:9e:b9:c5:a9:5f:a3:f7:f7:7a:bb:
         56:e8:d6:fc:ca:ab:3c:d3:bf:d8:6e:83:ee:b7:51:40:21:1c:
         bb:d7:4a:fd:7b:98:09:3e:5f:28:52:a4:03:ec:44:fc:77:a0:
         ff:13:03:b9:64:c4:6e:f5:e2:51:a9:ed:a3:ab:07:92:5c:dd:
         72:66:8a:61:0e:fc:95:f1:c6:2e:7e:5a:3d:1e:9d:68:fc:81:
         fb:6c:23:30:e2:54:bf:a5:66:8f:d6:e7:8d:d3:3f:77:07:99:
         a2:04:f4:63:9d:c9:00:51:1c:bb:8f:ff:db:d3:fe:4d:3b:37:
         7a:42:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:19:11 2024 by rpki-client on console-ams.rpki-client.org