Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
File:                     JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json)
Hash identifier:          ZJZqygSAhOzYJKW+EeV9tTubnYcHnxA3uIeUkM2jwOg=
Subject key identifier:   7D:C5:E9:D7:8D:8B:8F:EA:37:87:08:A4:4B:3F:62:00:F9:F7:AC:67
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       018F242685B4806F75BE8C97768D3B4E5723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
Manifest number:          0E71
Signing time:             Sun 28 Apr 2024 10:00:55 +0000
Manifest this update:     Sun 28 Apr 2024 10:00:55 +0000
Manifest next update:     Mon 29 Apr 2024 10:00:55 +0000
Files and hashes:         1: 020fUQ8kHEOBNC9vpkjMaLo7P8g.roa (hash: WQ7B8z58/qRtjh6o6VwTXEkXispKzB6lD4kimo3u6a8=)
                          2: 0Hyzo0hnpiHBxDW04br4Ws6_FwM.roa (hash: TnF21hPVFwWeFBh7Z+3PzalMv9cO4yneAnDPRQJ2X9o=)
                          3: 1-3t0l6vKJ3YJQBoNhsWcts2xk38.roa (hash: aw10dc5u2WmCUbSCJ/Su/yGmh686bqLSTUaFeKeZvJY=)
                          4: 6QOuKs0pMLbn-D819bdL94c7DZ0.roa (hash: 5MiCB4ztBfjeiy7KXReIjp1Vkjr2ojZ2YPHAMJ6rzb4=)
                          5: 6nRRVSolaovwlTQuWDZP_DQXN1I.roa (hash: yw6jk74biX7RSqUMdW6HGI7HKmDFs2fZvqomRaf5cIc=)
                          6: EtDOiSCXoeNNTdnRDfE7baHiANc.roa (hash: ILTv3h8y3j+59ZTzCWgoMK6NKqix40g6GigeeisktW0=)
                          7: FJiZaMUBtAUUCAR7GnrCeKRKaiY.roa (hash: 82c//JgDtlzilUCwfHn76Vm7Sb7ZZYLIJ/9BrLfCwhg=)
                          8: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: HQKrPF0c1E/00zHWPRHzyKh9h5lSruEjERfhjko3PHA=)
                          9: Qc-vdaxHHC2qzqiVtbU3NtwhIEc.roa (hash: wVyehcP8j17dziTYbaWirEAmJhgDZnn/ypyZbyof4dI=)
                          10: QwHW9zRKSDjOPhyCEFmchZNk7yU.roa (hash: myBEZglhsWmrzvYGGPciDpLziFkofoV2gasp2JNcsNM=)
                          11: V2I353X9c6UPJJCcNKACwjU9uDo.roa (hash: Q52qzpu1g5L7Lxt0kixPoC8hflYnsk0ZDAAzDKk5FVQ=)
                          12: YXRKToY-ZkTEgteHDgYDSvF3JbA.roa (hash: HF4vLOpBuvyZR5vL5B5Quw46sVIRX2RSRh0XG+FuUuM=)
                          13: YuqEz1HB2ioFIYZl_5hwn6B0Hqs.roa (hash: 2BpszuLKIT3iT5RxUEMOOwCLK/oDiNrEcdijJTq5nxU=)
                          14: _xV_FRMPC-f9tb4epiPoXsfhrUE.roa (hash: NRce7z8XiWC81Uj6f3Fx6iRBnPGYQZW82LCK+OQvR60=)
                          15: aAd3eu0aAgou1_tDcCmo2DILPkM.roa (hash: 09a35DRtLryUI5G+QSL9aQFU0gY/vQQq/WSG80rjUgk=)
                          16: fHrKntuVADMl4AM_u6m3kI7wuH0.roa (hash: IYv8ppflUBnm7Y0ZOXopl+eOWCIIM2g3WX8U1khYU4Y=)
                          17: iHl9M9dD_Q4GMUfJ48BHVZYAO9Y.roa (hash: 5ajkJVPU2aNKACUypGflrQtIm4VQ667e4Q3OVKtR3Qo=)
                          18: jhlVJdEq5CSb7xeEJJluyO2cD4U.roa (hash: Y5BoZbliCSJMGLNrnV8LMOT4HfFNdC4CnHxcWDylkIc=)
                          19: n3aSDa0wSjG8DGNhKTdlur88OGE.roa (hash: VPcJk8WusHu4dtmr76P4oTKPvI9HQCWwgtPmrWQcNek=)
                          20: nsOo67P1pOxIhOHap1kvjAR1RMk.roa (hash: tXPzP2r5oOkRIIGaSeFIaz/0I3DrQz8utyF4G0BMg9Q=)
                          21: oLorp9_iFDp4cXGfuxdzhRgZ9LE.roa (hash: 4pwc7NCQP3MEy6N+c5Z/ph82JWsbo5yUQspJIn6/VRw=)
                          22: rcKBHWQU52NHbQwOqgbrTVfPPZM.roa (hash: inrKrbWp/uBLyVyLHz1xvqahfClpYnrRgll08/s3xdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:26:85:b4:80:6f:75:be:8c:97:76:8d:3b:4e:57:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Apr 28 10:00:55 2024 GMT
            Not After : Apr 29 10:00:55 2024 GMT
        Subject: CN=7dc5e9d78d8b8fea378708a44b3f6200f9f7ac67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:47:9a:f0:60:d0:9b:e2:74:12:ad:1c:38:
                    41:ba:1d:c5:50:5d:46:cf:a6:e7:1d:3e:d6:77:9b:
                    e7:d7:35:77:f5:25:9f:a7:52:ab:3f:eb:ff:d6:ae:
                    9f:16:96:17:48:4f:f9:76:db:5e:8e:ee:d3:f6:ca:
                    26:83:96:b7:58:71:01:9c:05:79:1c:11:5d:80:76:
                    db:ce:89:84:77:86:56:92:f6:ae:a8:a4:82:ec:87:
                    fc:a3:3d:7e:3a:89:8d:08:17:b1:92:98:6d:c3:bc:
                    76:c3:3b:68:db:bd:93:24:53:a9:5e:0a:e6:02:b6:
                    a3:c3:6c:3d:9a:30:db:d3:d8:0c:95:c5:7d:43:3a:
                    6c:7d:0d:fc:30:53:6a:8a:d6:04:33:ff:c6:ba:ea:
                    2b:24:4a:15:89:70:d9:13:0d:10:ca:fe:9e:ba:99:
                    d5:f5:5a:e2:17:4e:71:bd:ad:29:a6:6b:94:43:84:
                    3d:94:28:8e:1f:8d:12:92:e8:95:62:cb:16:f4:10:
                    e1:0e:c1:8b:05:d6:a3:d0:02:70:ad:c1:48:29:53:
                    a8:59:ba:f1:2d:d1:bb:97:33:e5:81:bf:64:17:be:
                    8f:55:38:d5:8d:70:cd:a3:9d:24:d7:a6:c2:31:4f:
                    07:25:c3:b0:8e:c6:36:49:35:ac:85:ce:d7:9b:65:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C5:E9:D7:8D:8B:8F:EA:37:87:08:A4:4B:3F:62:00:F9:F7:AC:67
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:f6:4d:65:67:46:e0:b6:16:92:fa:bd:02:d0:7e:e8:19:
         08:c7:80:75:ed:46:51:83:47:d8:cb:9b:cc:26:11:b9:4f:be:
         b7:74:17:1e:cc:ad:25:6d:84:e4:cc:97:71:83:83:6f:c3:e6:
         60:3b:02:44:ff:90:00:5e:ce:f4:bd:92:48:ea:5c:f9:ff:7a:
         34:46:f1:20:7b:c9:7f:d8:3c:aa:36:75:30:53:cb:ca:26:b5:
         28:ae:fc:bb:d5:f3:49:30:c1:80:16:4b:65:93:58:f1:1b:f5:
         02:ee:8d:82:d3:c2:98:92:55:08:a9:3b:3a:d5:70:e2:aa:cf:
         d8:08:7b:26:11:0c:89:c5:fe:fe:8b:7c:6f:f8:ab:b2:80:e8:
         c8:47:83:d9:69:f3:f3:84:56:80:ff:52:5b:61:49:92:7a:b8:
         7c:b5:b2:75:36:ab:67:33:fb:14:5e:f3:2f:38:a7:6b:ed:7d:
         44:f3:fb:97:5b:59:29:12:a3:42:fa:a8:80:0a:d6:d7:e7:2e:
         2f:d5:6e:29:94:77:30:84:af:e8:3a:58:c9:46:ea:53:4f:24:
         05:e2:2c:f4:f6:f9:64:91:f9:68:be:0b:2a:67:01:f2:5b:5e:
         78:88:93:95:09:db:66:67:67:a7:99:7b:34:65:0e:38:dc:af:
         c7:7b:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:21:30 2024 by rpki-client on console-fra.rpki-client.org