Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
File:                     pJR6ZT3sU9F51XJPJRTHJW22nfg.mft (raw, json)
Hash identifier:          7VUlcHi2p83FHbERSGLy6rhEyFVAEVpUOXXNP1+msz0=
Subject key identifier:   68:B9:C2:62:D7:76:1A:8E:1F:B7:DF:AD:D6:EA:1B:90:0D:2B:47:E5
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Certificate issuer:       /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial:       018F9BAB5605748709BC88321DD82B122EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
Manifest number:          0AAF
Signing time:             Tue 21 May 2024 15:00:48 +0000
Manifest this update:     Tue 21 May 2024 15:00:48 +0000
Manifest next update:     Wed 22 May 2024 15:00:48 +0000
Files and hashes:         1: fZkJ8LnxI1KVqJJ0LTA_dq21fB8.roa (hash: llipMj2DhUUn7p6FtOuOxGJ0oBzPK96wbkC2GxM23b0=)
                          2: pJR6ZT3sU9F51XJPJRTHJW22nfg.crl (hash: HhdWTsgKxeVEbHb5E8wuk/816ADRJqdOgLqkitEMw0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:ab:56:05:74:87:09:bc:88:32:1d:d8:2b:12:2e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
        Validity
            Not Before: May 21 15:00:48 2024 GMT
            Not After : May 22 15:00:48 2024 GMT
        Subject: CN=68b9c262d7761a8e1fb7dfadd6ea1b900d2b47e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:04:6c:8a:eb:4c:38:0d:a2:19:c3:0d:19:
                    50:28:3e:5a:fe:99:b5:18:62:b4:ad:45:83:e7:18:
                    9a:f6:6b:9b:1f:c3:7c:fc:79:a5:c4:f6:4c:d3:d4:
                    37:cd:b0:02:00:f8:2d:0a:e2:7a:1c:0f:9e:0c:fa:
                    bc:af:f4:b5:b6:32:73:c6:5b:2b:41:06:24:6d:25:
                    18:0f:fc:25:71:ff:40:a8:e6:86:a0:6f:b5:ff:43:
                    e8:98:84:1e:d7:e3:5c:0a:58:12:91:05:a3:af:3c:
                    be:41:4e:ff:eb:10:bf:17:35:3e:d5:b8:00:93:21:
                    4e:59:7f:6e:09:bb:1f:0c:50:52:7e:c6:aa:7f:7a:
                    4e:f6:fa:c8:e1:29:d3:c9:fc:4f:38:74:1b:91:61:
                    4a:67:10:90:89:3f:11:b5:7d:77:00:b9:6d:a3:56:
                    62:b4:53:87:76:b5:c9:ce:b1:00:05:6c:72:a7:33:
                    3f:c8:ab:27:aa:2a:64:17:56:08:59:25:aa:a0:5e:
                    1a:ee:9c:a6:e2:ed:1e:86:fa:f9:c8:cd:a8:b9:f0:
                    a5:17:d8:40:7d:25:38:73:c1:f8:db:ca:4d:09:e9:
                    22:b3:7f:a9:9a:70:73:f0:59:0b:8c:dd:5e:24:f8:
                    94:b1:20:d4:d7:3f:9a:e6:6a:ff:ca:d6:15:68:53:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B9:C2:62:D7:76:1A:8E:1F:B7:DF:AD:D6:EA:1B:90:0D:2B:47:E5
            X509v3 Authority Key Identifier:
                keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:42:f9:96:e3:28:a7:a9:66:e4:32:5f:be:ac:bd:9f:0d:93:
         d9:64:bc:84:82:ba:08:e7:ec:4d:e0:dc:14:19:10:c1:0c:56:
         16:a1:4b:06:42:29:da:4d:ba:96:8e:ee:50:2e:89:c6:dd:5b:
         c8:db:28:5c:ea:80:5b:5b:79:07:da:1b:e9:50:6c:4e:fc:20:
         ec:7d:d7:64:a1:1b:4a:f5:93:e3:35:ae:f1:52:56:32:f7:a8:
         95:84:d8:ef:c2:89:97:e6:a6:cb:b7:5e:3c:93:52:fc:ff:ce:
         7c:59:c0:0b:4d:33:1c:3c:bd:13:40:50:03:a9:63:4d:ef:31:
         6b:81:a1:ff:0e:af:dd:77:4e:13:d4:e6:28:1e:59:38:c2:b4:
         15:99:47:fc:78:c2:65:7c:38:f0:41:36:f8:a5:98:ea:b1:b4:
         25:90:7e:74:b4:fd:5d:3e:e1:96:40:7e:79:01:5a:99:dd:b0:
         86:a9:9d:95:74:e2:fa:88:70:a1:d0:7e:83:b8:9a:a7:5f:65:
         d6:e4:c4:7b:0b:2f:5e:85:bd:60:81:80:b2:9c:11:24:93:b7:
         2b:2d:1f:9e:c8:c3:f8:97:47:b9:4d:b8:03:4d:bb:f4:4c:bb:
         12:1d:98:bb:ff:9e:33:58:13:68:94:14:7d:e2:9e:da:df:2e:
         0f:e7:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:47:38 2024 by rpki-client on console-ams.rpki-client.org