Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File:                     JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier:          8Is112tW1EqmkiUc4o+lwYPgmwSNFv/N5Wgwc2WoED0=
Subject key identifier:   29:A0:32:F3:6C:56:71:4B:3E:F7:14:F1:46:AA:F1:43:61:C6:4B:97
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer:       /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial:       018F87ED763450138AA1C893D5614F407EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number:          074D
Signing time:             Fri 17 May 2024 19:00:37 +0000
Manifest this update:     Fri 17 May 2024 19:00:37 +0000
Manifest next update:     Sat 18 May 2024 19:00:37 +0000
Files and hashes:         1: Ia8BRBnZIo-G6GmQdCcTpOlqqYY.roa (hash: f7KaSJ1BG2aGyigS2gIUfQ1/3lKqNDCF4s0avuMVX5A=)
                          2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: Iea/dsxyNIENzEGNW85SQrdaY2A1UxXv8tXh67s5IDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:76:34:50:13:8a:a1:c8:93:d5:61:4f:40:7e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
        Validity
            Not Before: May 17 19:00:37 2024 GMT
            Not After : May 18 19:00:37 2024 GMT
        Subject: CN=29a032f36c56714b3ef714f146aaf14361c64b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:25:4e:f4:9a:41:dd:fa:df:7f:7d:b1:27:
                    7c:79:c4:b1:78:a6:d5:5e:6a:9e:a7:3f:15:86:86:
                    3b:79:98:dc:e7:96:7a:3b:6d:0e:78:69:f5:1d:9e:
                    94:db:da:80:c8:59:97:0e:4b:c6:2d:de:c6:8e:7d:
                    e2:08:b5:2b:a8:f5:08:45:ff:d1:74:43:88:aa:c8:
                    69:e4:8e:57:a6:b5:d3:29:df:46:8a:fe:0b:80:23:
                    3b:d8:39:25:a8:2b:bc:e1:0e:55:83:4e:ba:31:04:
                    64:8a:79:0e:0d:7d:a6:a6:cf:26:0d:54:04:dc:23:
                    55:30:47:c4:fe:80:a5:80:73:38:03:24:f1:dc:06:
                    5d:62:8e:89:94:c3:4f:33:2c:12:cc:de:d1:3b:22:
                    2b:17:0d:7f:07:f9:3b:53:92:14:e9:63:77:14:2c:
                    34:95:6c:5d:40:00:13:0e:e8:07:75:55:bb:48:8a:
                    d1:19:d3:c9:8a:a9:9c:40:74:6b:64:36:95:1a:0a:
                    8a:8f:35:11:2f:8d:f4:85:e4:85:f9:ef:ab:26:23:
                    56:0a:25:25:a7:21:fd:36:86:5c:3b:57:1b:98:95:
                    1a:58:08:5f:ed:19:49:a7:f6:46:09:a6:08:da:d6:
                    15:c3:19:b5:e0:80:5a:02:64:c1:75:98:62:06:6a:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:32:F3:6C:56:71:4B:3E:F7:14:F1:46:AA:F1:43:61:C6:4B:97
            X509v3 Authority Key Identifier:
                keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fa:54:95:82:b1:48:b5:1d:d2:4b:dc:17:c6:d6:de:69:4f:
         c8:ed:cf:3b:41:79:43:44:dc:f6:70:12:17:5c:22:2e:12:ba:
         4e:a4:19:3c:04:2c:f1:63:31:0b:bc:a8:43:63:39:30:6e:20:
         61:1b:23:1b:dc:7e:dd:a0:ad:ef:6e:8d:ab:ac:c1:0a:ee:e2:
         06:66:67:f6:b3:81:6e:12:3a:4d:12:09:16:01:16:82:7c:d6:
         0f:b6:a1:ed:4a:ba:9d:39:63:10:bb:bf:f5:3c:e7:d6:ee:c4:
         78:85:ef:0e:77:4a:e7:73:ba:e5:89:75:ed:e2:61:ff:0e:1c:
         1d:4c:d0:1e:58:8b:3f:62:dc:61:0a:81:17:fd:01:48:78:86:
         eb:e1:95:17:5a:c1:0a:d4:a6:42:32:72:90:77:b8:36:48:b6:
         24:bf:6a:f2:ee:f7:1d:47:09:46:2b:e8:2c:1f:4f:06:e5:7b:
         33:d7:49:7b:7a:94:28:f8:4c:1e:f6:2d:39:1f:a0:66:c8:a9:
         f8:63:40:4c:01:04:69:4a:42:9c:23:41:2c:39:c7:34:a3:7c:
         16:de:82:64:db:91:2a:66:b2:dc:a9:8e:51:58:b1:6f:57:a1:
         a4:d4:1c:23:31:5f:15:81:74:4c:23:85:f1:13:fd:7c:66:4a:
         dd:c4:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:08 2024 by rpki-client on console-fra.rpki-client.org