Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File:                     JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier:          miVNaURUIBvyQW+PGM9NcbERzcm/eitutmQygRWEB4I=
Subject key identifier:   9E:BB:3C:FA:15:D7:7B:D4:37:3B:AB:FC:40:D5:A7:E7:BC:80:49:B2
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer:       /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial:       018F87493EAF4F238A109EBE05A200C69F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number:          0CA4
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: gYXuVqgxnsZjkxXAgIwdHiJT1MaFQIFQPrUtNi01I3c=)
                          2: cTN1Y09PtkgkqehmSl_CFfQ7UHQ.roa (hash: ABM56JYlqXXcVK8hHnUO9LjCVD+aT/7wBVQRM8XyDFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3e:af:4f:23:8a:10:9e:be:05:a2:00:c6:9f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=9ebb3cfa15d77bd4373babfc40d5a7e7bc8049b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:58:13:b3:65:23:7f:93:34:fd:db:b1:76:
                    9b:c1:11:50:7c:65:36:07:09:db:e9:b5:6b:50:98:
                    11:3a:08:b3:70:bb:e3:71:d5:bd:6a:fd:c8:c1:2f:
                    ce:cc:38:c9:25:36:d6:2f:fa:13:ee:4a:7b:d8:16:
                    31:19:e1:7f:73:95:c5:35:a0:35:cd:f9:e2:ba:f7:
                    a9:cf:d8:03:03:04:a5:00:a5:a7:a5:fa:8d:ea:35:
                    e9:22:01:26:01:2f:e0:59:03:7f:ba:5e:ab:5d:b1:
                    86:a4:6b:d5:f9:a1:39:fe:ef:90:75:bd:5e:f8:2a:
                    61:59:02:89:86:04:bd:c3:57:f7:22:e0:69:8e:81:
                    b9:b9:ef:12:46:22:bf:9d:42:3f:c0:56:06:5a:1b:
                    dd:33:fd:c0:d5:71:f7:ea:68:6b:c2:83:82:83:86:
                    fc:5f:48:9f:19:ef:ea:73:ec:43:e8:40:9c:57:eb:
                    04:17:be:11:0d:7e:2a:b6:e2:3a:98:ff:20:fe:bd:
                    09:37:ed:a1:7d:af:a5:b4:2a:35:5c:90:22:a3:67:
                    ad:50:12:b7:60:d9:c9:93:1d:fa:10:40:45:78:ae:
                    fc:cb:c5:7b:13:a9:7d:8e:37:93:ed:7a:2e:97:c9:
                    95:c8:22:c4:ab:a8:a3:97:ab:4e:5e:72:e6:32:2f:
                    fc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:3C:FA:15:D7:7B:D4:37:3B:AB:FC:40:D5:A7:E7:BC:80:49:B2
            X509v3 Authority Key Identifier:
                keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:20:12:ae:a5:37:c2:13:12:7e:a5:81:aa:d9:2d:8e:cb:2c:
         ed:ec:f6:aa:5f:85:e7:28:9a:4e:45:f5:d7:c1:05:a6:50:5c:
         7f:c1:27:c0:c1:f5:57:7a:fe:84:03:53:1c:ff:6d:64:2a:53:
         d9:35:2c:63:d7:8d:5d:b2:7c:13:0d:f6:14:4d:57:c1:81:52:
         d6:fd:07:46:b5:da:9d:93:72:17:ef:14:75:66:c3:e2:1e:14:
         f3:fe:8e:07:72:36:10:24:b0:26:38:3d:d1:90:e0:bf:cd:63:
         e4:ea:18:a4:77:2b:17:cb:4d:b6:3e:7a:21:ad:83:9d:2b:f4:
         e6:5b:f2:8f:d4:c8:48:38:fb:3c:f9:19:9f:66:b8:b4:7b:14:
         9f:f0:b9:20:de:c7:14:d6:64:a1:2c:9c:73:51:dc:bd:7c:c9:
         54:7d:7c:b8:98:cc:de:42:7b:2d:2c:62:09:1b:ee:5c:7d:01:
         27:60:d8:55:8d:98:b0:6d:ba:a5:d4:cd:6a:fe:7f:20:81:ea:
         cd:9e:34:53:f2:8f:73:21:0e:21:4c:fa:3d:00:1b:81:dc:6d:
         f3:62:85:80:5c:61:49:93:11:5b:d6:c3:2e:c3:85:a2:f6:3b:
         0e:21:3c:6d:5e:1c:6b:12:cd:4a:c5:26:be:86:de:3e:4b:7b:
         d4:c5:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:18 2024 by rpki-client on console-fra.rpki-client.org