Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File:                     jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier:          7TwJQIa/PfD5axAIKjLqd4FVxyY+N0CzT+AB9mwfr1k=
Subject key identifier:   44:95:60:4E:AC:B1:7A:D4:45:C5:4A:A4:96:64:5A:22:AF:44:EC:9A
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer:       /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial:       018F874A4D4F5426CF600A907D8F059A46B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number:          029B
Signing time:             Fri 17 May 2024 16:02:24 +0000
Manifest this update:     Fri 17 May 2024 16:02:24 +0000
Manifest next update:     Sat 18 May 2024 16:02:24 +0000
Files and hashes:         1: _934LnWWrOTBgpiMvRjJadlxsbc.roa (hash: ey8VLZLs7sJTDr8SOj7eT3aWsNRJL5GDygBTGBYQdfo=)
                          2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: YHS1e/JgrKByzUmnHdqK0OeQCOHjmkZLsyZfThpCm5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4d:4f:54:26:cf:60:0a:90:7d:8f:05:9a:46:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
        Validity
            Not Before: May 17 16:02:24 2024 GMT
            Not After : May 18 16:02:24 2024 GMT
        Subject: CN=4495604eacb17ad445c54aa496645a22af44ec9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:5d:23:11:7d:e7:69:5c:c0:c3:6f:09:3b:
                    7c:d0:39:85:60:4c:e2:88:dc:05:e0:50:0d:f3:c0:
                    83:c1:a6:cb:0f:a4:70:8d:81:d0:89:7d:67:d8:45:
                    2b:0f:a1:7f:f8:17:60:c6:53:70:29:57:a0:c5:2d:
                    02:a0:67:19:5a:2f:28:92:e6:b5:37:63:51:dc:65:
                    28:37:20:09:fc:96:a2:f1:f6:18:5b:ca:9d:76:91:
                    4a:d0:2d:a0:a9:e4:fd:5a:1a:eb:08:27:e9:28:4a:
                    76:5f:ba:76:89:0a:0e:2d:c7:07:95:2c:46:b4:d9:
                    1a:41:13:2f:64:f7:29:7f:89:d4:68:a9:b8:42:e7:
                    a7:5f:f7:8a:09:b0:b6:2c:17:51:bf:90:29:f3:70:
                    ab:ef:d9:01:53:1b:35:fc:78:c1:19:f0:7a:c4:40:
                    3f:61:3b:ec:37:f5:31:e3:29:26:07:f5:05:bb:75:
                    21:c6:ed:62:04:2f:a1:ca:bd:f5:3c:25:f4:65:02:
                    a3:e7:1e:65:18:46:72:ce:73:9b:d3:4f:bb:87:12:
                    a7:22:06:58:83:e5:30:70:0e:d0:5c:a8:9f:9f:1e:
                    7c:0d:17:3a:01:6b:2a:f2:d5:f2:9a:cb:31:35:01:
                    0b:a8:c1:0b:5b:96:e2:f1:73:35:7c:b6:c2:69:44:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:60:4E:AC:B1:7A:D4:45:C5:4A:A4:96:64:5A:22:AF:44:EC:9A
            X509v3 Authority Key Identifier:
                keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f0:d1:e6:5b:c5:28:a6:78:fb:99:ec:80:b9:49:98:35:e9:
         8c:47:64:2b:ef:9b:bb:ec:d0:7d:20:bc:13:fa:2c:ee:b0:ee:
         95:ce:27:d4:8d:06:e8:cf:49:30:e1:b4:7f:90:3a:d2:9a:a6:
         f6:40:9a:7d:bc:06:d3:b2:e2:b2:72:e2:8b:79:4e:5a:b2:22:
         ff:8c:aa:3f:7f:ea:16:6b:e4:a2:5c:2d:7a:f7:76:75:71:3f:
         9e:58:5b:5a:2c:3d:bc:42:a5:9a:85:e4:36:f1:3b:57:bc:9c:
         a5:18:9b:f9:04:65:4e:25:0b:cd:ed:65:f6:da:94:e7:f1:af:
         39:43:52:40:db:8c:89:3b:00:86:d9:c5:06:12:5e:93:52:28:
         86:15:05:b9:e2:6c:73:c8:e8:c4:1d:c8:0e:2f:9f:35:02:ca:
         d3:7f:15:8a:51:35:22:c5:d4:a8:46:97:3e:f9:a4:9c:a2:9d:
         2b:64:56:3d:4f:c7:21:b1:66:91:f5:81:09:cc:21:2a:74:7b:
         2f:4e:ae:98:5d:cd:f8:aa:90:3f:d1:a2:43:aa:69:24:3c:98:
         21:95:9b:d8:2e:2e:3c:4d:16:7e:cd:04:19:fb:e2:22:12:1e:
         a8:96:dd:84:9e:e8:22:0c:7c:88:e3:54:51:0f:09:90:bb:99:
         30:42:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:18 2024 by rpki-client on console-fra.rpki-client.org