Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
File:                     JgsrxFR3yB13TaoMKKtEt3S6CSA.mft (raw, json)
Hash identifier:          sniWghOJNzJzhy2KT4xh3AuuhMBnEsVl4mkkFoxkBr8=
Subject key identifier:   4E:7D:1A:B2:32:6C:92:AD:73:92:2E:99:50:9E:5D:A3:84:E3:E6:92
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Certificate issuer:       /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial:       0193520770C0B15BEB789D4333B43BA2B1FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
Manifest number:          0AC9
Signing time:             Fri 22 Nov 2024 04:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:39 +0000
Files and hashes:         1: 0Jq8n90k5szqAQEsosfOtvTL8Mo.roa (hash: W5q7e4geFMuGk+ZGYK+lAMz/e3RY5llpNVLUu5Wrqgs=)
                          2: 2M70nxbLqnt65PB66pYaB-R_6pY.roa (hash: avqN05agZf1q8s+MNe8lVvICJ2NlsujNu30WMXU9n74=)
                          3: 8KK2bVrwOz5QjayjpcCPMbGvNXI.roa (hash: wS/OrOYhu0IdkxZfmrs17kPeAyZd4nz+gOLzfr45WaA=)
                          4: EwviQaHMpksIErXZsB6FG0ct3k4.roa (hash: EKKOJZ4Gkvkk1eRGKVys31HkDbrjXb7+zAYvWXsU4mU=)
                          5: JgsrxFR3yB13TaoMKKtEt3S6CSA.crl (hash: wPK3H8avgHdVpnOAJ8ZiB8rz1Me3fBDdgpSZZi1o4vc=)
                          6: Khg3x1HWTHnU8D79vhku6PHJ_-c.roa (hash: arj7dduYFfeQxUGzyK30vcXZ5OrRnZYZfMYRoVcHJpU=)
                          7: fKf8cjhmMfXy-R8mjWEpsQOv3Hw.roa (hash: /ueHbIIFjVYrFlKi4gvzBT1UgHxcGG/iYqOiZ0cxFJQ=)
                          8: n5oADQeAzlwW-snsYInJ8J1sh2o.roa (hash: PisRnHFVSCqKTcq8eRqfBGj3TG3PxM0JWhauYCKmiXU=)
                          9: sA4OyD7S4rElTK7wEZRQl52YCIY.roa (hash: C8U/Onx8ilxOoTJVkuISHrtfDDMmBg3ygteUtesUKJk=)
                          10: v-P00hCxPjeZLilp45ktkGiEltw.roa (hash: 1MHyuLKDFlE6DDyQ6vjv/5YQlLy9070QzzjnPYOKYQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:70:c0:b1:5b:eb:78:9d:43:33:b4:3b:a2:b1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
        Validity
            Not Before: Nov 22 04:00:39 2024 GMT
            Not After : Nov 23 04:00:39 2024 GMT
        Subject: CN=4e7d1ab2326c92ad73922e99509e5da384e3e692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:b6:f9:e8:22:e2:e6:9f:66:57:5c:46:7c:
                    26:90:30:5b:66:89:cc:72:30:0b:63:fa:37:df:d0:
                    bd:ca:8d:df:cc:98:79:af:87:55:4b:77:68:31:94:
                    b8:a4:4f:e1:0e:b6:34:47:32:a2:5e:02:44:3e:c4:
                    53:e0:10:0b:be:c2:cc:3b:f9:42:a5:a1:80:43:5b:
                    4d:43:57:ff:8b:46:f0:e2:4d:0f:5b:1d:da:24:41:
                    9e:39:2b:ba:0c:3c:58:48:88:6a:e3:49:22:89:ff:
                    f4:66:e0:3b:0c:4d:21:2d:9d:4c:a9:26:ea:8b:5f:
                    04:6e:92:cc:95:5b:1f:5e:f1:aa:06:06:fc:6d:83:
                    f8:dd:3d:ec:a3:e9:ca:ed:9b:b9:7a:55:ed:26:ef:
                    1a:96:1f:56:05:89:b8:7d:9b:14:07:a7:0c:1e:01:
                    72:7e:52:d1:70:73:b5:c8:96:ba:ef:8e:fe:47:5d:
                    0a:85:8a:02:95:52:30:fb:72:3c:d3:ad:b2:48:c2:
                    aa:8e:5b:7d:22:cd:86:c4:d9:ba:13:9f:94:26:d2:
                    01:23:b2:bc:52:d9:38:ba:76:8f:27:5c:a4:09:f9:
                    43:65:b1:c9:1f:ca:9c:a4:c0:cf:9e:f6:a8:d3:e7:
                    eb:a5:25:f8:2d:0b:92:9d:a3:94:5f:ef:e2:04:d2:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7D:1A:B2:32:6C:92:AD:73:92:2E:99:50:9E:5D:A3:84:E3:E6:92
            X509v3 Authority Key Identifier:
                keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:26:96:fc:63:2f:b5:c1:d1:6a:fd:c5:01:28:c4:2d:b6:14:
         ed:7a:80:eb:6e:1b:d9:92:b7:a5:95:7d:74:37:ba:7c:4b:97:
         ba:7d:b5:cd:27:78:40:18:22:29:3e:be:24:2e:56:0c:ff:10:
         5c:53:e6:51:3d:1b:43:ba:ff:ce:38:79:65:84:61:96:e9:5f:
         0e:5b:dc:9c:9b:c4:f7:e4:31:5a:78:82:47:5d:13:ef:1c:a0:
         d1:db:52:e3:d8:1b:73:47:c7:70:c0:e5:f1:89:7a:78:f8:5c:
         83:10:0d:3c:4a:41:42:ff:22:7a:f6:e9:30:e0:67:65:b6:fb:
         c3:98:5f:b1:73:7e:85:ce:13:8c:f5:78:dc:8c:c3:80:d9:8c:
         87:fd:b2:4f:02:e5:da:ca:5b:77:c5:4b:bc:bc:f5:29:26:75:
         be:8f:bd:93:bd:3e:b0:51:7b:30:d8:58:e7:31:20:2f:b6:ce:
         14:4f:65:55:d9:3c:9f:91:68:74:36:23:0d:42:b2:9f:ec:01:
         2c:66:92:6a:75:ef:14:a6:1d:69:57:27:b7:73:1e:f1:33:42:
         31:1d:87:41:27:ac:21:4d:d8:a4:81:f6:25:1e:61:ea:11:c8:
         35:13:10:68:ba:3e:62:94:f9:09:88:40:31:66:8e:1f:f1:22:
         3b:c6:b5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:47 2024 by rpki-client on console-ams.rpki-client.org