Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
File:                     Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft (raw, json)
Hash identifier:          q8rnhvKFBqzLV/4xPIJKFfg7FCZPfSAaMS9ERD6Zgqw=
Subject key identifier:   8C:04:A8:35:52:62:23:46:56:5A:25:05:A9:51:D5:E3:D9:D2:1F:5B
Authority key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
Certificate issuer:       /CN=265e85f8262888b54a849bdcf4cec50316911a08
Certificate serial:       0190817AD4C1E790577D5861AD45BE4C8208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
Manifest number:          8B
Signing time:             Fri 05 Jul 2024 06:00:29 +0000
Manifest this update:     Fri 05 Jul 2024 06:00:29 +0000
Manifest next update:     Sat 06 Jul 2024 06:00:29 +0000
Files and hashes:         1: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl (hash: n922+zZJRyyEWepGq6T4nW8DVXfb/+0HE2aRFg9hmrY=)
                          2: W3dyLrC3uMNB6kvwhzK7GCp5Doo.roa (hash: GIt3HzAOc8cQTEAPvJDwB2agdC8nJXLPBho3nD4bcBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jul 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:81:7a:d4:c1:e7:90:57:7d:58:61:ad:45:be:4c:82:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265e85f8262888b54a849bdcf4cec50316911a08
        Validity
            Not Before: Jul  5 06:00:29 2024 GMT
            Not After : Jul  6 06:00:29 2024 GMT
        Subject: CN=8c04a83552622346565a2505a951d5e3d9d21f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:1b:86:d4:0e:cd:3d:af:60:4c:ae:f9:46:
                    c9:18:b5:b1:a2:08:ad:10:a2:90:28:45:79:d6:a5:
                    26:6d:11:e8:2b:6a:5c:0f:1d:4a:66:f3:e3:dc:93:
                    1e:08:2f:6c:0c:ea:f8:05:ff:21:37:82:09:b8:2e:
                    d4:de:e6:f9:86:6c:92:dc:1f:e5:07:5e:2b:af:d2:
                    b7:03:fa:45:af:9b:88:37:af:fb:82:9c:b2:59:71:
                    48:2c:af:f1:ee:9b:a7:80:50:72:fe:5f:6b:98:08:
                    5d:90:fc:e9:9b:f2:61:c9:55:69:5f:0e:29:e2:b7:
                    66:57:ca:67:1b:97:e3:f5:28:7e:47:f9:29:8e:d3:
                    a8:c2:23:3e:f0:03:40:54:8c:b0:e1:2d:8c:12:a9:
                    f8:08:79:3f:0e:75:a6:ec:37:1a:e8:e0:98:3a:46:
                    ce:50:30:8e:ef:6e:a6:59:ea:f9:cd:ed:fe:28:5f:
                    8b:c7:bc:0c:08:4c:b2:55:a5:e6:2e:c8:9c:cd:ec:
                    5b:d0:36:3f:c0:8c:42:f4:38:71:4b:78:52:1b:4c:
                    fd:a5:bc:46:7f:31:f7:d9:5f:d7:11:24:d6:92:ed:
                    36:44:08:b9:47:e3:be:3b:4a:66:1f:ac:3f:8c:15:
                    2c:19:57:c0:33:4e:ac:38:da:8b:4d:21:7a:5d:45:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:04:A8:35:52:62:23:46:56:5A:25:05:A9:51:D5:E3:D9:D2:1F:5B
            X509v3 Authority Key Identifier:
                keyid:26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:55:b2:f8:1d:dc:7e:a7:0f:3e:fd:68:72:1f:0c:0d:e2:1b:
         d3:e9:72:0e:83:83:09:24:05:10:21:05:81:f7:e4:74:5c:98:
         02:25:d2:bc:f6:1f:b1:42:85:a2:f0:09:a1:36:92:4c:c8:1b:
         20:eb:d7:7c:26:23:4e:6a:8e:9f:9c:65:29:a6:85:f8:63:57:
         61:9b:63:de:0f:d9:35:dd:9f:c3:47:d4:be:b6:3b:79:65:8d:
         f6:67:60:81:5f:56:7c:8f:31:e5:0c:69:30:50:31:97:3e:25:
         3e:c6:61:e5:76:42:10:04:2b:9f:95:b1:44:c1:e5:7c:a0:3d:
         27:02:15:42:b3:0c:3d:3c:cf:21:33:40:93:91:65:37:08:47:
         af:d8:57:78:8a:49:bc:21:dd:99:0e:c1:e7:74:8d:e9:54:07:
         b7:c2:ab:73:38:3e:91:92:5f:c1:ef:41:c1:4b:16:74:61:7e:
         b3:b2:e1:08:af:fa:69:7b:1d:bc:6d:07:29:e5:36:08:da:a7:
         a3:a8:58:60:e4:68:60:b9:0c:99:da:cb:44:1d:aa:02:c6:84:
         0d:32:c4:eb:9b:39:31:9f:84:bc:df:e9:73:11:1b:4a:f9:6c:
         fc:7a:06:15:41:a9:a6:51:e0:6d:00:15:63:a9:95:4f:12:28:
         3e:9e:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 07:31:00 2024 by rpki-client on console-ams.rpki-client.org