Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File:                     jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier:          Vqrc//imojvxxzYMLbh0c2/jowalTHr7j0SNIm+8SD0=
Subject key identifier:   58:DC:C6:93:5A:FB:18:E3:BE:2C:7D:97:B2:42:A5:0D:2A:DE:6F:5E
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer:       /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial:       019356F6CF7235AF5221F20B48EA3A3FB672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 03:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:35 +0000
Files and hashes:         1: 1-7BuW4c18A9-shwSRnUQpTejiQ4.roa (hash: YEQE3pfREqMPVnaqay7yi2xcUejDaFyQkq6Zl/K9vj0=)
                          2: B9IdnEavUOWqbg89LlBdOtqSME8.roa (hash: 1AofKW2xzq1yv8vFWS9X0apsqX21P2ljST1p14RXRko=)
                          3: LeEgTB-iHYqDiB9kLYxdJMiHgr0.roa (hash: KukJ6Yy0FRMML3fIebP2Chf/Kb7eNOVymFJkaJ2xgfU=)
                          4: RvpKbI8x-yYCjPQZqpyJsK8t3Co.roa (hash: xh3+pFsXpbnNCnvxohTy0aSmb2flguzy3/jSq4CXgAw=)
                          5: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: 16j9ZNFTA7yKxDneEXC+vw0uo1RRTtg1ITrBMgEQcnw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:cf:72:35:af:52:21:f2:0b:48:ea:3a:3f:b6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
        Validity
            Not Before: Nov 23 03:00:35 2024 GMT
            Not After : Nov 24 03:00:35 2024 GMT
        Subject: CN=58dcc6935afb18e3be2c7d97b242a50d2ade6f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:e4:96:06:b9:08:69:3b:50:13:97:e0:41:
                    f5:30:0b:7b:d2:73:a0:4c:20:fe:96:ea:ce:bf:5c:
                    b0:00:55:df:06:9d:77:21:7a:f3:a2:4c:e8:4e:7a:
                    7b:3d:8d:89:90:7e:ca:76:76:41:e8:0b:90:dc:45:
                    d8:a5:2f:ed:1f:eb:85:cb:98:b3:27:22:e5:c2:3c:
                    43:e2:a7:a0:96:80:24:a7:ae:b1:52:75:3d:4c:e1:
                    12:f7:67:58:36:7d:cf:d4:8f:cc:61:4d:f5:65:07:
                    96:86:ce:a5:2a:6b:1e:be:92:23:21:26:79:71:be:
                    95:21:63:3a:7a:10:79:ee:06:a2:34:ab:d7:35:be:
                    e2:69:4a:68:d5:b5:c2:d1:62:5b:a7:12:f1:2b:d5:
                    07:78:cc:70:bf:81:fe:c9:23:b7:38:aa:3a:12:33:
                    d1:cf:4c:85:74:71:25:90:02:60:5e:69:79:62:a2:
                    8f:fa:53:73:71:d3:e2:1e:07:a5:7d:68:85:29:d0:
                    37:64:98:cc:24:1f:dc:5c:45:c7:f1:3c:ec:52:10:
                    59:95:4f:00:e5:76:c9:10:2b:e7:b6:93:e1:88:48:
                    e9:4c:92:13:29:77:a8:f8:17:56:ab:59:0f:ad:0d:
                    c4:67:9a:9c:74:65:e4:25:fe:0b:88:c5:0e:1e:84:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DC:C6:93:5A:FB:18:E3:BE:2C:7D:97:B2:42:A5:0D:2A:DE:6F:5E
            X509v3 Authority Key Identifier:
                keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7d:2a:d8:85:d2:1e:92:cc:98:7d:92:40:7f:27:dc:3a:09:
         cf:ac:dc:ce:03:c0:6f:3a:37:e5:22:55:4e:b6:9e:65:31:b1:
         05:79:62:ca:ed:a8:c6:83:fa:4c:42:be:e9:c5:58:61:9b:b4:
         59:06:5a:f8:72:b7:d0:b5:84:fe:ec:27:a9:49:c9:23:fe:50:
         f6:42:90:f9:72:47:48:35:e3:72:2f:77:00:0f:10:45:74:ca:
         6a:73:c7:f8:65:99:8c:68:03:46:ce:6e:1d:fd:37:db:b9:a8:
         f5:84:08:a4:9b:78:0a:0f:61:e7:7c:20:fc:cb:d6:64:65:46:
         6a:45:e3:98:f5:21:da:e9:f4:57:fe:4d:8e:25:09:e3:d4:40:
         59:95:9f:b8:07:47:ba:a7:22:bc:db:95:a8:18:76:94:36:70:
         70:6b:99:ad:36:77:07:31:94:05:cb:5f:ae:f9:47:60:0e:a8:
         f7:7b:12:3e:7e:d1:93:d4:3c:a3:01:2d:3e:33:5b:06:2f:b7:
         4c:36:9e:d2:b5:d3:0f:80:e2:de:a4:aa:40:85:5f:d6:51:36:
         de:70:01:26:dd:53:e2:75:5f:e7:8c:25:17:4e:08:1c:bf:36:
         9b:64:46:92:28:f7:20:de:99:66:98:61:ca:c4:02:41:c4:52:
         37:10:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:19 2024 by rpki-client on console-fra.rpki-client.org