Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File:                     Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier:          s+G9bbSz6iIVz/PH5hh/SUEvMTS/yiK9cakTSMUAbVQ=
Subject key identifier:   DE:A5:B6:43:40:49:CA:8A:F0:F4:CE:31:7D:98:40:36:8A:7D:6B:AE
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer:       /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial:       019053FFC8F99C9AF64E83433E5BA8AF5ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number:          11E2
Signing time:             Wed 26 Jun 2024 10:03:10 +0000
Manifest this update:     Wed 26 Jun 2024 10:03:10 +0000
Manifest next update:     Thu 27 Jun 2024 10:03:10 +0000
Files and hashes:         1: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: eQzmV4PytTVXnUrDPw8mRWw+IOuw8xL6jUKa2c1GRbM=)
                          2: KOFewROANVLTfJnYH7Mfjar_kP8.roa (hash: rteKqUSWjMlXD8MglHsWIs5Let3xmvhIcxiuZFWifgI=)
                          3: bfiIBz0O4mQBu6DBFzxZpAbrGS8.roa (hash: N+6SSy+dRDHtePYahekfytCPqVY61OYN6/8EE/Dg1HQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:ff:c8:f9:9c:9a:f6:4e:83:43:3e:5b:a8:af:5e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
        Validity
            Not Before: Jun 26 10:03:10 2024 GMT
            Not After : Jun 27 10:03:10 2024 GMT
        Subject: CN=dea5b6434049ca8af0f4ce317d9840368a7d6bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:92:13:e6:81:a7:1e:e4:7d:21:8b:06:90:
                    7a:d1:de:f4:19:4f:bc:47:ee:4b:ab:7d:c7:19:98:
                    0e:ea:70:4b:2e:8a:d9:d9:1b:ea:31:29:61:f8:62:
                    67:9a:f9:8b:e5:5c:bb:af:7d:78:e9:b8:92:e4:9a:
                    a7:28:3d:ea:11:be:f6:84:31:92:71:8f:2c:79:a0:
                    be:28:c6:bd:3a:3a:4a:09:ac:26:30:75:d5:fe:fe:
                    24:c5:ba:b2:92:38:95:86:da:eb:21:ad:9e:1c:07:
                    93:fb:8f:8b:98:9a:8c:1d:0b:0f:0e:d0:d4:4e:cf:
                    8f:8b:ce:50:e9:b4:86:f7:20:5f:55:fc:1a:3a:df:
                    ee:bc:85:55:d8:99:25:87:6b:a2:cc:bd:5f:39:2c:
                    69:d6:c5:a5:ef:fd:cc:17:0c:64:71:65:fe:f1:09:
                    46:03:e1:bd:31:a5:fb:3c:5b:94:3a:a5:51:4e:ca:
                    42:2c:29:ec:45:14:b4:29:64:b3:40:29:77:7d:34:
                    55:e0:1a:a9:48:14:9c:26:c9:95:b9:ac:54:a1:f2:
                    54:8a:36:90:5a:95:4a:17:ba:65:61:6c:34:6b:72:
                    d7:d3:9d:a8:ce:d7:23:e4:24:dd:86:28:17:95:c9:
                    21:68:0c:5a:30:67:53:62:85:4f:82:7f:5f:4d:9b:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A5:B6:43:40:49:CA:8A:F0:F4:CE:31:7D:98:40:36:8A:7D:6B:AE
            X509v3 Authority Key Identifier:
                keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:72:38:9e:24:9d:81:15:f5:b4:50:14:50:d8:db:9e:9b:13:
         2b:a4:29:df:fa:bb:25:25:97:a0:45:c4:b6:37:f0:0f:a5:e9:
         92:5b:dd:bd:c7:10:52:01:28:5f:87:c6:81:e8:fe:66:ff:e5:
         75:92:e9:0b:8a:2e:70:28:f8:d1:c3:76:50:07:93:81:93:d0:
         b2:8c:44:33:73:27:ea:9e:cd:fe:ec:70:d7:93:db:82:45:6b:
         dc:a1:74:84:cc:c6:95:b2:77:71:71:42:98:7c:aa:0d:b4:cb:
         78:96:21:c3:ef:32:62:f3:18:c7:94:93:fa:ba:ac:c7:77:59:
         64:74:a4:3a:5a:e2:3e:4b:ef:06:f4:ec:27:db:d4:17:50:ed:
         32:08:93:0c:34:b5:4b:fa:3b:63:74:aa:82:4b:56:e4:1f:1f:
         ed:a7:c3:36:7f:46:6d:a3:69:a8:6c:02:80:03:f5:b6:2e:a5:
         11:67:33:73:2a:d9:61:b3:14:da:ca:14:16:1e:fe:ec:13:0d:
         a2:7f:e3:7d:06:d6:16:2f:40:ef:c4:b1:c9:8a:50:12:5d:48:
         c8:45:98:c9:44:f8:48:a3:4c:e7:6a:0c:5e:a8:4c:e9:41:84:
         9f:78:70:42:71:72:b0:33:18:27:95:bb:cb:9e:81:e8:b5:d9:
         f3:ff:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:33:27 2024 by rpki-client on console-ams.rpki-client.org