Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
File:                     jnqSzEub2N43j34iGKYlF9msVrw.mft (raw, json)
Hash identifier:          7/e2Fe+PI1f/HHL7ygVdnoCgcfqHc+Ud5zfZTEPsyM8=
Subject key identifier:   85:51:21:C2:31:5E:FA:A3:9F:17:B2:67:F2:A4:33:7A:7D:CA:58:FC
Authority key identifier: 8E:7A:92:CC:4B:9B:D8:DE:37:8F:7E:22:18:A6:25:17:D9:AC:56:BC
Certificate issuer:       /CN=8e7a92cc4b9bd8de378f7e2218a62517d9ac56bc
Certificate serial:       018F885AEC0A7E69968426BA14C58D6FA352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnqSzEub2N43j34iGKYlF9msVrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
Manifest number:          0D1D
Signing time:             Fri 17 May 2024 21:00:11 +0000
Manifest this update:     Fri 17 May 2024 21:00:11 +0000
Manifest next update:     Sat 18 May 2024 21:00:11 +0000
Files and hashes:         1: S25kZ6al-ctwb8BPTOUFZUwkye0.roa (hash: yeFPo6DxiHCXYF9YQ1UuN4S//oeWU2z9m/NapFi5Irg=)
                          2: jnqSzEub2N43j34iGKYlF9msVrw.crl (hash: tuCNekEz5DrlLYAHqev87gMhNhMeZhd9lXV1UF4BOig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnqSzEub2N43j34iGKYlF9msVrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:ec:0a:7e:69:96:84:26:ba:14:c5:8d:6f:a3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7a92cc4b9bd8de378f7e2218a62517d9ac56bc
        Validity
            Not Before: May 17 21:00:11 2024 GMT
            Not After : May 18 21:00:11 2024 GMT
        Subject: CN=855121c2315efaa39f17b267f2a4337a7dca58fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:8f:96:cb:71:d8:09:8c:47:81:bc:13:c2:
                    b8:ef:80:c4:ea:4f:c7:05:e3:03:54:b0:4e:51:16:
                    3d:27:92:4b:03:94:18:35:a7:87:dd:84:1f:72:d6:
                    c5:c7:64:c9:8c:8a:05:ed:98:72:14:f7:70:75:39:
                    46:03:8a:b4:20:72:74:3b:9d:f3:db:ed:0a:dc:f1:
                    f2:05:4e:1c:77:a3:64:c3:bb:02:f3:4e:89:4d:09:
                    d9:65:49:65:c9:96:4f:ab:bf:b1:15:b2:b9:55:a2:
                    50:a9:0c:82:41:85:ab:64:48:96:38:80:be:5e:8e:
                    bc:0d:27:72:c6:dd:59:bc:54:ba:a2:c6:9c:4e:88:
                    66:dc:34:cc:40:52:ee:95:ed:54:52:f6:cc:f6:24:
                    2c:c0:5c:ac:5b:27:d1:30:0f:42:79:9e:47:e1:22:
                    a9:e8:2e:28:d7:d9:99:13:12:86:8b:d6:f6:3a:83:
                    87:9f:d8:91:26:c3:d9:59:49:2b:84:4f:82:39:a6:
                    73:f2:62:58:5f:03:d4:c9:c8:c0:f0:95:42:bb:fc:
                    c4:12:e5:ae:c6:61:d5:bb:4b:16:50:df:0b:8d:18:
                    59:37:7c:23:7f:ed:cd:5a:2e:41:56:34:8c:e7:83:
                    0a:8c:ac:59:5a:6d:f2:c2:34:f8:01:04:1f:13:82:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:21:C2:31:5E:FA:A3:9F:17:B2:67:F2:A4:33:7A:7D:CA:58:FC
            X509v3 Authority Key Identifier:
                keyid:8E:7A:92:CC:4B:9B:D8:DE:37:8F:7E:22:18:A6:25:17:D9:AC:56:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnqSzEub2N43j34iGKYlF9msVrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:47:21:21:ec:f8:d2:29:a9:cc:1f:76:9c:90:95:e1:84:75:
         17:98:83:af:00:7e:24:ec:ed:70:c0:a4:d6:ef:e6:f7:79:b9:
         77:d0:94:12:58:c3:29:43:6c:9a:d0:9e:b1:1f:12:b1:99:a4:
         3e:a2:0b:1d:d1:47:93:df:4a:ec:fe:39:79:ef:1a:71:cc:c0:
         39:30:5f:91:0d:2a:21:17:63:26:78:9a:d9:6d:1c:6c:63:ef:
         b4:83:db:5d:77:f6:31:94:fc:a0:eb:4e:5f:c7:ea:b1:4d:4e:
         c7:f5:cf:6d:42:0c:93:c2:17:d4:11:65:68:45:df:1e:68:53:
         18:fb:6d:47:a8:9f:6c:f2:c2:5e:3c:4e:9f:ec:13:60:75:69:
         d8:85:87:d7:d3:bc:3a:05:41:23:d5:fa:92:36:38:0a:58:3d:
         cf:bb:f2:39:c1:d0:d2:be:81:22:a1:fd:4b:54:29:48:e1:bf:
         ba:c7:cb:09:62:66:7a:2a:f9:2c:bf:8f:61:66:3c:92:c0:ae:
         b0:e6:bc:1b:21:1d:5d:9f:c4:51:b9:5f:49:42:5d:61:bf:8a:
         b9:73:3d:f3:8b:ce:52:f4:97:b6:0e:0d:d7:b2:75:c2:bc:ac:
         72:dc:b0:71:ae:61:b8:78:f9:d0:2c:ae:5b:b8:07:c7:63:fc:
         f0:09:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:29 2024 by rpki-client on console-fra.rpki-client.org