Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File:                     JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier:          Y1CsJpQtSYbM7oU9sNZUuw94L6O0FTuE+PICQkGB2Fw=
Subject key identifier:   02:0F:79:1B:0A:76:2D:63:48:3F:09:EA:E7:E0:E2:90:16:D2:11:6E
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer:       /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial:       01935764823072FAA0F661B83287029075D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 05:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:24 +0000
Files and hashes:         1: BGiXjMXPB8xUAKwzE1X-yqGRn0o.roa (hash: Ea1yv0Ph2Z7nwaiuypyBlX6BivNiUZkdrA5jpZeDpDc=)
                          2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: dxnxwJSmusmpWdLoifeNBSSM7fpsZGljFbq1ByZyVGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:82:30:72:fa:a0:f6:61:b8:32:87:02:90:75:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
        Validity
            Not Before: Nov 23 05:00:24 2024 GMT
            Not After : Nov 24 05:00:24 2024 GMT
        Subject: CN=020f791b0a762d63483f09eae7e0e29016d2116e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:ba:bb:bf:ff:2a:07:2c:ae:6e:91:31:ed:
                    bc:09:3f:33:a4:40:15:1e:32:c1:d0:8f:5e:5a:51:
                    c2:8a:9a:96:9d:54:ac:4f:0a:8a:d7:8b:33:b0:1d:
                    25:9d:0c:ca:2d:eb:fd:c9:4a:32:47:58:de:93:98:
                    df:20:27:8b:a1:7d:8e:90:28:52:cd:28:26:bd:e0:
                    8d:ea:e9:a5:8c:be:9f:6e:4b:8f:51:0b:29:28:f6:
                    64:6a:43:cc:22:58:bc:bb:06:b1:ba:23:c1:28:b6:
                    d2:a9:4b:69:71:04:4f:29:03:a2:ec:c6:cd:0c:f4:
                    ad:3a:5b:f5:89:4f:57:7c:29:34:9d:e6:77:1d:a4:
                    75:11:7e:8f:5b:ab:42:8b:38:d7:5b:57:43:0a:56:
                    9e:d8:52:20:34:50:72:c8:5d:3c:66:ac:d1:ba:a8:
                    f2:e9:c0:c2:5d:b3:2f:97:2a:83:27:54:ff:d2:aa:
                    b8:8f:b0:9c:b2:ad:2b:41:74:8e:fd:b8:29:f0:8d:
                    c6:45:2f:e4:dc:10:55:7e:10:69:81:98:e9:68:20:
                    08:a6:31:1a:7b:99:30:4b:a6:66:86:81:08:63:7b:
                    f1:54:d4:65:b3:ad:01:da:f1:87:de:32:eb:97:da:
                    c0:b0:ff:d5:72:27:d6:2a:57:78:28:1e:8f:aa:aa:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0F:79:1B:0A:76:2D:63:48:3F:09:EA:E7:E0:E2:90:16:D2:11:6E
            X509v3 Authority Key Identifier:
                keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:bc:99:1b:b8:eb:ce:d9:4d:4f:5f:cc:ff:ee:ce:04:d0:
         3d:6d:c2:9c:5e:02:65:8c:65:5f:86:22:51:9a:97:66:1b:0a:
         5d:29:41:a3:3a:f1:72:4a:d4:5b:6e:43:0d:bf:54:5b:93:8f:
         0c:6f:2b:5c:16:72:b9:c1:9f:18:f7:eb:97:b7:57:fa:b8:b4:
         7b:cf:6c:6f:75:ef:7e:fa:49:2d:b4:b0:52:3a:09:41:56:73:
         bf:c7:72:8c:77:f9:29:09:80:5b:57:15:10:8f:50:e3:b5:6f:
         dd:65:24:99:48:38:9b:a4:30:c3:7d:8b:c7:89:21:ec:d9:22:
         9e:34:a4:f0:4d:10:ce:81:a5:8f:18:5e:e1:13:b7:8e:7b:5b:
         69:49:ae:57:c2:39:ed:40:a0:64:7a:ce:ee:23:49:ef:02:18:
         7a:89:d7:26:0e:2a:6c:b5:9a:36:e1:ea:3d:5d:19:37:bc:84:
         24:5b:b6:1b:16:34:6f:78:22:83:6e:ec:65:cb:f7:10:ea:4d:
         88:8a:34:00:8a:c5:85:15:32:08:cd:30:06:4a:f1:44:ff:10:
         2a:cd:56:7e:28:57:d5:30:97:9e:71:b0:15:21:e2:5e:e5:92:
         4c:83:87:7c:48:50:f3:d8:5b:60:c1:43:bf:f9:ad:95:70:f2:
         f0:3e:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:15 2024 by rpki-client on console-ams.rpki-client.org