Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          kuQ31Wf3wLNnmc9GaI/7/ybMfRMsxxroLv5m+JLDU2g=
Subject key identifier:   C5:09:CC:5E:A6:D8:45:55:62:73:D9:B0:C2:68:3A:64:51:79:8F:09
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       018F87B6BB4C7D709A9FAC09EA549091AE94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          0CA3
Signing time:             Fri 17 May 2024 18:00:50 +0000
Manifest this update:     Fri 17 May 2024 18:00:50 +0000
Manifest next update:     Sat 18 May 2024 18:00:50 +0000
Files and hashes:         1: 6nDoX--b1eehBIELRqQ4k-XGgv0.roa (hash: 6qXgE9EjJTQ3Ov7GNE0fDFCA+4bzMSIQclsZCwLxId8=)
                          2: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: 76G/dUgoi7hWYtUwvJltfeLNBChNPeRrUXHe+cGx8y8=)
                          3: U15tXAz6Vs0R8tWyaMC95tjW9G4.roa (hash: En//yBbdNN54l9TodQVCND8sN9f0K0chG+/gYYJxtfI=)
                          4: WbLiAleVROtGtnK93iJZArtrZkQ.roa (hash: kL7e8a/dJ6L6/Z6+e31j7iP67mYQZDdpOrXkxPh5YaQ=)
                          5: kUqVwIQaI4i20IqQ5q3Y5pgQbP4.roa (hash: q6un4SO/J8o5wXrudHUKwHbOh2WXofqHsYPo5AuG7aU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:bb:4c:7d:70:9a:9f:ac:09:ea:54:90:91:ae:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: May 17 18:00:50 2024 GMT
            Not After : May 18 18:00:50 2024 GMT
        Subject: CN=c509cc5ea6d845556273d9b0c2683a6451798f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:9c:28:23:27:4e:ae:dd:9e:0a:a8:0e:c3:
                    c4:36:9a:07:b7:ad:2b:39:d7:00:28:e5:5f:cf:09:
                    5f:ff:b1:04:11:d6:e8:58:ab:6f:7a:88:68:29:05:
                    47:85:d9:e0:2b:dd:fd:f3:13:6a:29:dc:f8:46:de:
                    bf:d8:d8:14:2a:db:de:b5:b5:e4:b8:15:5b:ba:e6:
                    dc:f2:42:f6:de:31:44:37:aa:84:7d:ed:46:99:55:
                    74:01:03:83:c4:3b:4e:cc:2c:d2:04:6e:ea:07:4e:
                    66:f8:8d:5a:11:d2:99:35:23:bd:94:42:50:4a:5a:
                    71:23:68:e2:d7:cb:c8:41:05:6b:bc:9c:10:39:f5:
                    96:de:36:8a:8f:e1:51:fc:83:35:d7:21:7e:93:4e:
                    d8:39:e2:6a:f2:04:10:3f:f8:70:fa:9e:71:1d:60:
                    ba:4a:04:4a:b2:eb:f0:f0:ad:26:b8:03:1e:37:77:
                    0c:ff:29:e9:8b:f6:61:91:cb:8b:f5:3f:91:8b:3f:
                    05:2e:e7:7f:80:d0:8a:04:21:53:7a:be:7c:cd:0b:
                    58:61:b4:fe:6e:13:16:f3:61:67:51:35:cb:f3:32:
                    2a:ce:db:b9:25:73:b8:34:ca:6a:76:0c:2c:81:16:
                    10:44:ee:a0:32:0e:b1:ec:9e:62:18:29:50:22:05:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:09:CC:5E:A6:D8:45:55:62:73:D9:B0:C2:68:3A:64:51:79:8F:09
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:83:6f:a3:2a:ed:d6:1e:fd:4b:34:1e:bb:a8:20:c4:55:
         a2:1e:9e:4d:07:92:46:51:fd:99:29:9f:e1:87:86:05:b1:aa:
         16:2c:89:db:f2:07:14:6d:d2:df:f9:bc:b0:af:d9:00:bc:f8:
         99:9a:47:13:16:fa:48:30:95:d9:b9:58:31:73:24:c1:ac:b3:
         84:17:15:bd:44:a8:d9:f9:b1:59:3d:a4:40:6b:2f:85:3b:3d:
         30:90:86:6d:18:19:71:f2:bd:ea:6a:7c:98:5e:a7:df:a9:a8:
         bd:4a:d8:4c:f6:e3:1d:4f:3f:37:14:11:e7:5e:fe:0f:44:8a:
         21:76:5c:cd:f6:c3:6f:d0:31:24:35:f4:d5:0c:14:c4:b9:8b:
         18:23:08:4c:e2:bd:65:0a:b1:86:ae:80:ef:ad:ae:34:f4:70:
         04:02:48:97:a7:86:1b:6c:80:73:e0:ff:03:cb:0c:2e:4f:15:
         56:62:ff:0d:b2:d7:c3:f8:e9:5e:08:d7:54:77:ec:b7:a6:b7:
         05:02:74:78:ff:38:4e:b2:53:f2:7d:a7:b7:f4:41:69:32:0f:
         a3:54:5f:73:b8:12:d7:5f:86:06:29:2c:c9:46:07:fe:0d:ce:
         0d:88:f0:b7:b4:79:69:7b:e9:3c:1f:20:09:b8:f3:47:b7:c3:
         3d:1b:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:26 2024 by rpki-client on console-fra.rpki-client.org