Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File:                     jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier:          MZ8QKTr2q5HeqLaBoCCoK1nCVPMcDoZ9OH1L+QBym6o=
Subject key identifier:   D1:2F:7B:14:50:68:E8:0A:08:A3:58:C5:9A:EA:39:37:D2:B1:57:E5
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer:       /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial:       019356894FE14FD20B38D4DE63695E7352A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number:          0FB5
Signing time:             Sat 23 Nov 2024 01:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:59 +0000
Files and hashes:         1: e_Cy_FEBdhWAyy5ZEgjDJ3GVdvI.roa (hash: CZDixfsjEs8LFh+CIfMnDEgDovOnDJGMJYterzkNBio=)
                          2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: wWMGh/31nG7mHQCkCr6heVD0rWYy/GO5mRZyWXC0Zqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:4f:e1:4f:d2:0b:38:d4:de:63:69:5e:73:52:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
        Validity
            Not Before: Nov 23 01:00:59 2024 GMT
            Not After : Nov 24 01:00:59 2024 GMT
        Subject: CN=d12f7b145068e80a08a358c59aea3937d2b157e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:6b:38:d7:a6:60:6d:ba:9f:1a:25:5d:14:
                    83:f7:31:14:d1:56:5a:76:ad:37:9a:79:10:d0:83:
                    96:4b:16:0f:21:18:2e:33:7d:39:81:ed:c7:b1:51:
                    c4:03:4b:62:c5:f0:1b:27:2c:41:6f:2c:04:37:e5:
                    2e:98:6e:f0:5e:d7:80:e2:fa:5a:74:28:d0:6b:91:
                    f4:02:f7:76:d0:b3:6c:69:53:89:b3:04:ce:3b:89:
                    17:7e:6e:de:79:15:ce:db:7b:21:bf:85:a1:11:39:
                    5b:85:a1:7e:ff:6a:16:0e:a3:e3:f1:96:01:94:be:
                    cb:72:ce:89:6a:e1:78:8d:f1:bc:71:7d:dd:10:69:
                    de:66:0a:56:e0:d5:c7:88:97:24:96:91:97:0b:69:
                    2b:9c:2d:ab:f9:71:ff:57:8e:e6:b3:21:a1:f8:13:
                    e5:b4:2f:62:2a:4d:f1:bd:f7:b7:c3:b0:d6:3b:57:
                    45:be:28:83:67:d7:95:4e:f1:99:22:11:d6:d3:f5:
                    14:ac:8f:68:4e:c1:62:6d:dc:97:bb:48:24:61:1f:
                    78:52:50:40:80:85:97:44:ce:39:20:b6:80:cb:7b:
                    a8:a5:89:41:90:56:43:81:53:e8:df:ed:f0:16:d0:
                    99:99:69:41:11:6d:f3:84:0a:13:fb:d2:46:0f:ff:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2F:7B:14:50:68:E8:0A:08:A3:58:C5:9A:EA:39:37:D2:B1:57:E5
            X509v3 Authority Key Identifier:
                keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:c9:a6:91:e7:12:5a:88:1f:8d:53:03:d4:79:16:af:b1:
         1c:3b:72:49:8d:8c:13:13:8e:9f:0b:dc:7d:f1:9a:b8:98:ac:
         a4:50:a9:41:7e:52:d3:52:84:4e:a3:85:9a:64:dd:10:f6:58:
         fa:aa:ec:5c:19:dd:91:07:0f:e1:f0:6e:e9:f1:a7:a8:5d:24:
         d8:19:eb:ca:e7:fe:bc:a6:a1:76:e9:ba:9e:26:9c:02:5b:25:
         a3:f2:f9:06:b2:62:b7:60:49:89:2d:2d:d8:6d:72:b7:73:7a:
         97:3e:2a:20:6c:1b:b5:8c:80:57:ea:a2:25:51:91:6b:0a:fa:
         a5:ad:e6:8c:b4:d8:cf:0d:84:9b:04:8d:ae:ef:98:40:26:a5:
         2a:be:a4:b8:58:93:a5:e0:c8:a7:c3:34:88:7e:2d:47:f6:75:
         84:0e:69:3b:22:31:9d:0e:7b:cb:58:12:9f:be:65:9c:5a:42:
         8b:f6:57:48:6f:57:5a:71:f0:67:9a:77:44:ef:e7:36:20:f6:
         75:17:9b:ab:21:0d:50:85:8f:dd:df:54:3b:1c:37:96:b5:ef:
         a6:91:28:7f:b9:62:a1:5b:a8:89:67:02:c9:e7:49:11:cc:3c:
         af:79:e1:37:29:b9:13:00:34:e7:f0:05:1e:08:a1:5e:6e:95:
         94:03:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:25 2024 by rpki-client on console-ams.rpki-client.org