Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File:                     jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier:          sG/LixCPy5NXPHQowe2I/7uRJRWNDXkq9VibIldAjMA=
Subject key identifier:   38:86:6B:76:91:FC:A3:99:8F:8A:E8:9A:7C:E6:7D:9E:62:DA:2E:23
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer:       /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial:       018F88247215CF828E7BE2E9BEAC021CCCB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number:          95
Signing time:             Fri 17 May 2024 20:00:40 +0000
Manifest this update:     Fri 17 May 2024 20:00:40 +0000
Manifest next update:     Sat 18 May 2024 20:00:40 +0000
Files and hashes:         1: I4t16C7u7T7BG-ogta_e9HBuOKg.roa (hash: hhr67NWZyblRD0n2psvyQYHXRzjapmaa7P2lwuZmgiU=)
                          2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: 1txuBG7KH1e5sp7C8ncUOHe67bpv0lXKDZMefk//irc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:72:15:cf:82:8e:7b:e2:e9:be:ac:02:1c:cc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
        Validity
            Not Before: May 17 20:00:40 2024 GMT
            Not After : May 18 20:00:40 2024 GMT
        Subject: CN=38866b7691fca3998f8ae89a7ce67d9e62da2e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:5b:af:92:58:ff:32:14:71:27:35:0e:a1:
                    cb:3a:64:3b:81:4f:91:3a:42:0e:ee:62:d0:a9:de:
                    58:1a:92:5b:97:6d:35:ec:63:bf:2c:39:bb:34:d1:
                    c1:80:d1:47:36:c3:4f:40:4d:01:45:6e:ff:9e:55:
                    e2:c6:c1:a0:de:8b:b4:58:04:c6:c3:fe:b4:3d:3e:
                    61:4c:23:74:c6:6a:34:d8:b2:5f:2e:64:6f:11:20:
                    bb:7c:f3:78:c7:62:2a:d3:ef:0d:78:27:fe:5a:16:
                    15:b4:2d:23:c4:73:bb:ef:ce:a8:7b:cd:f2:ec:f5:
                    5a:c5:b5:5d:d7:76:bc:64:2c:64:64:a9:9a:00:83:
                    b7:03:b1:78:b3:6b:fe:15:a4:6d:54:08:c4:0c:67:
                    ce:0f:15:e2:1a:60:30:33:b5:21:07:da:6e:fd:cc:
                    8d:bb:e2:a7:c3:65:17:8a:36:f3:43:16:36:43:ed:
                    a0:e7:93:ac:00:f1:f9:24:e8:9a:b5:d2:a9:8a:97:
                    1c:1f:24:4e:a2:90:14:f7:c1:87:40:23:77:6d:45:
                    19:40:91:da:cb:13:4c:dd:7a:3c:ec:31:fc:14:6a:
                    0b:04:3b:61:cf:59:30:57:7a:c8:a2:83:ba:4b:44:
                    26:eb:9c:8f:65:16:1e:83:3a:50:66:08:1c:dd:a8:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:86:6B:76:91:FC:A3:99:8F:8A:E8:9A:7C:E6:7D:9E:62:DA:2E:23
            X509v3 Authority Key Identifier:
                keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:19:d0:6d:05:1a:a6:b8:e7:3c:7d:53:1e:db:bf:0c:b2:
         21:ff:70:5d:9d:9d:d0:ef:28:35:01:8a:9a:aa:89:3a:08:a6:
         27:e3:c8:de:04:64:50:f2:89:e5:5c:9b:9f:c8:20:2d:5a:82:
         a8:77:46:49:5c:f1:e1:02:cd:8f:a3:d2:69:88:da:4d:08:d9:
         d6:5a:16:d0:88:8d:95:4c:5c:a0:ba:22:e9:6a:fd:7e:af:b4:
         ba:c9:22:ce:2b:6f:7f:75:fc:50:27:7a:20:45:30:3e:2f:32:
         7b:33:c0:39:7c:1e:88:e8:3b:96:e0:6e:84:9b:ca:df:de:06:
         c3:5f:61:f0:18:be:aa:bb:52:73:a2:a0:fc:04:00:60:50:88:
         40:37:aa:59:1b:98:48:c4:7c:00:d6:8b:05:c6:a1:64:98:30:
         7f:f5:ae:ac:29:13:9e:bd:d3:d3:80:f5:9d:89:18:8a:1d:35:
         bd:3f:50:40:6b:64:54:6d:7b:4c:83:47:47:a8:e2:ad:3c:d4:
         4e:ad:67:c8:c7:9f:83:ff:df:56:b6:f5:62:85:e2:eb:95:23:
         53:34:b1:10:a3:49:78:6e:6b:25:dd:7b:22:ea:62:fc:ec:2c:
         06:cb:fe:4f:51:c6:91:df:13:d0:37:19:18:ca:1f:a6:a8:bd:
         a6:0e:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:39 2024 by rpki-client on console-ams.rpki-client.org