Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          xZoAdheH8rCrf3gNMga+ADIqID8dauZaXeqG3GXyp4s=
Subject key identifier:   0A:F3:AC:C0:B9:7B:89:B6:FF:83:E2:EF:E3:11:21:33:70:CC:9A:F6
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       018F88C8B31E80A111CC6CBAD72948AF6B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          0D6C
Signing time:             Fri 17 May 2024 23:00:05 +0000
Manifest this update:     Fri 17 May 2024 23:00:05 +0000
Manifest next update:     Sat 18 May 2024 23:00:05 +0000
Files and hashes:         1: 79fUImlWMWhi2l-V6gWw5Y3z6gg.roa (hash: vIZA84VABd82PJVrh/qkjpDpmgR0lSA2sFJ8sd1qOTE=)
                          2: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: n3eL7wlWvP4GXGSL+jWa6QB/Ob8OjuIes79jm6vvksc=)
                          3: MWq-NIe9TcTyra4a1XgGOe8UYS0.roa (hash: OaOSNjLVZmeJkIyoJRZPOk9VyTZDlUEFNemOJEE9Ch0=)
                          4: viVvdtZUpl-gcneuCNlLFS_8Me0.roa (hash: gtqFIW0Bs6UgQ/NhvvhXzbB2aR8UhfGqJ0c2SFD7hp0=)
                          5: yN8OkTCc-WWsxLzxU-rFmO66JtI.roa (hash: E1gVICZoS1qgxatSf1EYD1Ef+rRi0nLAivk3KmjGANk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:b3:1e:80:a1:11:cc:6c:ba:d7:29:48:af:6b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: May 17 23:00:05 2024 GMT
            Not After : May 18 23:00:05 2024 GMT
        Subject: CN=0af3acc0b97b89b6ff83e2efe311213370cc9af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:fa:bc:19:8d:8a:c7:77:da:41:48:c3:24:
                    53:7e:48:59:be:14:db:89:cd:28:dc:cf:06:b2:34:
                    18:db:5a:01:63:a7:fe:02:23:f1:be:6b:69:cc:e3:
                    83:c3:bc:e6:12:d6:d0:99:25:77:7b:d1:99:74:f8:
                    4f:7a:12:65:a8:e5:04:ae:03:f9:a4:5c:48:4d:3e:
                    87:35:01:8e:e6:b4:e0:1f:a6:ad:ff:3b:0a:85:52:
                    97:b4:61:2b:99:5e:6e:2c:f8:06:fc:67:22:83:c1:
                    7e:7c:9b:6c:3a:de:49:5f:02:ae:66:9e:f7:5f:26:
                    05:ac:be:90:59:d0:48:92:ec:e2:91:a1:fc:b2:8b:
                    62:9e:e6:cd:9c:a8:1c:c8:f9:83:56:93:bf:64:6f:
                    f4:85:c6:6d:99:b5:92:e9:e8:2d:23:50:5e:0b:3c:
                    c4:82:1a:5a:3d:d5:fa:b3:d3:a5:c8:44:52:46:77:
                    34:9c:43:d1:34:74:cc:95:6b:bb:86:ec:14:ba:71:
                    cc:b5:c3:b0:a5:15:90:04:b6:ff:67:4b:b8:3a:d7:
                    f9:73:bf:2f:98:f6:77:51:51:fd:6b:a2:5a:f8:4d:
                    23:11:1d:d5:77:d1:ee:75:ce:fe:9e:4a:78:82:87:
                    e9:43:10:65:d0:89:14:a2:e4:fe:85:14:e3:a7:3b:
                    22:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:AC:C0:B9:7B:89:B6:FF:83:E2:EF:E3:11:21:33:70:CC:9A:F6
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9f:d8:7b:e6:27:1c:27:16:c3:0e:cc:66:e7:92:47:3f:e4:
         2d:21:3e:21:50:0b:02:2f:cb:b8:34:8b:75:e5:2e:da:f1:c7:
         cf:e8:eb:3e:48:c3:a8:82:12:db:e4:92:29:94:38:23:7f:ca:
         82:04:d3:0b:57:ba:15:06:c6:bf:a3:93:51:19:fb:3a:07:3c:
         f0:17:16:95:dc:f8:6d:6c:0b:16:59:ae:ab:e6:3b:9e:77:32:
         03:76:fb:87:4c:26:00:bd:6d:0d:d1:d2:c2:81:08:08:fa:90:
         ed:f3:b3:ad:b4:f5:9e:61:e4:4e:cd:04:3b:f5:7f:ea:ef:6d:
         75:b6:53:87:67:df:7f:2b:c6:55:92:7d:80:d4:8f:28:13:07:
         33:12:d2:00:05:7b:99:a3:b5:72:b2:27:13:81:9b:e2:7d:62:
         8e:83:89:2d:6b:23:08:9f:9f:e1:08:78:4e:dc:10:50:9d:82:
         4a:34:39:82:d4:cc:42:30:1f:9e:e4:48:19:d8:c4:fe:96:55:
         6f:4a:6f:70:22:ac:f2:15:5f:23:a6:25:c4:b4:c4:5f:3b:d9:
         c7:d8:4e:56:27:c6:64:cb:d0:2d:14:fa:e0:3d:f6:83:51:6b:
         09:43:8d:b0:13:04:74:19:77:ce:1f:ce:44:44:f2:cf:be:27:
         d7:dc:1c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:02 2024 by rpki-client on console-fra.rpki-client.org