Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File:                     jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier:          Inf4JB8EEs3vpLZSfBS1HSvHEoTZPMJqVZmk0GBJjKo=
Subject key identifier:   DC:A9:B1:04:03:F7:FC:EA:DA:B7:49:F5:A0:85:EC:2B:7E:E1:35:66
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer:       /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial:       018F8824390A1B129B4A103EFA6388604964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number:          0F40
Signing time:             Fri 17 May 2024 20:00:26 +0000
Manifest this update:     Fri 17 May 2024 20:00:26 +0000
Manifest next update:     Sat 18 May 2024 20:00:26 +0000
Files and hashes:         1: Nt6aiZ-dht1AMR62wO0OXZgMytY.roa (hash: 3cRmJhdFhJMb1S1hwauRKNeHqs4U3+Txpab/+jnXidE=)
                          2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: 5E167EGAQKzmkVrFsWD0VFJIBcGIq/UFVKW+/TG1N8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:39:0a:1b:12:9b:4a:10:3e:fa:63:88:60:49:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
        Validity
            Not Before: May 17 20:00:26 2024 GMT
            Not After : May 18 20:00:26 2024 GMT
        Subject: CN=dca9b10403f7fceadab749f5a085ec2b7ee13566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:05:83:9b:8b:1b:d8:d1:90:10:91:ba:42:65:
                    1c:f3:c7:f9:82:4e:40:a6:36:e7:3c:68:bb:62:48:
                    44:25:24:a4:b2:0c:bf:14:22:4c:43:b2:37:a6:c4:
                    66:7b:90:22:b0:82:38:ec:f0:ab:73:aa:94:e9:ed:
                    f7:82:02:3e:f4:b1:50:f5:b6:03:cb:56:1b:0a:97:
                    63:03:0f:3e:ad:41:0f:b2:27:d8:cd:02:02:fb:a1:
                    fe:34:80:0f:1e:1a:70:af:18:37:2e:d7:88:6c:f5:
                    7e:ee:72:31:4d:92:04:19:98:4e:31:30:45:b4:fe:
                    6a:f8:9c:61:4c:50:c4:1d:22:20:f4:d8:68:88:a4:
                    62:11:8e:fd:b8:57:26:fa:62:82:9a:5b:39:a7:08:
                    ae:eb:8f:fc:6f:b1:0b:fb:d2:d4:78:90:1b:cc:ce:
                    af:1f:05:0b:4b:b0:ad:ba:34:5b:0e:9a:35:8f:5e:
                    6a:25:f9:ac:41:ab:45:3f:9c:99:e9:66:02:19:9b:
                    f9:11:8f:74:8f:27:ad:06:e9:20:f3:8d:af:00:c0:
                    05:f9:06:41:cc:3a:0b:96:53:ee:f0:c2:7b:23:46:
                    d1:45:9d:e3:09:d6:42:81:e5:66:19:3d:10:df:05:
                    10:7e:84:67:49:76:f4:4c:76:5f:35:87:ed:e3:13:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A9:B1:04:03:F7:FC:EA:DA:B7:49:F5:A0:85:EC:2B:7E:E1:35:66
            X509v3 Authority Key Identifier:
                keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:91:32:c1:6e:8f:10:69:cd:7d:b8:cb:df:f0:76:a9:27:
         2f:fe:b8:4f:21:c5:3a:d5:cb:5d:f6:c1:15:f1:13:3e:fd:30:
         ce:b9:a7:c1:13:9e:24:37:66:50:28:55:28:b4:16:6e:96:53:
         4e:64:0c:e3:29:af:5e:a6:0d:d6:ba:55:2f:0b:c3:7d:f7:5b:
         26:fb:e7:ce:79:d8:0a:0d:4a:b9:94:3f:fd:6f:56:54:94:3a:
         13:4d:73:77:a5:b0:c4:1a:a2:94:d8:f7:3a:29:1b:9f:dc:cf:
         73:8f:62:f7:5c:63:02:88:79:0c:30:66:ea:e7:3b:33:8a:35:
         cf:f6:31:f9:19:d4:08:9a:fc:36:87:e6:2b:b8:09:ea:cd:ee:
         d5:9e:14:c9:96:4e:27:ec:88:50:d3:ba:31:42:3f:0c:17:26:
         8a:33:f1:d3:e8:ec:97:d4:fd:55:18:9b:0b:a6:00:20:3a:49:
         65:c2:40:23:b4:64:63:97:bc:f2:95:c1:9b:9e:41:f3:27:d5:
         48:b2:10:46:88:dd:af:1f:0f:4e:fe:43:79:c4:f1:85:6a:74:
         aa:8b:93:d7:1f:56:a3:67:fd:d9:81:7e:64:59:6f:f4:15:d1:
         b6:42:46:cf:15:48:b3:36:df:6b:19:4a:6d:77:43:97:c7:fc:
         7f:93:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:22:38 2024 by rpki-client on console-ams.rpki-client.org