Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
File:                     jsGCA8JVodC_FYdULHYm8mc41sE.mft (raw, json)
Hash identifier:          lzi5AhoeGorJ7cWIgpd3MumXI/ebjndyS6SvKswDWSg=
Subject key identifier:   0B:59:73:14:02:9A:F2:9F:4A:BF:45:76:54:36:67:BE:7C:14:F2:75
Authority key identifier: 8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1
Certificate issuer:       /CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
Certificate serial:       018F87ED38DA62EF980E2FCBD97B67399B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 19:00:21 +0000
Manifest this update:     Fri 17 May 2024 19:00:21 +0000
Manifest next update:     Sat 18 May 2024 19:00:21 +0000
Files and hashes:         1: 30oF6ac0nuk8eYt3Ke3RVo4H2fo.roa (hash: U0wIIBSF2NNtVo34y+7lHW59C3gidtpckIT1dAIivKc=)
                          2: jsGCA8JVodC_FYdULHYm8mc41sE.crl (hash: PekmLyz9cIJt/mdI2VwspRtPCUF6/NJB8vE+IqzxsPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:38:da:62:ef:98:0e:2f:cb:d9:7b:67:39:9b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
        Validity
            Not Before: May 17 19:00:21 2024 GMT
            Not After : May 18 19:00:21 2024 GMT
        Subject: CN=0b597314029af29f4abf4576543667be7c14f275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:95:0f:f4:13:a8:88:09:94:23:fd:e2:1c:
                    24:14:20:c8:cf:8f:a2:86:30:c7:05:72:15:3d:b7:
                    45:5f:c8:d5:41:d6:5d:5c:6b:4c:50:29:0a:27:a0:
                    38:d6:9f:69:6f:dc:f3:4e:05:77:4c:bd:df:c9:a2:
                    3c:b8:16:a5:f0:a4:0c:33:0d:71:51:72:7c:98:d3:
                    ae:75:64:b4:45:6b:67:44:85:72:02:d0:85:ff:8f:
                    8f:b5:fd:6e:55:d4:06:2a:83:fc:d3:c3:ec:88:09:
                    96:8d:82:78:25:60:8b:f5:fb:70:33:92:23:20:4f:
                    36:c2:c8:58:74:8b:80:a0:0c:2f:ee:1d:bd:67:f4:
                    78:13:9f:72:3e:69:3c:60:1e:fc:6a:4d:35:d9:9e:
                    61:46:60:14:14:8e:62:fe:fa:44:7f:75:35:f7:53:
                    38:90:f7:b3:b9:b4:8b:91:9e:af:26:90:7c:6b:ad:
                    cd:7e:42:b8:e7:77:c2:3d:98:13:05:f1:f3:5a:46:
                    d7:63:02:87:a1:24:9e:e9:60:9f:77:bf:d6:35:91:
                    e5:46:29:fa:86:22:8d:4e:2c:a8:ad:72:44:24:60:
                    9a:84:4c:16:22:96:59:b6:f5:d0:15:f9:b9:99:4c:
                    46:bd:76:d5:45:df:1b:ae:77:53:79:77:a3:a6:32:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:73:14:02:9A:F2:9F:4A:BF:45:76:54:36:67:BE:7C:14:F2:75
            X509v3 Authority Key Identifier:
                keyid:8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:d4:e1:8b:f8:b6:3e:c4:73:80:4c:9b:38:e7:e2:86:0d:
         da:31:3b:b2:28:8d:59:ba:f8:4e:99:89:1d:98:bb:88:a2:53:
         72:6c:f0:c9:27:25:ec:3f:fa:e5:f3:a6:bd:e5:e0:91:17:0b:
         dd:6d:39:8f:ee:40:f2:59:c8:03:15:11:a9:62:d9:7b:67:f8:
         41:f8:7d:4d:57:4f:73:32:f8:cb:9b:f7:f6:50:b1:4c:8c:1d:
         13:3d:ae:20:98:e6:d7:64:d1:6d:6c:fe:72:78:93:c2:03:07:
         53:2b:fb:22:2c:92:40:9f:7b:30:4c:f7:c7:ed:15:47:0e:c6:
         71:c5:8b:de:f6:93:d8:c2:06:ec:8b:86:70:c3:8e:84:87:94:
         81:ca:44:3d:ff:e6:d9:e6:70:f1:37:1d:09:fb:75:03:06:fa:
         b1:39:9a:ee:bc:c9:3a:4b:00:7d:20:f7:1a:4c:8c:d4:33:d0:
         3a:0a:d4:18:87:3e:97:d4:b4:8a:1d:42:0c:ee:a6:4a:ad:d0:
         5c:be:cf:7f:82:24:1a:16:0d:3e:bc:46:3a:09:70:b3:d0:7e:
         99:8b:e7:eb:a8:a4:fd:c6:aa:b1:71:b1:67:15:51:31:f8:dd:
         c1:85:8c:25:62:97:81:61:c0:86:cc:1b:6d:e8:5d:39:c9:24:
         c3:ec:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:47 2024 by rpki-client on console-ams.rpki-client.org