Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File:                     jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier:          5qc2FSRsZU4Lcxsr5y2J68pio4rkH6KbKm5fLVr3QQs=
Subject key identifier:   EF:84:C6:9C:1F:31:80:B4:2B:75:9F:69:67:D0:5C:E7:27:E0:4A:B4
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer:       /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial:       018F87B66AC2266DD5A5B1996BB11C157DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: h6kFpWmZXJsvpsSDZcJ8M-UXXVY.roa (hash: PqtU97xO/wTP/SHkbfREWjeVwSQUwdz+bcSygNgCPGQ=)
                          2: hf5Mj5DoTVCHOxxdISYw9_hXJHo.roa (hash: EFml9x8LI6U5+f+7icI+kQ3Sqo9y5E63r+I1Vw/WKWw=)
                          3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: 4dSnbNkPaCMCctgm4reaxlLypp3kv4+0NSNX0lUo+/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6a:c2:26:6d:d5:a5:b1:99:6b:b1:1c:15:7d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=ef84c69c1f3180b42b759f6967d05ce727e04ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:8c:0b:ec:93:43:63:32:f4:9f:23:ad:e0:
                    b6:3a:07:d9:12:16:e5:59:b6:9a:04:92:03:5f:51:
                    5e:c7:b9:cb:e1:99:08:fa:35:8b:99:4c:dd:5f:2e:
                    ed:32:bd:d0:2e:39:5a:42:95:14:a2:4a:a4:54:f2:
                    58:f6:db:c7:fd:59:64:53:a1:a4:ca:0a:a9:25:4f:
                    01:11:84:02:db:ce:eb:84:dd:58:56:97:d5:27:39:
                    da:b8:3c:12:f7:08:31:f6:7a:76:8e:99:84:ab:9d:
                    a7:0f:bf:eb:f3:4d:4c:d3:d7:d5:1d:51:3c:d5:79:
                    d4:ae:42:dc:7a:10:99:60:cf:5d:dc:83:00:90:5c:
                    69:55:34:a0:01:7f:db:2d:92:e3:bd:de:79:16:49:
                    ce:a3:4e:71:86:1b:7d:28:f0:c3:2f:e1:90:7a:85:
                    12:31:f3:63:c3:4b:4b:f4:d2:d0:ed:d6:ba:2d:9b:
                    3c:41:e7:88:2f:b3:e0:62:0e:a4:44:ba:a0:99:a7:
                    43:04:21:45:ce:7a:46:98:07:1e:77:a0:50:41:d9:
                    9b:f2:71:2e:26:db:a9:ed:c4:0f:a7:45:7d:60:e7:
                    23:d5:e6:ed:4d:21:1c:67:89:da:8b:4f:fa:76:b5:
                    2a:8c:a2:ec:44:d4:57:44:0d:41:33:ce:f8:fa:33:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:C6:9C:1F:31:80:B4:2B:75:9F:69:67:D0:5C:E7:27:E0:4A:B4
            X509v3 Authority Key Identifier:
                keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:38:50:af:e2:3d:a6:2d:2b:a0:60:b7:0b:a7:d0:7f:78:2f:
         43:69:f3:46:bd:92:fd:f1:e3:96:cd:35:ff:7c:8b:71:22:ef:
         3c:65:72:a0:a3:9f:0b:53:a0:19:18:2d:45:20:95:92:bf:d0:
         b5:83:cf:b8:e5:b4:71:c1:03:96:2d:89:35:7b:ff:0b:b3:79:
         11:b2:85:03:fc:c2:65:90:ba:71:4d:5a:be:38:08:79:ae:11:
         6c:64:a0:00:cd:f7:27:ac:bb:f5:03:38:ec:49:b3:6c:22:43:
         f7:a8:56:4b:98:48:f4:50:d0:c4:12:5d:7f:5e:2b:5a:17:0d:
         a8:6d:cf:c9:5a:53:db:a1:fa:4e:fe:29:ff:53:c8:cc:11:c1:
         98:46:90:81:b5:ae:73:3d:80:bd:e2:f0:96:4c:6d:5a:bb:ca:
         2a:f8:b7:d5:ac:09:cb:a0:7b:f7:e1:2d:e5:d9:86:61:82:da:
         df:2a:be:30:82:62:d0:ab:33:38:42:f5:2c:4b:ce:d4:99:98:
         ca:7b:4c:06:8b:d6:86:c9:b5:d8:3b:62:52:ab:da:f0:c4:d3:
         87:ea:95:c5:e7:6e:64:8f:92:f1:fc:d5:a2:74:cd:83:cb:83:
         5a:d6:66:4f:69:05:7f:93:10:c9:d1:92:38:7d:e3:bd:0d:5d:
         07:b9:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:44 2024 by rpki-client on console-ams.rpki-client.org