Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File:                     jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier:          +g+wkYwh45r1/AhJD9I3rCqWcEK0UreFsVeTQZze3RA=
Subject key identifier:   E5:85:B2:D6:ED:02:DE:3B:7B:03:E0:49:57:9A:F2:F5:97:E2:BD:A5
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer:       /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial:       018F86364F193173BC44273A9295FC9BFA71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number:          0521
Signing time:             Fri 17 May 2024 11:00:57 +0000
Manifest this update:     Fri 17 May 2024 11:00:57 +0000
Manifest next update:     Sat 18 May 2024 11:00:57 +0000
Files and hashes:         1: Bu8cyJfLUMcvrrBgoJFNkK4kRJw.roa (hash: 61jQ45zXUQG42MtVg3Qck68+bAmfkz9eWUtrtgcsCN4=)
                          2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: N2DPwZ3u3W81Bm62KjrhwkUP7vd2kQhfuj8fy8QYNks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:4f:19:31:73:bc:44:27:3a:92:95:fc:9b:fa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
        Validity
            Not Before: May 17 11:00:57 2024 GMT
            Not After : May 18 11:00:57 2024 GMT
        Subject: CN=e585b2d6ed02de3b7b03e049579af2f597e2bda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:e3:22:61:04:9e:41:22:70:c1:cf:26:ac:
                    41:b9:4e:63:02:da:f6:25:d9:9c:2e:f8:b8:0f:fa:
                    57:2c:41:92:f3:7e:d9:de:5e:db:80:ee:90:bb:a5:
                    68:07:3e:d4:da:b7:55:80:ae:15:30:d7:bd:98:04:
                    f9:31:4f:c6:9a:4e:19:71:f3:2c:1c:3f:55:db:81:
                    b7:38:7c:ff:20:13:a8:88:18:3e:89:77:c1:be:b9:
                    47:ec:fa:96:d4:47:67:76:a4:7b:1e:5e:d3:61:34:
                    64:bc:90:3f:a2:2d:fe:d5:ea:3f:53:41:be:08:5e:
                    1d:ba:44:25:a6:60:4f:37:7b:a5:be:b6:3a:0f:e1:
                    2d:2d:29:3d:1b:8f:00:17:63:9f:67:97:f7:53:76:
                    da:fc:41:10:e4:a1:bd:8a:d7:55:bf:85:1f:62:e4:
                    87:cd:98:ff:2d:74:7f:03:f4:7d:f3:e6:a3:58:9b:
                    c2:d3:ff:17:df:09:6d:98:64:28:ab:c3:99:ce:90:
                    ce:43:d1:0e:83:1e:f0:09:d6:2b:ec:6c:f5:2f:3f:
                    e9:c0:ad:49:23:a5:91:83:e9:98:ba:10:37:d4:c4:
                    34:6f:f5:4e:3c:a0:8a:ac:7f:9e:2c:98:6d:a7:f4:
                    e0:99:0c:f5:63:14:2f:c7:42:92:90:e4:9b:5b:c5:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:85:B2:D6:ED:02:DE:3B:7B:03:E0:49:57:9A:F2:F5:97:E2:BD:A5
            X509v3 Authority Key Identifier:
                keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:af:40:dc:b5:3f:6d:85:85:b1:38:1f:b4:40:d3:6d:1e:9b:
         f5:6b:2e:88:4d:ba:df:9f:95:60:0a:9a:60:8e:52:ae:5a:03:
         2d:05:70:f1:0d:3f:3d:15:33:a0:bf:4a:d1:44:be:a1:0f:13:
         3c:0f:67:4e:21:3f:97:22:8a:f0:b7:62:db:11:30:ef:49:44:
         99:6d:fa:f8:d4:8e:57:4d:8d:79:bc:d5:a6:a0:41:d9:32:75:
         35:6d:92:2c:90:c3:b0:bb:ff:e6:d5:4a:45:7e:12:a6:ec:cb:
         e9:d0:2d:f2:4e:3a:df:77:4e:c9:5f:bb:a4:32:3a:bc:9a:8d:
         eb:f9:5a:de:72:11:a7:85:38:8f:64:fd:c9:a3:41:c0:e6:ed:
         fa:86:ff:04:87:06:62:b1:8f:b1:92:1e:d4:d0:d2:46:93:ba:
         ca:a8:c5:74:2f:52:c2:51:f2:25:b6:e3:0f:14:a8:1c:ba:39:
         10:4a:1a:15:b6:02:a9:d7:b2:cc:24:9f:61:bc:cf:8a:10:9f:
         f2:f7:2f:35:13:57:bd:d2:59:3c:1e:e1:4f:05:3e:32:2f:6c:
         56:13:02:b7:84:b2:85:d9:97:d1:12:dc:bb:2e:e9:0a:43:79:
         75:3b:16:5a:1f:6f:56:24:c7:f7:33:84:75:ce:cf:8a:19:43:
         f8:13:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:26 2024 by rpki-client on console-ams.rpki-client.org