Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
File:                     0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft (raw, json)
Hash identifier:          w0jTfHSu45J5RmyaQbmnSkReRmA/aoUJVUnnr1qC0W4=
Subject key identifier:   2A:E0:67:70:1D:66:A4:BB:A8:45:9B:D5:5E:50:D0:8E:21:EE:1E:09
Authority key identifier: D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
Certificate issuer:       /CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Certificate serial:       018F3BF98CDD034593B85B1D6DF1D4DB0FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
Manifest number:          1152
Signing time:             Fri 03 May 2024 01:02:41 +0000
Manifest this update:     Fri 03 May 2024 01:02:41 +0000
Manifest next update:     Sat 04 May 2024 01:02:41 +0000
Files and hashes:         1: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl (hash: Wd4tSleV7k9s/XgpYj+ONQOHjaTEjikR5vLcdXiA3K4=)
                          2: fIMnLxVgJ4-cUaiFiASY-Jmx_Qg.roa (hash: khchfw8SL7Xa3nKLZb4jElKD//MxXwaIWWzCjiRExjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:8c:dd:03:45:93:b8:5b:1d:6d:f1:d4:db:0f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
        Validity
            Not Before: May  3 01:02:41 2024 GMT
            Not After : May  4 01:02:41 2024 GMT
        Subject: CN=2ae067701d66a4bba8459bd55e50d08e21ee1e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:18:45:ce:59:58:d9:69:ae:f1:0c:b9:e3:
                    0f:8a:88:ec:ee:52:c2:68:5c:b4:ef:f8:ae:c9:b8:
                    43:15:b1:a3:1a:0d:a2:5e:89:19:56:6c:7e:ac:8b:
                    bd:df:7c:61:b8:d8:e3:37:ac:6e:4a:1e:ea:2f:bf:
                    ab:8e:c3:86:fb:8e:38:95:29:00:f7:68:eb:4f:1e:
                    84:cb:23:e9:63:62:1a:3c:cc:5a:61:7e:0e:6c:6d:
                    9a:3f:f7:c0:09:cf:c2:f7:be:cc:84:e9:a1:4f:22:
                    e4:1b:17:f1:c9:0b:07:f6:a7:f4:5f:2f:86:20:9c:
                    10:b9:56:7e:4b:41:3c:44:22:5e:e5:2c:1a:05:a2:
                    74:20:fe:bc:28:31:10:a2:bb:4a:3c:5e:d1:62:e3:
                    74:97:91:ea:c9:cf:69:19:60:39:99:b6:44:bf:3b:
                    e9:c3:c1:21:9d:9e:c1:ca:cc:92:60:40:eb:37:d0:
                    4e:54:5f:54:c1:33:01:aa:b0:3c:7b:df:a1:3a:cb:
                    c5:1d:4b:c0:f7:97:4d:be:4e:be:8b:4f:f6:89:80:
                    bd:94:f3:61:0e:38:66:c1:9a:c8:74:c0:e8:28:3f:
                    78:c2:5f:d7:c4:5a:9c:81:8c:1b:49:ee:1c:77:28:
                    43:73:d8:b8:9d:f3:9b:b1:db:12:14:ea:1e:58:5d:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E0:67:70:1D:66:A4:BB:A8:45:9B:D5:5E:50:D0:8E:21:EE:1E:09
            X509v3 Authority Key Identifier:
                keyid:D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7a:5b:4c:ea:12:13:75:04:4d:ac:bd:cf:7b:3d:23:b3:29:
         95:92:b4:90:3d:96:b0:8a:06:26:f2:15:24:6d:a8:be:7b:63:
         96:1b:a8:57:01:5f:53:7d:50:59:ca:fc:8c:bb:d5:82:72:4a:
         73:53:0f:cf:8a:38:b5:a7:0f:92:42:00:5b:52:b5:e5:aa:ae:
         47:2c:55:bf:70:40:b1:fc:d8:cc:cd:31:91:83:ce:20:e4:ec:
         88:b8:2a:c2:0c:af:cb:a9:81:e0:89:a4:b1:ab:b9:6e:da:c0:
         af:1a:f1:df:25:84:8b:d1:1d:d8:f2:54:c5:79:9b:96:12:17:
         f5:cd:94:de:a9:42:25:b4:8c:c5:09:42:75:97:a5:47:20:47:
         fb:2f:b5:97:22:5c:ba:68:24:cd:2f:0a:ec:b0:ba:2c:84:93:
         6a:f6:bc:9f:97:f3:f3:6a:c8:ab:a1:70:d0:1d:b4:eb:55:33:
         cf:90:8a:1f:da:d8:36:32:ae:cc:22:6e:c7:32:ab:6d:76:be:
         c1:78:32:0e:d1:be:11:c0:f0:a3:fb:7c:fb:1e:4b:e4:41:b0:
         63:df:23:ae:84:9a:29:c5:e0:e0:81:83:fa:da:9f:0d:d6:3b:
         b1:0e:9e:49:4e:50:b3:af:53:95:37:32:28:08:a0:5d:2e:9f:
         3c:96:83:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:13:46 2024 by rpki-client on console-ams.rpki-client.org