Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File:                     jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier:          0VSpNr3K5XHQVuFeCzEwe+X8Evv5IcVdgTG7bKF7f5g=
Subject key identifier:   D4:2A:BC:3B:2F:A5:4D:36:15:4A:BF:B2:1F:32:59:C6:0A:6C:BE:EE
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer:       /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial:       01935199521BA73D7A935D91E38551F2C461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 02:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:22 +0000
Files and hashes:         1: 28sYzr6HlrUfyxwjjh8ERZZsoLY.roa (hash: OeyX3pMkG5v2yI2ClLjBwXa/3mCRuPeoxeZU0e/eXlw=)
                          2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: U7kE3XEOMbMtAAdghZkUJyaL+xXUBX5Q9SXmkfDPtRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:52:1b:a7:3d:7a:93:5d:91:e3:85:51:f2:c4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
        Validity
            Not Before: Nov 22 02:00:22 2024 GMT
            Not After : Nov 23 02:00:22 2024 GMT
        Subject: CN=d42abc3b2fa54d36154abfb21f3259c60a6cbeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:23:86:27:7e:a9:4d:bb:8d:59:43:e9:d4:
                    a9:98:7b:66:e9:ee:4d:72:48:93:ca:2d:ce:95:7c:
                    fc:cf:6f:95:4a:6a:3d:6f:52:fc:74:25:0b:ed:dd:
                    30:99:19:2a:5f:ee:cf:12:da:55:02:4f:e6:c2:27:
                    69:8d:d3:99:89:2a:5b:f3:60:4f:72:10:55:3f:bc:
                    26:26:b5:dd:b0:92:a6:6b:2a:49:58:25:7d:72:91:
                    51:83:34:19:b7:07:fe:85:ba:4c:e5:d5:d8:3b:45:
                    39:ba:cb:49:f8:9c:fa:ed:42:5b:3e:5d:a5:05:26:
                    07:57:02:d2:35:f7:9d:83:36:0f:95:55:6d:2d:10:
                    f2:c6:d3:7f:b2:89:91:72:a3:27:ab:d6:29:af:0a:
                    33:10:cd:0a:47:ce:20:78:e4:d7:f7:f7:9a:e7:0a:
                    61:44:13:d0:de:68:bb:24:00:8c:fa:11:1c:cc:0a:
                    48:b2:9c:42:23:a7:06:8b:73:5a:33:b5:c0:f2:d8:
                    5f:2f:98:72:f0:35:34:73:ca:df:91:78:56:b7:90:
                    b1:5e:1f:4e:1f:78:f3:48:fe:ce:da:38:b2:76:8d:
                    b6:43:a3:a2:eb:dc:97:67:61:53:8a:3b:68:aa:e0:
                    e9:e6:51:64:27:ca:64:fd:89:08:b8:f7:ac:98:22:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:BC:3B:2F:A5:4D:36:15:4A:BF:B2:1F:32:59:C6:0A:6C:BE:EE
            X509v3 Authority Key Identifier:
                keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:ad:49:b9:cb:1a:32:a2:1d:5d:88:64:d7:11:1a:8b:0e:
         c2:5f:4c:e4:ec:ea:47:b3:77:9a:b8:09:e3:2c:cf:34:91:3d:
         5c:9a:93:f2:0a:d4:e0:30:c1:bc:73:8e:15:45:6b:01:1c:c5:
         52:ef:0f:93:66:43:6c:e4:17:c3:13:5c:97:77:f7:5e:67:99:
         78:71:a2:2f:67:07:d0:15:0a:b9:53:62:b1:b6:8a:62:ec:42:
         c0:6a:98:7f:e3:7a:b1:e6:fc:fc:0e:55:f5:81:66:b1:c5:88:
         d4:b9:1b:65:8a:f0:46:7b:30:e3:aa:27:5e:8d:56:5c:76:3b:
         a7:b3:0e:73:5d:e4:5b:a1:17:df:20:a9:0f:09:75:bc:1d:d5:
         1e:4f:19:41:78:44:2a:99:c9:2b:58:35:ce:7b:8f:71:25:57:
         f8:59:d2:ea:70:47:a9:35:42:21:ea:1d:60:3b:a3:4d:7d:db:
         50:ad:26:c1:e8:47:c7:f7:59:8a:db:21:be:40:64:93:3d:38:
         b2:b7:18:0f:a6:27:b4:c4:85:15:59:2f:4f:cb:41:79:2e:9f:
         9e:9f:05:a5:a4:f3:54:28:4c:ac:d1:c9:6a:de:60:3a:aa:da:
         9c:a9:50:bd:db:f9:5b:40:f7:a1:b4:fa:67:58:92:92:66:65:
         d5:13:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:27 2024 by rpki-client on console-ams.rpki-client.org