Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File:                     jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier:          yK4RbUAUzUPtnBcLAZuRHNR2Lr7mL+bune0sTJGDRjo=
Subject key identifier:   49:EA:F8:7D:9B:7E:D4:89:3C:EC:B6:FF:FD:4E:3E:EE:C0:4D:E1:F7
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer:       /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial:       0194B82811AA75478815C7373888304A4700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number:          0D79
Signing time:             Thu 30 Jan 2025 17:00:21 +0000
Manifest this update:     Thu 30 Jan 2025 17:00:21 +0000
Manifest next update:     Fri 31 Jan 2025 17:00:21 +0000
Files and hashes:         1: IAhynHC3BeXQ5V6ipM00FrjrH7c.roa (hash: xUIuep5Mgj3+PGgYL02vof53aG5TJnfGHCNFQCcozjs=)
                          2: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: YZq6gX/Wfs9ptQlnNOprR/NXDYcCd4f5ASolp4oBvD8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 Jan 2025 09:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:b8:28:11:aa:75:47:88:15:c7:37:38:88:30:4a:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
        Validity
            Not Before: Jan 30 17:00:21 2025 GMT
            Not After : Jan 31 17:00:21 2025 GMT
        Subject: CN=49eaf87d9b7ed4893cecb6fffd4e3eeec04de1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:9f:2e:a6:fa:92:32:29:57:ef:b0:75:31:
                    cf:5b:29:ee:28:ad:cd:47:ea:bb:2a:dd:a0:61:40:
                    4e:d9:7d:ce:b2:da:5c:d4:1a:b5:42:3d:ef:8b:84:
                    38:b0:74:01:28:e6:9c:69:90:83:8e:e4:f5:1a:a7:
                    37:40:72:13:a9:4b:76:2f:84:d8:54:58:ac:b6:79:
                    2b:7c:eb:5c:49:e2:3b:86:07:21:fe:fe:28:2d:0d:
                    75:6c:6c:a8:38:30:4e:29:77:24:c0:ac:ea:8d:5c:
                    43:73:2f:4c:85:03:9b:4d:75:cd:48:f2:44:0e:91:
                    27:ca:2e:75:8a:a0:24:dc:53:18:d9:52:35:67:6a:
                    98:e9:78:a2:ac:fe:12:7d:31:9b:67:5c:8e:ec:d6:
                    94:07:1a:f7:26:8a:e0:27:5e:9f:a6:c1:20:73:fb:
                    87:68:1e:8d:09:83:4d:ad:d6:b3:f4:94:ac:a8:ee:
                    f7:f8:87:31:22:57:f5:dd:c8:09:a1:be:8c:cf:59:
                    30:23:aa:06:df:93:40:09:17:66:2d:b1:5c:8a:76:
                    ff:34:8e:5d:35:04:f0:fd:19:ea:1e:24:5b:40:2b:
                    da:3d:f1:33:68:fd:d8:77:dd:98:51:a2:10:5d:fa:
                    bd:5b:02:f2:8e:b6:f3:0e:88:bb:6c:3b:b2:a0:b5:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EA:F8:7D:9B:7E:D4:89:3C:EC:B6:FF:FD:4E:3E:EE:C0:4D:E1:F7
            X509v3 Authority Key Identifier:
                keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:e3:63:53:04:8c:fb:b1:d9:71:a8:e3:1c:86:7a:51:be:
         49:ca:80:26:c2:27:c5:06:b9:04:a2:cc:80:2b:fd:c7:59:73:
         eb:b6:15:19:a0:36:67:5e:f8:51:a0:ef:40:3a:93:65:f6:de:
         6d:bc:cc:3f:f9:f0:01:3c:a1:94:ee:c0:b2:61:ba:29:7e:57:
         46:3b:fe:f9:49:bf:22:61:b9:d7:2d:68:77:e2:6a:b4:65:04:
         bc:27:c6:81:98:66:70:9f:2e:31:89:9f:70:6c:6b:bf:9d:ed:
         1f:50:6d:b9:a6:3f:4d:60:e1:5c:5a:5a:56:ca:b3:b9:a6:81:
         c5:42:64:a1:8e:1b:40:44:5b:6c:3f:e0:5f:9c:d9:46:8d:fc:
         1b:50:9d:34:8a:30:59:95:62:42:f9:fb:a4:ca:0a:21:6a:c0:
         d8:6a:d4:da:d3:5d:b2:e5:79:ee:84:c5:03:d7:ad:83:41:14:
         f8:b0:60:73:47:b5:40:ae:03:d5:f0:a1:29:d0:4e:81:73:ef:
         e4:f7:14:ee:61:0f:4c:c0:2a:a8:bb:ec:9b:68:e4:10:59:58:
         12:bf:ee:7f:2f:4a:d9:11:3a:42:e1:98:c6:d2:ce:39:91:27:
         0b:3d:3e:71:fb:c1:bb:fd:af:37:76:f7:8b:32:94:2a:78:63:
         fe:a6:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 30 20:47:18 2025 by rpki-client on console-ams.rpki-client.org