Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File:                     JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier:          VVeE9l27ITcLJS9Q+GloXh02RRnQmcE//cLn0eWRSgE=
Subject key identifier:   93:72:21:BC:5D:8F:1C:44:0F:81:BD:39:78:37:AD:BC:AC:1D:4A:92
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer:       /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial:       018F885B540BE6E4D6891D11FEF0E879874B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number:          0830
Signing time:             Fri 17 May 2024 21:00:37 +0000
Manifest this update:     Fri 17 May 2024 21:00:37 +0000
Manifest next update:     Sat 18 May 2024 21:00:37 +0000
Files and hashes:         1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: rLL0QtPORRmLfLI2pFtBrN+08A6cHseIFuMnPt1UyOU=)
                          2: d0TO04VS_XJkp1lz8WdVulAOTmE.roa (hash: liSV7LJtPuewHxGPXFs58Ao4svTDcwovlVhyKZ4YD/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:54:0b:e6:e4:d6:89:1d:11:fe:f0:e8:79:87:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
        Validity
            Not Before: May 17 21:00:37 2024 GMT
            Not After : May 18 21:00:37 2024 GMT
        Subject: CN=937221bc5d8f1c440f81bd397837adbcac1d4a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:ac:ba:a7:eb:c8:5c:82:87:b6:a3:6c:ef:
                    ec:c8:8b:d9:80:96:fc:d7:fe:0f:3b:aa:7d:d4:4a:
                    ad:d3:10:3f:b6:0d:f4:aa:0d:f1:8a:78:8d:b7:ac:
                    25:01:58:7b:d3:b2:44:0c:ff:de:6a:e6:19:05:cb:
                    88:98:43:22:2f:9e:20:d3:06:ad:9c:67:68:49:c5:
                    77:49:12:01:a9:fb:0d:93:83:5f:e5:d0:23:98:35:
                    e7:06:6a:fd:13:b2:b7:29:55:02:4b:b2:d9:12:c5:
                    cd:48:55:30:40:23:f4:71:14:7d:5b:c5:fa:23:e1:
                    60:eb:b0:53:54:0f:cd:35:b6:49:4f:2f:ed:71:3f:
                    bb:89:90:10:35:56:6e:e6:56:63:d9:92:a1:26:b1:
                    0c:4c:cd:21:d4:26:0c:e6:2b:d6:48:41:b4:2d:a3:
                    b1:eb:36:2e:6a:33:b6:1e:a4:0d:ad:db:c4:e3:28:
                    c1:18:45:01:a9:65:d6:5f:05:89:4a:3e:15:86:d6:
                    ce:47:03:4f:fa:be:f1:57:50:52:ef:aa:06:b9:62:
                    19:be:4c:2c:32:f7:e2:b8:2b:c8:7e:8e:0e:8a:76:
                    92:6c:1c:c7:82:29:ea:be:14:0e:cc:fa:9c:00:28:
                    b4:fe:7f:b4:a5:15:7d:ba:f7:85:ef:00:ef:c1:24:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:72:21:BC:5D:8F:1C:44:0F:81:BD:39:78:37:AD:BC:AC:1D:4A:92
            X509v3 Authority Key Identifier:
                keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b0:3f:5b:4b:eb:5f:30:77:e9:5b:bd:00:ea:b1:5c:d4:5d:
         bd:25:c8:a9:06:95:8c:0e:28:c2:b7:1b:65:b9:44:22:c7:d4:
         3c:b6:69:76:95:f4:80:1e:4a:ea:f0:d2:4c:d5:31:49:18:d5:
         13:12:09:5e:e5:1d:10:c0:ff:91:0b:d1:12:ee:b6:6e:af:71:
         0b:75:a5:32:cb:6f:48:5f:f8:c9:4a:a6:06:c9:8e:80:51:5a:
         d3:0d:4f:23:ce:0f:02:e8:93:88:a5:13:c4:04:94:79:13:50:
         8c:49:0e:62:42:d0:a0:30:cc:1e:8d:b2:dd:30:ef:38:ec:78:
         42:1e:f3:06:d6:1c:3c:1b:14:35:a4:2d:1e:e3:0c:10:84:a6:
         fb:41:60:dc:e9:34:d9:c0:55:a4:09:8b:69:49:f4:45:6f:e9:
         e7:db:41:69:a9:4d:d3:67:39:85:e4:24:89:a4:d4:e0:1a:a0:
         12:af:b7:cc:be:19:38:b4:5b:59:d6:b0:f3:b5:83:4a:65:5a:
         01:48:5a:31:32:4f:7b:b4:86:14:6c:45:5d:be:b9:4b:eb:d2:
         08:86:b9:59:9c:ff:9a:b8:c0:7a:59:98:7b:a3:0a:9d:ec:23:
         cb:1b:0d:57:b1:27:04:0b:9e:35:b4:ed:a5:e0:30:cc:f9:93:
         6c:96:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:06:10 2024 by rpki-client on console-ams.rpki-client.org