Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File:                     jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier:          f06nlqWq7qFbdCpm0Ghu5mkpLaIro3SlkzKtW+TJqj0=
Subject key identifier:   15:53:17:39:21:A3:6B:BE:5F:4A:55:D4:90:EE:EC:71:02:9E:89:96
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer:       /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial:       018F86358C28C0EDBC6BA866EBD7707DFACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 11:00:07 +0000
Manifest this update:     Fri 17 May 2024 11:00:07 +0000
Manifest next update:     Sat 18 May 2024 11:00:07 +0000
Files and hashes:         1: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: R7pxjw3PE3cSw7rs2dr3fnxihIixHEASxhzG59Sql2U=)
                          2: yqxSv6aOe5wKHWpuvjDG82AoMKQ.roa (hash: 1jZcnfsL3Qb3ft8hxKMbjSeyoBrLpNChYJaYu03EiCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:8c:28:c0:ed:bc:6b:a8:66:eb:d7:70:7d:fa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
        Validity
            Not Before: May 17 11:00:07 2024 GMT
            Not After : May 18 11:00:07 2024 GMT
        Subject: CN=1553173921a36bbe5f4a55d490eeec71029e8996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:f9:33:7f:bb:11:47:3f:e7:c1:20:9f:2d:
                    78:8f:a4:42:51:8c:03:2b:bc:6b:30:cf:4c:4f:38:
                    03:0c:76:62:23:60:3b:0b:c5:4a:98:b5:26:09:e6:
                    f9:8b:56:14:3e:15:53:8c:b1:e4:7e:69:cd:04:f6:
                    a3:c3:cc:22:be:3a:e6:fd:19:d4:5a:00:74:4f:b2:
                    10:e5:50:a9:cd:1c:c3:f6:12:29:b4:18:b2:b9:6d:
                    97:f0:17:40:9b:2c:b0:f8:d4:b4:0f:00:96:7b:4d:
                    2f:42:31:c9:1c:be:8c:b3:97:47:07:23:11:06:22:
                    5a:02:06:28:c2:01:59:2a:f4:41:f4:bb:b6:33:73:
                    4c:90:a7:ca:73:35:c9:74:a3:25:6f:94:5f:5a:00:
                    b8:8c:01:2d:3d:e7:6c:bd:7d:5c:7d:23:0e:62:c5:
                    03:19:e8:73:06:c0:95:3d:79:18:65:c3:3a:28:65:
                    85:34:75:45:6b:bc:b6:a2:d3:da:aa:b8:5b:8d:96:
                    78:3e:ba:76:c6:68:f8:3e:44:d1:74:7e:62:01:1e:
                    a7:09:4d:fc:0a:39:05:15:67:5a:26:03:73:a7:f2:
                    ee:c7:be:6f:e3:10:fe:ad:a4:51:00:a8:40:95:a9:
                    65:68:27:be:52:99:87:05:60:bb:20:98:b7:e4:01:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:53:17:39:21:A3:6B:BE:5F:4A:55:D4:90:EE:EC:71:02:9E:89:96
            X509v3 Authority Key Identifier:
                keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:16:8b:ac:ab:3f:ba:27:d6:52:19:52:a5:3b:9f:f7:f8:
         7f:7e:27:f5:80:e6:e2:fc:4c:e5:6b:c4:78:b8:7e:55:f1:34:
         70:e0:63:95:d7:4a:32:fa:28:29:dc:ab:72:bc:93:e2:6d:f8:
         80:8e:d3:40:69:7d:e3:bf:98:cc:79:44:d0:48:3b:34:74:79:
         a8:22:50:52:05:3f:bd:df:d7:a7:eb:37:79:71:60:1e:38:fc:
         86:aa:f8:d3:3c:73:94:e8:5a:45:92:cd:89:4a:a3:ae:7a:bf:
         57:73:5d:aa:ed:06:c5:8f:64:a2:d3:bb:5d:45:d2:9f:69:3f:
         e5:f0:65:22:5a:3a:40:18:72:b5:bf:e6:3d:7d:ca:73:c1:7e:
         6f:ed:5b:cf:fe:fa:6c:32:3e:a4:1a:e5:67:40:4d:2b:4c:14:
         62:a8:b5:cd:b9:ca:c4:69:35:56:f8:8c:b0:88:8e:34:d1:1d:
         ca:fa:6f:c3:9c:79:39:43:c3:a2:d6:e6:65:cb:80:65:54:64:
         bc:1f:b0:32:aa:5f:3d:17:43:f3:fa:da:b6:61:14:bf:e5:f5:
         e0:b8:18:80:c5:80:b1:d2:3d:fe:2a:7b:3d:15:d3:3e:63:aa:
         9f:94:f5:d2:33:3c:72:e7:fa:d9:a8:bb:54:c2:aa:4c:6b:c3:
         28:38:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:38 2024 by rpki-client on console-fra.rpki-client.org