Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File:                     JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier:          ffgb+Q38FjnykdwqbiekoTNgyFzqGt/Ad1qAo/9qxec=
Subject key identifier:   AE:21:BB:49:61:DE:25:EB:99:28:57:49:B6:B3:FE:16:2B:30:46:0C
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer:       /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial:       018F86A3ED57A0857017D96840ED42121DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number:          0250
Signing time:             Fri 17 May 2024 13:00:40 +0000
Manifest this update:     Fri 17 May 2024 13:00:40 +0000
Manifest next update:     Sat 18 May 2024 13:00:40 +0000
Files and hashes:         1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: yZy61i1j08GC89KYblW/vZiv5dORYin79T4rrMSNc2I=)
                          2: am8hP4m0ND60Md7Nwew3bygO_KY.roa (hash: aRBGzYoECmVPIYmKOBs+x+eQMCfDNaC/NgoP29UC/no=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ed:57:a0:85:70:17:d9:68:40:ed:42:12:1d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
        Validity
            Not Before: May 17 13:00:40 2024 GMT
            Not After : May 18 13:00:40 2024 GMT
        Subject: CN=ae21bb4961de25eb99285749b6b3fe162b30460c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f7:2d:9f:cc:15:29:59:8d:7a:4e:7c:27:c4:
                    41:51:1f:fd:94:a2:bf:9d:99:1b:e3:f5:74:72:a9:
                    21:09:eb:67:98:0f:84:25:4e:49:04:4c:76:df:3a:
                    b6:03:47:8c:1c:3b:87:eb:48:d9:fa:1b:02:5c:21:
                    bd:54:ee:01:49:d4:80:8a:f8:be:82:1f:27:e6:18:
                    28:de:44:4d:ab:e8:50:b5:a0:28:9e:59:42:b9:0a:
                    99:b2:35:f6:5b:35:0b:cd:74:ba:4a:85:cc:bc:88:
                    ac:fa:3c:03:c4:b5:cb:ee:75:67:99:a4:98:8d:e2:
                    92:59:fd:a8:df:06:52:5e:39:3c:a4:ae:3f:a8:55:
                    d9:16:e6:da:88:39:1f:f5:91:cf:20:f3:1b:4a:1f:
                    53:12:a0:26:fb:b1:36:54:21:af:de:e8:ea:9e:e4:
                    c9:10:37:67:95:34:6b:b5:31:79:67:99:cf:96:05:
                    a5:f6:6a:80:c9:0d:28:0f:96:64:66:d8:e3:67:81:
                    4a:04:c9:24:3a:b4:4c:44:60:14:83:91:42:2e:9b:
                    59:d9:e2:64:1b:61:ab:29:b5:85:f0:27:50:21:77:
                    aa:d9:df:42:8a:e4:97:94:23:b8:58:e1:67:16:cb:
                    4d:28:00:79:17:64:ac:93:fb:ab:49:89:28:ef:33:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:BB:49:61:DE:25:EB:99:28:57:49:B6:B3:FE:16:2B:30:46:0C
            X509v3 Authority Key Identifier:
                keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:85:78:92:8e:f4:bd:0c:e0:41:bd:60:49:11:70:8d:35:ff:
         57:e9:cb:d0:3f:ec:c2:4f:3a:98:29:3b:a3:a0:5b:9b:e6:bf:
         d0:8f:91:9d:03:03:b4:01:f2:a1:27:d0:79:8a:6d:f5:04:73:
         8e:e9:7b:14:ce:19:ed:f6:15:fe:89:46:30:a4:78:fa:82:bc:
         da:91:1f:69:30:63:10:5d:3b:6c:07:f2:50:1c:ba:77:46:76:
         08:61:49:b2:ab:d4:6d:6b:83:4d:78:70:18:44:19:11:59:b3:
         24:55:34:0d:bb:99:20:80:71:df:4e:65:c1:8e:18:aa:97:de:
         86:be:16:0d:90:15:c7:58:7b:0a:ca:da:b9:01:24:8e:9f:75:
         0a:95:57:5d:a5:9f:dd:91:23:f7:c3:64:cf:22:c8:0c:22:cc:
         80:21:41:1e:bd:cf:17:dc:4f:82:46:6a:88:52:9a:22:e8:b5:
         45:b2:d6:cd:75:c5:ea:75:0a:69:ff:42:cf:aa:fe:71:29:bc:
         be:b2:4a:de:1d:5f:d0:8b:07:29:d2:5e:31:e9:5e:cf:19:b4:
         f1:39:e4:f5:0c:ed:82:92:00:56:75:48:4e:18:2f:a5:7a:49:
         f7:e0:b0:00:e8:c8:7e:7c:26:36:b4:31:bb:d0:a2:c8:ea:e4:
         a3:d3:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:42 2024 by rpki-client on console-fra.rpki-client.org