Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File:                     rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier:          HXOsXX/W8gik5+IWt6MMJwCDvzAAwTgjoH7BAcd7gVw=
Subject key identifier:   E1:63:F3:F8:DB:4D:D7:8D:C0:0D:69:AA:AD:8A:07:5C:7E:58:45:26
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer:       /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial:       018F8749D829A992EC03CC556AFC7D7F9E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:01:54 +0000
Manifest this update:     Fri 17 May 2024 16:01:54 +0000
Manifest next update:     Sat 18 May 2024 16:01:54 +0000
Files and hashes:         1: oz5qkZwj8FY8t_HJMWZaMC1EPxM.roa (hash: WMjIzhS6gj5RTH6Zttv3Z8K66yFFv6Eh47FkgwbhiTk=)
                          2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: 9B3wUo9fh0BJ+R2lEVVnNT6XA+0xRkVdk6OkOSQudnM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d8:29:a9:92:ec:03:cc:55:6a:fc:7d:7f:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
        Validity
            Not Before: May 17 16:01:54 2024 GMT
            Not After : May 18 16:01:54 2024 GMT
        Subject: CN=e163f3f8db4dd78dc00d69aaad8a075c7e584526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:1a:62:e1:95:f4:0d:40:91:6c:96:46:f5:
                    ed:35:a0:2f:cf:af:14:c6:2c:c3:da:ff:14:59:e4:
                    14:18:4b:0e:7c:3a:4c:ac:40:2d:f8:39:65:67:af:
                    5b:d1:98:15:3e:82:12:44:42:48:c6:f4:46:96:da:
                    0e:c9:fa:9c:79:c3:b2:c9:82:57:96:e9:bc:cd:d2:
                    f1:f8:46:86:dd:80:9e:01:21:61:b3:8c:84:e8:55:
                    6f:f0:c7:95:bd:8a:17:33:e9:5f:0a:5c:c6:4f:5e:
                    82:1a:c3:4f:6c:b3:fc:eb:40:8e:67:05:85:06:db:
                    ad:f8:bc:1e:c3:9c:6b:e2:07:72:e7:69:0a:2a:d4:
                    36:fc:b0:5f:2a:c7:ac:9e:86:ed:62:fd:3e:11:6d:
                    4d:6d:59:2d:1b:52:22:63:0c:97:87:cc:88:3d:80:
                    5e:2d:fb:55:97:7a:1e:29:fe:bb:35:06:95:f8:18:
                    b6:d9:66:c7:f1:93:72:75:02:19:ae:61:c6:0c:00:
                    56:e1:a1:cb:bc:00:89:80:76:c8:8c:5c:24:b8:6d:
                    58:35:fc:e6:6d:20:6d:0d:9a:a0:9c:82:8b:62:8d:
                    65:62:f0:fb:cd:bb:f0:d7:68:54:ed:ff:2f:38:8e:
                    8d:3e:fb:02:b9:f3:28:05:43:a4:f0:8b:55:07:0b:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:F3:F8:DB:4D:D7:8D:C0:0D:69:AA:AD:8A:07:5C:7E:58:45:26
            X509v3 Authority Key Identifier:
                keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:f7:0c:c4:38:cc:86:c5:fa:75:dc:16:bb:e4:e2:ff:7e:
         9d:69:8d:8e:54:7e:f5:31:85:3d:9a:a2:61:88:51:cf:7a:d8:
         c3:6e:50:48:9c:7c:44:3c:d0:86:ab:e5:8c:13:ec:56:f7:6f:
         e4:61:f7:12:45:d9:df:f1:30:3c:61:30:0c:27:6a:73:22:cf:
         49:d1:17:8d:99:60:ea:fa:27:2a:ed:ed:d7:3e:17:2a:50:94:
         96:b2:30:2d:3a:22:cc:10:42:78:fa:15:4e:ce:88:4f:d5:69:
         f2:9b:5d:4e:a2:d8:a2:c8:e3:f8:c8:bf:73:90:58:11:38:ab:
         31:08:09:09:9d:3e:17:65:28:8f:ba:d1:82:59:1f:17:d7:c9:
         0a:d6:b1:18:27:7f:23:d8:7c:c5:47:62:a6:17:cb:f0:52:f9:
         1c:9c:02:c2:27:c0:ab:4c:39:41:0a:2e:51:e1:4a:51:8d:6a:
         df:c3:ef:35:5f:f5:51:e7:98:f9:64:dd:86:13:2b:ad:ab:f8:
         da:26:6a:7b:e7:f5:d8:96:f5:e3:03:06:a5:4b:a9:ee:6c:51:
         9e:92:48:0d:86:58:c1:5e:a8:9c:79:ea:77:14:5b:93:6e:1e:
         b4:98:79:32:d3:17:a6:8d:47:b2:20:fd:55:e4:54:f8:af:8f:
         3e:94:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:22:21 2024 by rpki-client on console-fra.rpki-client.org