Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File:                     jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier:          jlKkOyeRmrjT4e080f7ol4Y6TM1uN5364TazKfA0cSg=
Subject key identifier:   8C:49:19:B0:D1:63:47:8E:69:5C:03:1F:37:51:CC:BA:DC:6E:89:EA
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer:       /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial:       01923580851AD399B9121D5DC3436130D76C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number:          0F33
Signing time:             Fri 27 Sep 2024 22:01:07 +0000
Manifest this update:     Fri 27 Sep 2024 22:01:07 +0000
Manifest next update:     Sat 28 Sep 2024 22:01:07 +0000
Files and hashes:         1: 2ZBUndQ4_viS0HGr4M7hEeCasXs.roa (hash: F5GBc5RDCWGYZegjvK4jRjZWQQ3HAafz4In8LU4N4fo=)
                          2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: TG45gHAvolnVemO0Dg1xsPjlGVYHcx2pd/wRcVq+qss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:85:1a:d3:99:b9:12:1d:5d:c3:43:61:30:d7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
        Validity
            Not Before: Sep 27 22:01:07 2024 GMT
            Not After : Sep 28 22:01:07 2024 GMT
        Subject: CN=8c4919b0d163478e695c031f3751ccbadc6e89ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:e0:d0:44:35:bf:df:e0:e1:17:79:b5:d2:
                    29:cd:ce:c2:ca:60:4e:0e:9d:52:dd:9f:78:96:96:
                    ca:13:71:a1:11:12:f0:2b:a7:36:e3:89:84:29:e2:
                    56:ab:fc:97:d1:65:b1:1a:d0:1f:8a:16:0b:73:64:
                    08:0c:6e:0b:93:bd:38:0a:ad:3c:73:ba:8d:1c:a8:
                    5c:88:eb:3b:1e:81:d5:1c:2c:7c:c6:a9:86:6d:31:
                    85:f2:a6:cc:fa:6c:91:d9:63:8a:f7:b6:72:99:a6:
                    26:5c:2c:f2:c4:40:2a:7e:d6:ff:6b:3b:e4:03:e8:
                    de:78:a9:35:0e:7a:3e:93:3c:e6:ca:f8:28:6b:67:
                    9c:2b:e7:90:02:d0:67:6d:cf:d2:06:5e:9e:a8:c7:
                    1e:f0:f3:c4:15:b4:84:0a:04:ef:34:a9:24:f2:2e:
                    11:13:55:9c:2e:21:3e:2f:2c:02:dd:e0:ec:a0:30:
                    00:51:88:c4:4e:ad:23:f6:ed:92:cf:24:2b:20:ee:
                    86:32:94:17:f8:24:7a:4d:c5:8f:7b:7a:9e:c9:e9:
                    c1:dc:12:da:0f:06:82:ca:39:a6:1c:70:69:11:aa:
                    49:f7:42:e3:87:42:39:6f:f1:53:92:ad:16:c9:94:
                    63:cd:1d:ab:96:83:26:6f:bf:98:5c:7e:c8:b1:1e:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:49:19:B0:D1:63:47:8E:69:5C:03:1F:37:51:CC:BA:DC:6E:89:EA
            X509v3 Authority Key Identifier:
                keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:83:aa:97:b3:eb:18:0d:7c:8a:48:b9:1a:48:a3:47:0d:97:
         88:80:dd:65:ab:6d:57:90:82:c9:6e:f1:e8:12:20:29:cf:4f:
         ab:3c:2b:f7:de:82:35:7a:cb:42:42:fd:a5:83:bd:63:e9:c8:
         1a:f0:ae:e7:0c:6e:a8:46:d8:88:5d:f2:ad:68:fc:93:07:97:
         a1:c2:56:52:af:f8:89:b7:4f:1b:b5:3a:28:84:da:6f:f5:68:
         56:8f:a7:47:ea:3a:0a:66:c4:f5:71:1f:80:0c:5e:ec:8d:06:
         94:77:9a:c4:21:12:e0:a3:d2:12:f1:66:27:ef:3c:56:a5:5f:
         d8:34:be:54:ad:6c:36:31:c1:b9:42:0a:68:52:b4:4e:5c:dc:
         f5:62:a8:1e:59:1b:89:83:bc:38:83:a0:4b:b3:76:f3:48:75:
         82:29:de:57:a1:cf:db:4d:78:c7:e2:7d:74:cd:6e:71:71:5c:
         d4:4e:fe:b8:e2:f2:b5:f0:15:2a:d3:2f:e3:c3:df:38:88:65:
         15:68:40:24:6c:56:79:d2:4c:c1:fe:fe:ad:06:10:81:8d:55:
         2c:56:f5:35:11:6e:a6:86:1e:8d:be:c3:73:44:2d:5e:bb:a5:
         c5:eb:26:38:52:69:67:46:82:cd:04:8d:12:c6:19:aa:40:ff:
         f2:07:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:27:22 2024 by rpki-client on console-fra.rpki-client.org