Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File:                     jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier:          mXeZbclYgMR7AX7qgwvcM/67vEvaIYXgZgj5+DeRGfo=
Subject key identifier:   CF:F4:E1:0A:AB:DA:58:05:DB:DC:33:88:55:04:CB:51:BC:46:4B:B0
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer:       /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial:       019355E3E9D2ED2F1DFA0FEC248F0A3EE991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number:          0C9C
Signing time:             Fri 22 Nov 2024 22:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:20 +0000
Files and hashes:         1: CIcyxT9xp_M2FJaQXj-mKH07w6Y.roa (hash: yFVotHQ/Q61pgNMPC8IoqAt9iTgh0oZSOsvfStjoSeM=)
                          2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: SfhlhqJj4pVMsA9QfTXieBN+/W1zaJSDC58v/WCPi/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:e9:d2:ed:2f:1d:fa:0f:ec:24:8f:0a:3e:e9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
        Validity
            Not Before: Nov 22 22:00:20 2024 GMT
            Not After : Nov 23 22:00:20 2024 GMT
        Subject: CN=cff4e10aabda5805dbdc33885504cb51bc464bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:ce:e2:c2:b3:15:89:27:b5:d2:e2:87:59:
                    34:05:70:d5:2a:f3:0b:bc:62:8f:ac:af:71:74:30:
                    52:a5:cb:1b:e2:a9:33:0a:55:09:d2:1b:f7:cb:19:
                    8b:42:38:ed:6a:29:ea:a0:40:53:f2:e6:1f:d7:38:
                    54:b3:e7:cd:7f:78:d2:24:9e:a6:d3:f7:b7:07:c0:
                    0f:19:f6:1f:e6:5a:e9:4a:34:3c:a4:45:f9:0e:d5:
                    3c:9b:a3:f8:27:e8:71:e2:45:c0:ba:60:e2:97:37:
                    ea:62:2c:6b:4d:7f:45:7b:7d:1a:78:8c:8c:1d:1b:
                    22:14:d5:1f:8e:d7:bc:7a:26:43:e9:30:f1:73:d4:
                    a7:5d:af:10:3c:6d:7f:6b:de:eb:1c:ab:77:72:96:
                    b1:4d:b4:6d:25:37:12:1b:1e:59:51:35:ce:f2:24:
                    ae:5b:4d:ee:c4:d1:a8:b5:1e:66:4b:6f:d3:ce:08:
                    c9:b9:12:a8:3c:56:da:65:cf:01:6b:05:0f:f6:39:
                    17:53:cc:5c:4c:5f:3b:62:57:d7:d3:3e:43:55:ee:
                    2b:c0:c0:68:74:41:31:dd:03:df:6c:75:9c:89:03:
                    82:6b:f7:64:94:01:ef:a4:cb:e2:ff:6e:c7:16:c1:
                    38:2b:71:f3:0c:bf:6c:e1:d7:9c:f8:55:1a:c6:97:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F4:E1:0A:AB:DA:58:05:DB:DC:33:88:55:04:CB:51:BC:46:4B:B0
            X509v3 Authority Key Identifier:
                keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:76:b2:e5:69:c3:ef:db:3e:e9:50:c4:c3:07:ce:87:99:
         96:83:e1:fb:33:fb:d8:0a:59:d7:32:27:05:ad:ab:d4:c6:2e:
         f2:ea:63:b7:d2:7c:34:bf:fa:cb:57:02:2e:9a:bb:d0:3c:24:
         c5:32:85:4d:5f:b2:b5:82:b3:da:73:00:d4:05:aa:48:19:52:
         46:27:44:54:0c:f7:e1:5f:a5:9f:86:06:1a:0c:1e:f0:38:f5:
         ec:94:02:3d:58:e6:76:57:3e:09:3a:78:3e:31:33:8b:38:cf:
         d1:e9:19:c6:f1:b1:97:62:d4:73:30:c0:62:0d:60:aa:77:8d:
         38:49:4d:49:52:56:df:95:9f:29:9e:57:bc:5c:b7:14:1b:12:
         3d:5f:d0:ff:9b:34:9e:e5:88:5e:2e:2e:15:49:cd:ca:fd:e8:
         f3:9b:c9:0a:a5:c2:73:ce:76:29:94:fc:43:0f:e5:da:66:99:
         58:32:98:90:58:99:6e:b9:7b:1f:a1:40:aa:27:f1:54:29:06:
         50:8b:1b:59:b9:2d:3e:c8:8a:80:03:ae:b2:f9:12:d4:41:37:
         c5:6c:38:43:bc:32:f8:b1:a5:23:79:db:bb:33:08:b8:71:4a:
         1d:bd:42:a3:eb:10:63:73:a1:a1:00:dc:a5:0e:de:9f:35:e6:
         be:53:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:20 2024 by rpki-client on console-fra.rpki-client.org