Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File:                     JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier:          ckaPVV8lK2dM0tWie8x2iAXXWYjHNu5pn+XDXaU949o=
Subject key identifier:   CA:B0:E1:41:74:37:F2:BE:68:C3:6E:49:9D:1B:4F:3D:DA:DF:B6:5B
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer:       /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial:       018F885B2060542E5BFF1D4C8320072380C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number:          0918
Signing time:             Fri 17 May 2024 21:00:24 +0000
Manifest this update:     Fri 17 May 2024 21:00:24 +0000
Manifest next update:     Sat 18 May 2024 21:00:24 +0000
Files and hashes:         1: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: EGBHuTrfvSfO60yJD4Y2nch7+dR9JgoiefUhzfk/ldI=)
                          2: fAhEGn-vd-HRQRLyyF0xYKoddB0.roa (hash: XVuVMRQgIqjOGGXKmnkdaSaLSN+fGBYCWcjGaNttZ0o=)
                          3: u3MqeVLP6UfUDB7EejC4gUatdVY.roa (hash: b8f3wAHrAO8RX43AUTStHdHZstaDazYZvlbhrnu+as4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:20:60:54:2e:5b:ff:1d:4c:83:20:07:23:80:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
        Validity
            Not Before: May 17 21:00:24 2024 GMT
            Not After : May 18 21:00:24 2024 GMT
        Subject: CN=cab0e1417437f2be68c36e499d1b4f3ddadfb65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:c9:c1:7d:43:f2:9c:dd:75:00:0b:36:a6:
                    28:b4:5e:bf:60:90:63:8e:35:49:23:97:e9:69:70:
                    ac:4e:6c:e8:90:99:0f:c4:25:57:25:af:0a:3c:65:
                    b0:52:1b:80:63:14:8d:07:25:92:50:f4:1b:e2:fd:
                    95:2d:46:fc:97:b5:b7:f8:80:31:94:16:e1:79:97:
                    20:dd:7f:de:fd:88:d9:7e:4c:27:9b:2b:68:97:e3:
                    cc:59:bb:b7:fd:81:cf:ff:83:cb:7a:73:2a:34:c5:
                    38:5e:15:6b:f3:4b:5e:2a:46:4c:fb:f7:f6:e6:d4:
                    b4:b7:52:f1:ca:ba:dd:a8:e9:f3:cf:6d:c6:f4:8e:
                    a8:0e:66:18:64:87:b1:f1:d7:c3:04:2b:a1:34:81:
                    7b:f3:3b:4c:08:35:2d:e7:4d:8e:ad:a9:6b:a1:99:
                    ac:36:16:79:be:6d:1a:ec:2b:63:8a:ae:eb:ae:87:
                    21:ea:a6:8b:61:ca:d1:dd:e9:27:b8:70:dd:28:5a:
                    65:70:5a:ec:97:d6:c5:99:b0:28:7b:5e:62:87:02:
                    16:2f:5c:65:a9:46:3a:9e:cf:5c:20:cb:38:58:7f:
                    14:64:06:da:79:24:c6:d3:49:a3:55:67:14:88:ba:
                    4c:7b:44:28:ac:76:7e:14:3c:4b:26:38:54:c6:bf:
                    4e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B0:E1:41:74:37:F2:BE:68:C3:6E:49:9D:1B:4F:3D:DA:DF:B6:5B
            X509v3 Authority Key Identifier:
                keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:30:98:d2:fc:14:df:2d:3a:21:f3:f7:4c:07:e2:09:21:
         4f:fb:03:c0:f8:d1:c8:d8:d3:f2:49:b0:36:bb:9b:b0:00:02:
         95:cf:05:f9:c0:e6:d8:11:32:7b:1d:2b:88:55:10:65:28:9b:
         95:3d:52:e8:6d:21:2b:f3:4b:e3:cc:71:8b:d8:2b:75:44:ac:
         63:a3:ae:78:c5:cf:33:5c:71:b6:75:ce:17:93:5f:ce:38:7c:
         60:92:a9:a5:3b:cd:e8:1a:56:49:0f:0b:02:bf:54:c8:8a:82:
         68:7d:ce:54:3a:13:97:a5:aa:c7:2a:ed:ef:1e:5c:db:23:9c:
         31:3f:6a:26:dd:6c:79:a4:ed:65:f6:7e:c8:72:a3:35:1a:6c:
         48:da:7d:38:8f:ab:de:3b:dc:59:cd:c5:79:3b:d6:e2:7b:1b:
         9e:25:39:dd:d2:a2:8f:42:df:37:d8:ff:99:35:ad:de:1d:79:
         14:31:b1:e7:b7:45:35:44:09:74:4a:6b:03:54:4e:36:3d:79:
         51:32:63:bf:13:cc:b0:f0:ff:42:e5:70:31:42:96:64:01:42:
         0c:7c:d9:db:ab:71:b1:e9:c3:f0:65:68:1b:56:66:d5:a9:7e:
         06:72:19:63:02:9e:37:e6:85:9b:7e:11:b2:cd:40:84:22:a8:
         6f:6d:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:06:47 2024 by rpki-client on console-ams.rpki-client.org