Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File:                     jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier:          EChhtAyJU9ZgV6fQ7vW+GoZlc71tAxORKH0GHd6W+uE=
Subject key identifier:   18:43:A7:1E:59:85:45:C4:2D:8B:C6:4A:33:15:E0:8C:ED:B2:AC:A7
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer:       /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial:       018F86A3630BF2A00F9F8020EB1955F2E0C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number:          0994
Signing time:             Fri 17 May 2024 13:00:05 +0000
Manifest this update:     Fri 17 May 2024 13:00:05 +0000
Manifest next update:     Sat 18 May 2024 13:00:05 +0000
Files and hashes:         1: EdpeQP6ti6miNiHji0RnaxyjH0A.roa (hash: Th4VCzQPArXG2Go9PkJy+sHZ1/j8q5r/n56eeBNW9s4=)
                          2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: n4klRmsG/rB51nbjHV0+gNP6f6hAEKykNlU1Ww2kDBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:63:0b:f2:a0:0f:9f:80:20:eb:19:55:f2:e0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
        Validity
            Not Before: May 17 13:00:05 2024 GMT
            Not After : May 18 13:00:05 2024 GMT
        Subject: CN=1843a71e598545c42d8bc64a3315e08cedb2aca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:2e:73:77:27:39:48:9c:83:69:bc:3e:13:84:
                    6f:3d:d7:03:8b:15:a4:57:fc:40:4b:50:20:41:8c:
                    c6:53:1c:8d:56:72:d1:4b:49:76:36:ca:b4:56:06:
                    b0:f7:99:da:fa:ef:bb:f5:2c:ae:93:a6:7c:4c:7c:
                    84:af:81:93:a0:7b:d6:36:e3:61:07:d8:df:32:d4:
                    23:45:51:9a:2b:60:dd:6d:76:fd:94:4c:7a:f1:a9:
                    7d:f0:c9:02:67:b6:73:e1:db:28:00:87:19:ab:a9:
                    cc:d8:8c:a8:92:82:ee:5c:65:bd:14:0e:da:73:0f:
                    c7:76:29:f4:3a:bd:72:af:0e:30:b4:c6:89:39:a0:
                    f0:e5:7e:fa:cf:c5:ce:ff:33:9a:8f:f3:d3:8e:32:
                    6b:9e:0d:66:f3:16:01:29:f8:ae:dd:51:03:ce:8a:
                    a3:f9:3c:3f:d3:0a:de:20:13:69:d1:0e:48:28:ef:
                    6d:b7:73:a3:82:4f:eb:1a:f9:c6:6b:9c:59:96:df:
                    62:a1:2d:56:e4:f9:91:cb:0e:f2:ca:8c:c4:b0:9e:
                    f9:d4:6e:ae:17:8e:a7:93:85:9b:a6:e3:93:f0:cb:
                    bd:26:64:22:87:fb:ba:a3:d6:25:8b:3e:e5:34:66:
                    5b:6b:b7:1d:ad:c6:5c:07:5d:a7:9b:76:63:6e:66:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:43:A7:1E:59:85:45:C4:2D:8B:C6:4A:33:15:E0:8C:ED:B2:AC:A7
            X509v3 Authority Key Identifier:
                keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9b:92:c7:eb:fa:f3:e8:14:d7:05:bb:2d:91:c2:81:e7:60:
         88:2f:e0:58:9b:b7:47:b3:6c:af:ca:aa:cc:6e:a3:de:e9:9c:
         ab:d3:49:29:96:3c:9f:ab:cd:01:13:d7:ff:2c:bf:40:61:0f:
         0d:e2:f5:b6:a1:1b:62:66:57:c3:78:ea:a3:2c:79:aa:88:6c:
         38:a9:8c:14:ab:be:62:bb:7f:c7:82:23:f5:db:07:2d:e4:79:
         e8:b3:4d:fc:be:ce:f5:3c:d4:1f:46:91:ab:97:21:31:47:ef:
         6c:53:18:1b:9e:c9:53:83:49:35:1c:46:a4:1c:51:46:45:2c:
         81:58:5a:bc:ee:32:4e:95:01:81:cf:3d:f5:90:c6:49:29:70:
         d5:56:74:d7:6f:00:1b:91:d9:58:98:05:8e:83:ea:92:74:44:
         2b:09:25:b5:ef:da:d5:1f:d2:fc:b6:b8:de:59:3f:ee:0d:b4:
         51:bf:39:29:2e:90:56:fd:99:9a:88:44:8f:68:38:48:1d:8a:
         60:bf:c9:05:cc:c5:da:99:78:55:16:39:46:25:d4:6c:3d:76:
         77:a0:e7:73:f4:d3:e4:e1:cb:73:9d:21:9a:0d:c4:51:7e:c6:
         fa:29:30:2a:90:57:6a:37:c0:72:0f:f1:2b:af:cb:d3:b6:06:
         69:a4:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:41 2024 by rpki-client on console-ams.rpki-client.org