Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File:                     J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier:          hKkkjhgMuSDr9AZJ/ULZAfYNlekiaz59M/0CC5ENA48=
Subject key identifier:   80:C7:3C:88:B1:4B:CB:BF:DA:A1:69:89:92:D1:2B:71:0E:36:BF:B4
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer:       /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial:       018F88240B799F2E0083F914C534313152CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number:          0FD8
Signing time:             Fri 17 May 2024 20:00:14 +0000
Manifest this update:     Fri 17 May 2024 20:00:14 +0000
Manifest next update:     Sat 18 May 2024 20:00:14 +0000
Files and hashes:         1: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: tX77cgfI57HtfdeZyL/A2eTLtf73nYqF43rxAYybAL4=)
                          2: aFgnCpEYvTX3zn9DlivSzDXrzc8.roa (hash: muawbwirJydL1a1EeQ50j1MIdchsCcuAxpzQ5/Yt2EI=)
                          3: mhSqf4jtStcAetimdx30z0OMVE8.roa (hash: QLjkyumWP7QjMi/egbzjpDZtNED5wEWBLz1ksr3sr9M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0b:79:9f:2e:00:83:f9:14:c5:34:31:31:52:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
        Validity
            Not Before: May 17 20:00:14 2024 GMT
            Not After : May 18 20:00:14 2024 GMT
        Subject: CN=80c73c88b14bcbbfdaa1698992d12b710e36bfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:d1:8a:90:fd:4f:20:2f:79:1c:bd:65:ad:
                    2f:27:7b:76:b7:89:08:08:e9:5c:4f:97:e4:c1:4b:
                    b2:f1:6f:80:65:6f:79:b1:4a:ab:70:9e:15:db:38:
                    27:14:c8:a0:29:d6:09:40:24:15:1b:9b:2e:41:db:
                    f2:03:fc:bc:2e:2b:aa:92:a9:27:5b:8b:35:0f:3e:
                    29:bf:9e:cc:18:49:2b:70:aa:92:c5:8b:26:66:d3:
                    a9:28:04:2f:61:72:74:c8:75:72:6a:8a:f3:d2:00:
                    30:71:e1:ae:f8:c2:90:83:f9:c0:fa:19:95:25:41:
                    8d:04:08:53:f2:87:22:2b:fa:16:07:c6:cf:f5:b0:
                    49:4b:73:29:06:eb:75:fe:3a:3b:54:a9:63:f4:da:
                    d1:06:41:cb:43:5c:71:b4:5f:da:11:b1:20:d2:8f:
                    27:44:5d:4a:97:78:f4:3c:ec:94:54:89:c6:60:c5:
                    46:26:a8:13:b6:34:cf:a9:e6:4e:cb:c3:51:6c:a7:
                    75:ca:fb:aa:41:84:82:c0:c1:78:6e:d3:9e:c3:1a:
                    5a:8f:7b:13:a8:ce:33:6a:d4:e3:52:a6:98:cb:0d:
                    ea:81:b6:bd:86:7d:be:0c:55:34:ad:fe:1d:cd:92:
                    8d:30:90:25:ce:5c:3f:45:47:3f:8f:80:65:0e:12:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C7:3C:88:B1:4B:CB:BF:DA:A1:69:89:92:D1:2B:71:0E:36:BF:B4
            X509v3 Authority Key Identifier:
                keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:6c:53:55:3b:6d:20:30:58:c8:79:e1:51:7f:0a:73:91:
         0b:ad:fe:0f:cf:e7:42:eb:8e:99:73:ac:37:98:d0:a3:0b:3f:
         7e:c9:80:39:40:4d:2d:01:23:83:15:5f:00:80:2c:82:2b:ec:
         35:f6:1f:96:8a:29:3c:db:a1:52:f6:1b:74:68:f3:20:a4:de:
         28:3b:13:75:80:8a:82:af:cc:64:5e:c9:b7:90:e0:da:5b:ed:
         77:6e:dd:20:ea:c7:b7:be:29:51:70:0b:11:2b:0a:3c:92:fd:
         0d:ad:24:dc:04:9a:db:db:8a:b0:38:ba:6a:80:96:e8:08:90:
         c6:f9:d6:56:54:ff:7e:f3:97:7d:f1:83:a0:a9:d7:c6:80:26:
         e1:2d:84:a4:c9:cd:4b:8a:2d:d7:be:3d:b6:fc:dd:1f:58:45:
         a9:eb:2a:9a:e2:5a:2b:10:b4:be:c6:d7:47:fd:03:97:28:e0:
         69:fa:4f:f6:10:9a:18:78:38:ff:f2:88:50:6f:53:62:27:fe:
         2f:cf:a4:8c:b3:2f:92:cb:c9:24:9b:65:d6:fc:b3:b0:a1:39:
         ac:9e:3c:a0:e9:27:8c:a8:6e:67:c4:be:eb:94:7a:99:a7:07:
         15:b7:7e:1c:a5:b2:62:92:2c:7e:20:2f:bf:92:4a:71:86:21:
         d5:d0:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:14 2024 by rpki-client on console-ams.rpki-client.org