Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File:                     JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier:          fw02hqrr/H/1LySj2M+RT2+OAgtDAJ4E7YWIg1mMn1g=
Subject key identifier:   7F:4A:80:E4:EA:22:7E:98:7C:94:3A:46:24:E7:34:84:53:B4:9A:1D
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer:       /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial:       018F9A98A299C890F1888F49AAF3C387D33A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number:          1185
Signing time:             Tue 21 May 2024 10:00:45 +0000
Manifest this update:     Tue 21 May 2024 10:00:45 +0000
Manifest next update:     Wed 22 May 2024 10:00:45 +0000
Files and hashes:         1: 1-ZSufS14yx53HldTvisGN5T2lSs.roa (hash: OcOGyYbuJBehB9GQfct4AI1dByXXTYcBigFTdHHuEjg=)
                          2: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: 5fCxPA/FPDUWK4bM72AKOxDhl06/J41k7Fh9eZl5ho0=)
                          3: P5vQ_A7oBW7-4EjtfWCnFdGYM08.roa (hash: 98SFrN9CI1NEIyCads60rykJ3j6cIOHVqZNzZKBhuQQ=)
                          4: S1EOIQcN2H0fAt0V3Ch3N6YxeP8.roa (hash: KkhQp6NUhROtSzn+tD58CKehL7VApRQAvIYpSrr+qkE=)
                          5: Tg8Cs43z3XJFXXaUUt5nGdm139Q.roa (hash: HSUlhUsakcXS4H4OMv1c7ILTOmzLT8M5EAG14wah+qs=)
                          6: Uo1cK66R2aK6t3W-haY6CJ3T5Ok.roa (hash: TdM0BRsfVCdBcwILUGRp6PFfSeLJkFMfqDrq+673A1w=)
                          7: fMl40qJNJwpo45JQGz0zj5daVKU.roa (hash: 3JpS/cZlviOv3h2RKc1leVHwytdagRH2+S3GKF08FCA=)
                          8: uAE3-yrNC6m5_svUnINPSI5DN2s.roa (hash: QBSxCtUOgk1Y1t+H//Id4JVlRSRRhJf6Yg/WtSZys+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:98:a2:99:c8:90:f1:88:8f:49:aa:f3:c3:87:d3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
        Validity
            Not Before: May 21 10:00:45 2024 GMT
            Not After : May 22 10:00:45 2024 GMT
        Subject: CN=7f4a80e4ea227e987c943a4624e7348453b49a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bd:5c:4d:70:b2:46:8e:99:d1:aa:52:22:21:
                    ea:f8:c2:67:4e:d0:ca:3d:08:90:90:dc:6a:c4:46:
                    59:f2:fc:8b:9c:26:3b:d0:07:b4:24:b6:32:8f:2b:
                    e5:6a:b8:9a:b0:6b:4f:f4:85:ab:9a:48:e3:ae:52:
                    03:56:17:af:6d:4d:7c:dd:ff:06:35:fb:2e:83:93:
                    f0:6d:32:e8:f2:01:8e:ee:c4:b6:01:b5:a4:28:d7:
                    e3:15:8b:c8:6a:3a:e5:1f:c6:37:bc:3c:ed:b8:1c:
                    1e:e3:9a:8a:01:fc:63:b7:05:57:70:51:6f:1e:fc:
                    f6:92:f1:94:0e:03:7a:18:7a:f7:20:75:4a:65:a7:
                    f2:d7:22:b9:35:ca:7d:53:ee:57:e9:ce:96:98:03:
                    2b:56:dd:12:47:63:5b:cc:cf:94:d7:bc:03:19:47:
                    18:17:8d:79:04:21:7e:94:2a:22:7d:e4:f9:3b:ad:
                    e8:1b:99:f6:84:ef:73:29:0a:aa:c2:30:6e:1d:46:
                    b0:71:46:96:5c:34:f6:d6:7d:16:13:73:1d:e8:1e:
                    56:6a:19:0e:07:8c:63:5a:ad:f8:c3:26:3e:ef:d3:
                    d6:8a:f1:86:07:7b:91:4c:58:37:de:34:b3:8a:31:
                    ba:50:f1:f8:2e:a5:6c:24:d6:b1:e8:59:12:3c:58:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4A:80:E4:EA:22:7E:98:7C:94:3A:46:24:E7:34:84:53:B4:9A:1D
            X509v3 Authority Key Identifier:
                keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:2d:43:66:03:04:2d:c4:5e:44:e3:05:92:b3:be:b2:17:
         78:72:ac:ab:bf:71:a2:cd:78:b6:9f:6f:5e:3b:19:5a:50:43:
         d8:f0:23:68:6a:35:c5:04:66:c6:b5:7b:83:2a:63:e7:04:e5:
         2d:c3:f8:4d:52:f4:c4:f9:40:b2:fe:1e:42:d0:aa:19:53:00:
         dc:da:e1:7f:da:5e:0e:2e:94:53:3e:4e:70:86:d1:fd:62:df:
         87:d4:9b:1b:74:48:67:97:1f:7c:a3:17:0e:bb:6f:10:51:48:
         17:66:b5:7e:c5:a1:ea:4d:0a:c4:a3:7c:83:50:94:b4:30:43:
         c9:fb:cf:68:9e:d8:81:d8:17:bf:b1:fa:dd:28:c4:24:30:0c:
         ac:70:6d:2f:11:b5:5c:8b:60:ad:dd:cd:74:6d:a3:e8:f8:2f:
         19:a3:b4:cc:a2:dc:8a:8b:48:b4:a0:07:8a:4b:7c:6b:9d:b1:
         48:a9:00:b9:ae:cc:8b:1a:c4:52:59:a7:4c:69:a6:b1:c3:76:
         73:e9:c2:ff:32:47:18:11:33:40:88:42:11:60:44:3c:7d:e9:
         4e:f3:45:52:8b:e5:f4:68:5c:38:d3:9c:09:16:3c:2f:b2:74:
         7c:e3:7d:a4:35:04:86:b1:a1:f8:ba:d2:a0:9d:d0:af:a8:8c:
         6c:e4:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:44:49 2024 by rpki-client on console-ams.rpki-client.org