Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File:                     JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier:          joOQjjIjf8J9lleBTjkAW7FKcclxnC0djzBZpWAacIw=
Subject key identifier:   3C:09:C7:68:7F:6A:9E:BB:18:5D:3B:67:89:92:F4:C0:92:1C:17:D8
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer:       /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial:       018F874897CF975DAA8292AC1064F849DFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number:          0F53
Signing time:             Fri 17 May 2024 16:00:32 +0000
Manifest this update:     Fri 17 May 2024 16:00:32 +0000
Manifest next update:     Sat 18 May 2024 16:00:32 +0000
Files and hashes:         1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: pI+h6QtRrikZoXtpoJU/UGUq/r7OfV+gYzOJUX9Nzpc=)
                          2: ruR1cmgxv8mG1ibDsgNJsH81mPQ.roa (hash: o78XDnodcDNCcNQ9oGG61HBkWVEx+zihFeqQ9rLWC8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:97:cf:97:5d:aa:82:92:ac:10:64:f8:49:df:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
        Validity
            Not Before: May 17 16:00:32 2024 GMT
            Not After : May 18 16:00:32 2024 GMT
        Subject: CN=3c09c7687f6a9ebb185d3b678992f4c0921c17d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:3d:83:45:2a:64:4c:8a:ce:f4:82:82:7b:
                    5e:73:6f:93:4b:08:72:26:76:0a:99:05:55:93:c2:
                    8e:31:67:45:2b:f6:1b:ba:a2:14:20:7e:2a:6d:79:
                    a7:6f:8c:96:dc:35:e0:52:da:07:dc:67:8c:fa:bc:
                    d3:b2:86:0b:05:bf:71:06:a6:56:56:48:6c:07:fc:
                    38:bd:e0:07:5e:50:67:93:06:0a:25:16:e5:66:5a:
                    28:0a:0c:0e:37:4a:b9:19:c1:ea:20:f3:17:ba:e0:
                    08:da:fd:04:c8:e6:55:20:f8:4f:ea:6b:32:38:8e:
                    09:ad:a9:6c:62:39:aa:60:72:0e:6f:d7:61:eb:ca:
                    08:13:d8:9b:0c:54:33:14:a0:14:d5:a5:10:3d:6b:
                    ac:c7:09:c8:08:97:f5:3a:02:bd:06:3a:3f:6f:ac:
                    fc:a9:a1:c7:34:50:2c:cb:ad:1e:e9:f2:5e:d3:d5:
                    bc:bd:35:2a:ef:2d:79:d2:dd:4c:c6:1c:0f:8e:20:
                    dd:ca:1f:26:4a:3b:3a:53:d7:a1:53:66:5d:76:a8:
                    5a:9c:79:bd:e6:66:4c:b2:14:15:ba:6b:72:fe:20:
                    21:35:af:5f:50:82:2f:5b:84:2a:8e:1e:1e:b0:80:
                    07:ce:93:be:64:5a:22:f4:fa:8a:a8:41:d9:89:bf:
                    66:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:09:C7:68:7F:6A:9E:BB:18:5D:3B:67:89:92:F4:C0:92:1C:17:D8
            X509v3 Authority Key Identifier:
                keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:de:98:64:23:d4:c9:b3:2c:5f:18:a7:8d:42:84:f0:ea:d6:
         c4:f0:76:ee:d3:fe:4d:77:34:d2:38:93:cf:b3:fa:00:5c:b6:
         cb:dd:25:14:85:b0:9c:ba:24:89:5a:77:e7:87:12:8f:1d:9f:
         c0:4d:42:86:9d:63:72:f4:e5:be:6a:17:fa:0c:dc:b9:3f:a7:
         d6:61:05:80:d3:4f:04:9e:6c:58:3f:eb:2b:50:ce:92:90:e1:
         09:b8:9c:39:9c:7f:0b:15:f7:ac:18:7b:fa:3f:f0:cf:74:0a:
         f1:a8:e2:2a:51:8f:65:e5:f6:34:5f:bc:c3:3f:15:3d:1e:a7:
         93:1c:e9:c8:10:74:52:b8:af:02:ed:82:b1:2e:7f:e6:82:06:
         e5:e0:14:4c:c0:34:ca:0e:94:a3:25:a4:2c:3a:0a:6a:60:be:
         d6:f2:01:96:42:5e:72:d9:55:bc:96:d9:2c:05:c5:fc:ef:54:
         3c:7b:0a:62:27:f0:b8:64:32:78:3d:5b:24:d4:2d:bf:d1:47:
         15:15:d3:4e:bc:1e:33:00:a7:ba:c2:ab:eb:8e:5f:00:b6:fc:
         ff:32:8f:15:5f:1e:3f:4e:67:e0:02:62:fd:7c:92:01:5a:67:
         06:55:a3:6d:04:7b:3b:0e:a3:ec:09:42:95:f7:1c:5c:49:df:
         9c:fe:67:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:20 2024 by rpki-client on console-fra.rpki-client.org