Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File:                     jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier:          JkBDH18ZBiZLaW1TSkSqBuuZGBM8YWHnyJtYD459sfQ=
Subject key identifier:   08:B1:8D:CE:BD:8D:CC:03:0C:30:B5:6E:2F:A5:5C:5B:8E:E4:82:BE
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer:       /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial:       019359C10873491083E7BA13FFCFADB4279E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number:          12C3
Signing time:             Sat 23 Nov 2024 16:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:42 +0000
Files and hashes:         1: Wgf1Uhful_sVgvW6fXjyo9VE8NU.roa (hash: yeMCd7mZ3oBw8SrYT70d2L8hBeH26OXfW+wspR8a1Ew=)
                          2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: XfbZnBqqVrJzJPZGQc/o9q6NHU2cdvxP7JYw4Fgfu0I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:08:73:49:10:83:e7:ba:13:ff:cf:ad:b4:27:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
        Validity
            Not Before: Nov 23 16:00:42 2024 GMT
            Not After : Nov 24 16:00:42 2024 GMT
        Subject: CN=08b18dcebd8dcc030c30b56e2fa55c5b8ee482be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:97:a5:b4:33:07:d4:e2:e7:8c:02:68:70:
                    58:4b:19:f5:65:2e:39:31:0b:36:b2:d9:0c:cf:52:
                    13:37:05:e4:0f:24:ca:41:89:bf:24:69:31:05:90:
                    0a:bd:59:44:85:11:2d:90:9a:7b:ed:7b:48:a9:62:
                    6a:6d:95:58:63:58:9e:f8:a4:44:c0:0f:05:60:1a:
                    be:01:b2:99:e0:f5:32:1e:57:35:a2:06:7e:ea:c4:
                    eb:b9:5a:1c:17:d6:02:29:97:34:01:75:6c:f7:f6:
                    19:f7:50:d9:55:89:01:f9:7e:22:08:f8:df:b4:8d:
                    94:17:5b:f8:eb:ef:6e:20:e0:89:69:6d:df:e1:16:
                    78:c2:ea:b0:3a:c6:5b:64:63:26:ad:20:b8:4c:ac:
                    7b:dd:a4:37:2d:9b:fb:16:63:4b:93:d6:1b:f0:35:
                    da:52:ea:2d:a0:80:21:79:d6:86:a3:3b:97:25:a4:
                    fc:49:12:ba:1c:d7:db:7d:a5:69:46:57:b3:a4:5f:
                    78:ed:69:13:ef:12:d1:06:6f:4c:42:95:0c:ed:57:
                    83:a5:63:e4:1a:0f:f8:fb:c5:ac:3d:ac:5a:bc:f9:
                    12:bf:a4:1b:36:03:bf:e0:06:cb:d9:23:61:c4:71:
                    1f:37:97:60:e2:cd:6c:ba:f9:a1:c7:bc:93:4a:9e:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B1:8D:CE:BD:8D:CC:03:0C:30:B5:6E:2F:A5:5C:5B:8E:E4:82:BE
            X509v3 Authority Key Identifier:
                keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d2:5b:b7:6a:5d:f0:43:8c:f9:31:c3:1c:d8:22:40:96:4b:
         ab:90:f1:17:51:e5:1c:2d:e9:04:82:ce:9a:13:95:f9:7c:55:
         3a:a5:6a:3a:e9:52:f0:6e:a9:51:f6:20:a1:5b:41:66:53:2d:
         69:b5:c6:98:9e:0b:d5:ab:2e:cc:3d:99:6e:33:90:4a:b5:31:
         e9:7d:73:5c:90:5d:37:ec:cb:2a:b8:42:54:a4:88:c2:90:be:
         06:39:98:70:de:26:7c:b3:e1:56:12:b3:3c:ca:25:d9:79:bd:
         9d:7b:cb:89:88:7b:1b:be:e4:f3:b8:29:ef:0b:95:d0:15:c4:
         46:a3:23:36:e6:2b:ba:a8:0f:fb:ca:35:94:86:1f:69:7e:d1:
         c1:dd:82:be:30:d2:3c:fb:1d:68:7a:5a:c4:78:2e:92:3a:a8:
         7d:e7:67:5a:7f:e6:e9:75:05:48:b0:7e:13:96:42:76:28:2c:
         ad:d5:1f:bd:30:f2:22:e6:af:c6:ea:71:5c:ae:ea:0c:3e:2e:
         98:a3:70:ca:c9:f7:ec:b4:1c:d3:fc:c4:70:7c:8f:bb:8b:5b:
         02:9e:e9:ab:89:f1:f3:d3:b6:0f:fa:2c:39:2f:d6:29:29:35:
         cc:09:6c:58:cf:6a:d4:80:1c:df:f4:9c:f5:e0:99:78:a2:14:
         af:16:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:53 2024 by rpki-client on console-fra.rpki-client.org