Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          M0GJd20ZbUNZt/hmNOQsO38e6xOtjjVMh9bZZnK7U/c=
Subject key identifier:   F3:AF:C4:64:73:DA:27:26:67:3E:A9:EB:26:44:B1:03:A1:90:31:96
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       019052125E3A317AA98398F0AB9CED23EC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          11F6
Signing time:             Wed 26 Jun 2024 01:04:13 +0000
Manifest this update:     Wed 26 Jun 2024 01:04:13 +0000
Manifest next update:     Thu 27 Jun 2024 01:04:13 +0000
Files and hashes:         1: B0vcGrU2H1UrEQvxOUGn_vaEMgo.roa (hash: 77K46Xyl8N1IpWQcw5GnwgpcI9JLNsW3LfTNem2aI0U=)
                          2: VyPYm1URyKBFbzmD-t4F8CsfLWU.roa (hash: hv4G0HOjy3ChN68G5DFRNjGaZc0ZFeHK/d/4UqN+IKo=)
                          3: fY_Cmsg-vAGh-9yH8KZriq6IY3Q.roa (hash: J96sSaruwdZtgJfaOIhpZeNIVPE01sftOHU6PczgG6Q=)
                          4: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: iPUBVGxvYdG6+nDcMYcp9T2F+FPL63AuzAEcWSogHBo=)
                          5: suIrlCnWTsU2RHLrSHAbwF-QBxc.roa (hash: 0cTeUdQI6dizuOvZkcDyhKqN6+vPSYktQ1Chm7Sl3Ss=)
                          6: vwEKyMCc22Mw1IPFv4JIN5gxiHg.roa (hash: R0mDCfAwWj2upPgHWCcM3oJpfHiRikUVQIwGxlYkzrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:12:5e:3a:31:7a:a9:83:98:f0:ab:9c:ed:23:ec:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Jun 26 01:04:13 2024 GMT
            Not After : Jun 27 01:04:13 2024 GMT
        Subject: CN=f3afc46473da2726673ea9eb2644b103a1903196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:2c:83:b1:c6:58:55:5d:a4:fb:cb:7c:6a:
                    16:65:75:3c:47:f6:77:05:e2:a7:40:02:05:9a:e5:
                    99:60:b3:7a:50:5c:0f:05:f7:96:cc:4a:85:eb:84:
                    e7:6d:70:9e:be:cc:34:bd:7d:e8:67:28:43:1a:34:
                    ce:c1:d2:d5:db:8a:d7:a3:be:1b:83:28:39:c7:99:
                    d9:14:e2:1b:37:b7:82:88:2d:73:23:59:4f:0e:6c:
                    3c:d8:3a:94:24:9f:5b:c4:70:e2:e8:52:18:c7:66:
                    d0:c5:87:ed:3d:b1:f5:d1:54:53:c9:ee:b4:93:e8:
                    db:64:15:da:62:60:2d:20:1c:2a:33:8e:5b:18:16:
                    8e:39:ca:82:5a:37:16:af:10:8e:51:77:d1:87:30:
                    97:bc:86:20:27:43:e9:d3:30:fa:1a:75:34:4b:c3:
                    e2:3c:fc:97:01:7a:d7:df:59:79:b5:7c:f1:01:5b:
                    05:48:4c:09:b0:87:b3:18:3e:8e:cf:f9:6e:27:88:
                    01:57:d2:0c:2a:26:8e:d4:86:b1:c7:40:a4:8c:4c:
                    10:2f:15:0f:3e:97:ba:80:04:5a:41:e8:df:f7:9f:
                    5f:3a:26:29:8c:9b:f4:5e:a8:64:56:8c:99:2a:29:
                    28:d6:c0:72:33:a4:8f:2c:21:6f:79:68:3a:03:90:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:C4:64:73:DA:27:26:67:3E:A9:EB:26:44:B1:03:A1:90:31:96
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:28:9e:85:62:cb:58:0a:d6:38:ad:ec:1c:2d:c2:fd:06:a9:
         05:29:a1:95:8a:39:1f:42:e4:17:5e:29:6d:1e:bd:19:ff:28:
         b7:44:42:3a:cc:74:39:3d:75:b8:83:fe:eb:72:44:24:74:e8:
         07:84:22:fc:83:28:16:a2:10:b9:c8:f4:30:88:fd:f6:28:1d:
         d2:68:ce:4b:6c:2e:d1:3c:c9:fa:c1:94:e6:7d:c1:e2:6b:bc:
         8f:3c:93:c0:31:da:fe:5b:07:7c:0b:0d:0a:fa:e4:93:43:2d:
         d0:90:18:eb:70:f4:5e:7a:4d:18:7b:9d:bb:2d:18:fb:54:78:
         04:fc:17:2b:15:2f:75:ec:4f:61:22:ef:2d:07:30:e1:a2:a6:
         cf:51:d0:1a:00:6b:0d:cf:29:7b:50:c3:52:c3:e3:06:3b:82:
         dd:af:57:e1:cc:08:cd:85:1b:f8:02:3a:62:6d:64:0c:6f:fa:
         65:67:48:08:31:35:aa:fb:b3:37:ce:d3:4d:a3:89:3f:61:a0:
         e9:9b:59:eb:60:a7:34:34:90:e5:9a:c7:c2:df:e5:51:90:a6:
         43:68:2c:2b:9f:80:9a:ca:d0:43:6b:1a:05:f0:70:43:46:c0:
         c8:cc:de:8b:5d:93:8c:55:9f:bf:00:b8:a8:2e:0a:06:dc:59:
         2b:4f:1e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBSEl46MXqpg5jwq5ztI+xbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjQwNjI2MDEwNDEzWhcNMjQwNjI3MDEwNDEzWjAzMTEwLwYDVQQD
EyhmM2FmYzQ2NDczZGEyNzI2NjczZWE5ZWIyNjQ0YjEwM2ExOTAzMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5csg7HGWFVdpPvLfGoWZXU8R/Z3
BeKnQAIFmuWZYLN6UFwPBfeWzEqF64TnbXCevsw0vX3oZyhDGjTOwdLV24rXo74b
gyg5x5nZFOIbN7eCiC1zI1lPDmw82DqUJJ9bxHDi6FIYx2bQxYftPbH10VRTye60
k+jbZBXaYmAtIBwqM45bGBaOOcqCWjcWrxCOUXfRhzCXvIYgJ0Pp0zD6GnU0S8Pi
PPyXAXrX31l5tXzxAVsFSEwJsIezGD6Oz/luJ4gBV9IMKiaO1Iaxx0CkjEwQLxUP
Ppe6gARaQejf959fOiYpjJv0XqhkVoyZKiko1sByM6SPLCFveWg6A5BFHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOvxGRz2icmZz6p6yZEsQOhkDGWMB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5
LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyiehWLL
WArWOK3sHC3C/QapBSmhlYo5H0LkF14pbR69Gf8ot0RCOsx0OT11uIP+63JEJHTo
B4Qi/IMoFqIQucj0MIj99igd0mjOS2wu0TzJ+sGU5n3B4mu8jzyTwDHa/lsHfAsN
Cvrkk0Mt0JAY63D0XnpNGHuduy0Y+1R4BPwXKxUvdexPYSLvLQcw4aKmz1HQGgBr
Dc8pe1DDUsPjBjuC3a9X4cwIzYUb+AI6Ym1kDG/6ZWdICDE1qvuzN87TTaOJP2Gg
6ZtZ62CnNDSQ5ZrHwt/lUZCmQ2gsK5+AmsrQQ2saBfBwQ0bAyMzei12TjFWfvwC4
qC4KBtxZK08ehg==
-----END CERTIFICATE-----
Generated at Wed Jun 26 05:56:02 2024 by rpki-client on console-ams.rpki-client.org