Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File:                     JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier:          Bp9d/DB67AHAU/JbvR37rZh+Wt8ygDQhtVy/7VVqkls=
Subject key identifier:   94:EF:75:31:6B:33:5B:F7:AB:C8:5F:85:09:CC:5A:3A:1F:09:63:8C
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer:       /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial:       019355E41AE6C850620859B3624DB51C355F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number:          1301
Signing time:             Fri 22 Nov 2024 22:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:32 +0000
Files and hashes:         1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: t8Ay8aHIu0ou79tNLopO41Rsw/yhUrBjaF1ScJ99yPA=)
                          2: t01_Z795Ev4hBhk_FFK1oMcZmcM.roa (hash: evV5VJUHGUyQXRSfYIf28XMGphKGLIjE30vIQEKhsMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:1a:e6:c8:50:62:08:59:b3:62:4d:b5:1c:35:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
        Validity
            Not Before: Nov 22 22:00:32 2024 GMT
            Not After : Nov 23 22:00:32 2024 GMT
        Subject: CN=94ef75316b335bf7abc85f8509cc5a3a1f09638c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:83:b9:92:93:8e:8d:01:94:63:56:7b:21:cd:
                    18:d2:b8:8a:16:9d:a0:fd:a8:ef:25:91:47:49:f7:
                    77:98:d0:2a:19:aa:7d:0e:f4:f2:fc:86:fa:a1:72:
                    fe:28:a7:2a:a3:fb:ca:84:59:86:c8:66:80:d8:50:
                    ae:06:d5:23:0f:51:e0:52:ce:c9:e1:af:93:2c:66:
                    65:30:e1:72:e5:6d:49:ba:5b:be:12:8b:ea:59:20:
                    19:7e:55:a3:cf:6a:e1:76:d6:1e:81:6a:0f:ec:07:
                    f6:8d:39:02:1b:7c:83:7e:b0:33:2f:aa:1e:22:25:
                    9f:e6:4c:99:43:ec:a5:ff:ad:a2:91:83:04:24:cf:
                    7b:8f:80:eb:db:2b:8a:d0:78:ab:f0:e0:aa:85:a9:
                    9e:ff:8a:93:30:fd:0c:c7:32:97:7a:0d:23:06:1e:
                    32:fa:a3:85:c7:17:14:f4:61:4a:3f:2e:ae:a1:f1:
                    04:f2:90:8a:dc:66:5a:c9:da:50:96:b1:cd:f9:dd:
                    8f:d1:90:f7:54:85:5c:10:4b:a1:66:f3:c4:de:4d:
                    be:21:11:c2:74:67:88:c0:82:a3:8d:2b:7b:8f:b1:
                    10:cb:b2:1e:64:29:f1:0c:c3:f5:2a:ce:9d:46:a7:
                    77:18:dc:a5:39:bb:22:c9:71:d4:34:16:5d:44:e8:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EF:75:31:6B:33:5B:F7:AB:C8:5F:85:09:CC:5A:3A:1F:09:63:8C
            X509v3 Authority Key Identifier:
                keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:97:60:01:8c:79:78:3a:da:22:37:65:5a:1b:cf:c8:64:
         cc:ec:f0:06:45:00:f7:c9:99:ce:49:b8:01:ea:bd:86:20:fc:
         f9:0a:0a:a9:db:9c:96:b0:8f:3d:78:72:74:7f:75:15:82:eb:
         ec:ad:6c:5c:cf:8e:fc:3d:2e:df:71:a5:d0:4a:3b:f2:13:cb:
         74:82:e9:f3:65:1b:7b:83:98:33:82:de:f8:9e:76:d3:3a:2d:
         f9:e8:1f:9c:45:c3:10:a2:54:18:bb:6d:eb:7f:42:51:62:a3:
         ac:81:b5:96:b8:af:74:d1:cf:8f:a4:69:0c:c5:dc:54:36:4f:
         98:34:d9:b9:13:17:5e:23:ad:92:5f:e5:42:fa:ac:f2:a1:df:
         76:2c:f2:a8:3b:05:4b:28:7c:ae:6b:e3:cc:f0:84:49:52:37:
         10:fc:7f:38:f6:c6:d8:c7:c4:c6:81:e0:3d:ff:db:40:9a:cd:
         dc:f5:eb:e0:0a:fe:2d:f6:32:74:f4:68:86:5a:d9:65:89:7b:
         f1:13:a7:b7:42:f2:c3:16:71:8a:73:cc:37:8b:58:ab:00:b8:
         04:11:f1:cc:88:59:17:e1:a3:c8:ee:9f:ef:cc:f1:66:4d:72:
         64:eb:5e:6b:c0:ae:10:29:ad:a2:f8:73:d6:71:86:e2:46:1f:
         ae:08:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:15 2024 by rpki-client on console-fra.rpki-client.org