Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File:                     JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier:          BgNdu+wfDWVpm1gsHRHJEPE86m2OuFx2a+EerNwqg8A=
Subject key identifier:   B7:A1:29:93:10:57:4A:D5:09:27:72:F7:A9:77:BA:31:42:C2:10:32
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer:       /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial:       01923A02271A9C25FB11DC7B40D3C5EF3396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number:          126E
Signing time:             Sat 28 Sep 2024 19:01:12 +0000
Manifest this update:     Sat 28 Sep 2024 19:01:12 +0000
Manifest next update:     Sun 29 Sep 2024 19:01:12 +0000
Files and hashes:         1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: tze5XpB/rplYWjtkw84563abvUTiO/fOr3drRtCW/pM=)
                          2: t01_Z795Ev4hBhk_FFK1oMcZmcM.roa (hash: evV5VJUHGUyQXRSfYIf28XMGphKGLIjE30vIQEKhsMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:02:27:1a:9c:25:fb:11:dc:7b:40:d3:c5:ef:33:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
        Validity
            Not Before: Sep 28 19:01:12 2024 GMT
            Not After : Sep 29 19:01:12 2024 GMT
        Subject: CN=b7a1299310574ad5092772f7a977ba3142c21032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:1e:8c:d1:26:75:a7:92:f5:cf:95:1c:84:
                    4e:6a:ba:31:42:dd:45:52:82:25:cb:2f:d8:1b:93:
                    df:5e:d0:1a:ed:58:5f:f6:7e:34:18:02:0b:83:e1:
                    4b:f8:d9:fe:73:af:dd:ff:e8:b1:b2:98:69:88:6d:
                    2e:65:01:ff:8f:5c:d3:13:cc:d6:1b:a3:3b:6a:d4:
                    cd:9a:bc:98:6b:53:f2:65:e6:f0:63:1a:c0:73:47:
                    ab:17:3e:9d:60:b9:48:ae:08:a3:e6:14:01:08:95:
                    0c:13:4b:81:5f:22:ca:7d:32:21:be:83:fd:f7:49:
                    5d:62:b7:3f:6d:db:41:70:83:10:63:8e:b8:b8:bd:
                    73:23:f2:d2:11:79:af:9b:cc:0a:df:fa:c7:da:be:
                    b0:e9:73:f4:be:0f:03:03:c3:49:85:50:5a:f7:e5:
                    ca:ae:02:a1:4e:88:07:3d:13:4d:2d:69:4b:6a:96:
                    a4:e2:98:13:50:f6:d3:37:19:ca:b7:51:24:99:94:
                    a6:0b:38:2b:f1:e3:3f:d4:9d:25:40:52:0a:ed:6e:
                    55:e4:23:65:5a:e4:17:8b:e0:1d:7e:92:25:49:d2:
                    25:7d:0b:07:2e:f5:01:7d:4e:3b:65:40:f9:de:18:
                    cb:c0:c3:98:5a:39:62:8c:8a:46:a6:38:45:e0:dc:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A1:29:93:10:57:4A:D5:09:27:72:F7:A9:77:BA:31:42:C2:10:32
            X509v3 Authority Key Identifier:
                keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:86:2a:e7:93:f3:3d:e1:dd:d6:5c:d5:7b:44:d4:67:66:bd:
         8a:25:d5:e0:43:91:2f:bd:2b:ae:fa:74:d3:aa:c3:e7:f4:c7:
         9c:93:bd:74:ac:21:77:47:f4:d5:60:e8:ab:13:9c:a3:3f:8d:
         f1:22:6b:6c:5b:84:1e:1f:5a:f1:32:60:5e:c3:17:c5:50:bb:
         4a:2a:bc:2b:1f:05:2e:d2:0c:75:77:7f:a7:05:15:bf:e2:dc:
         50:ca:9d:87:d2:b4:47:24:0f:ac:b1:72:61:41:d2:b9:5d:4f:
         9d:e1:54:b2:6f:dd:ef:69:d7:fa:52:35:1d:6d:99:a6:42:06:
         14:7f:e5:81:03:1d:47:6d:49:9a:07:99:8f:65:a6:fa:94:07:
         c3:11:fc:27:d9:79:89:d4:3d:e4:cc:03:9e:7b:e8:1a:c6:c6:
         68:04:72:c5:70:93:d3:c9:37:3a:cc:c0:37:ad:e1:e6:32:0c:
         d7:7c:9a:db:16:48:7f:95:f6:72:8b:7c:8f:00:37:6c:bf:98:
         44:6e:04:d0:78:19:8c:0c:6a:45:a6:e5:e7:0a:ce:3e:fd:09:
         1a:66:85:c1:5b:85:39:d3:d1:5d:e4:2f:19:8b:cf:ac:dc:e2:
         01:6c:9f:d3:a6:eb:d0:cd:53:58:7f:88:86:44:d8:a4:9c:ad:
         fe:d9:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:02:36 2024 by rpki-client on console-ams.rpki-client.org