Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
File:                     JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft (raw, json)
Hash identifier:          V8ud0U5L51VUzSjDvilCaZf73NYQp4xi5gtBkFwD1uc=
Subject key identifier:   75:DE:10:3D:BF:C3:A7:58:D0:FF:1C:A0:82:FC:B7:FB:39:A0:C2:BC
Authority key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Certificate issuer:       /CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Certificate serial:       018F86A3614884AF7BA49E92A9BEADEB57A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
Manifest number:          0188
Signing time:             Fri 17 May 2024 13:00:05 +0000
Manifest this update:     Fri 17 May 2024 13:00:05 +0000
Manifest next update:     Sat 18 May 2024 13:00:05 +0000
Files and hashes:         1: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl (hash: c35YO9sK79E1AOMGEyoz4pJt/NSe01ll6OOItBDRbR0=)
                          2: sxOFH4MOBGXtcvWAh6J2OV0WdEw.roa (hash: aKN6bay7mqmSDZAiQTj84pTwFHi4EARHsCazqSfnyHg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:61:48:84:af:7b:a4:9e:92:a9:be:ad:eb:57:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
        Validity
            Not Before: May 17 13:00:05 2024 GMT
            Not After : May 18 13:00:05 2024 GMT
        Subject: CN=75de103dbfc3a758d0ff1ca082fcb7fb39a0c2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:b8:0a:95:d3:07:82:09:0c:ab:bb:f9:b4:
                    a5:e0:c3:e6:eb:f3:33:f3:d9:97:68:4c:50:f0:95:
                    35:88:ed:32:f8:9a:fd:cf:e6:90:cd:27:b9:62:50:
                    c5:dd:e6:21:53:46:2f:de:6c:82:2c:57:81:a3:50:
                    44:05:db:77:9f:f7:aa:42:d9:d4:fd:fb:49:67:71:
                    2d:73:e5:11:78:a2:a4:9b:cb:6c:eb:7d:18:ad:30:
                    d6:58:71:d0:02:7b:56:bc:a4:70:68:80:c8:08:18:
                    b5:f1:ef:9d:1a:f6:b3:e2:91:17:52:bf:5c:79:2f:
                    37:44:5b:7a:64:ba:92:d8:fa:9b:e0:4b:06:be:3e:
                    05:76:b8:1f:a2:03:fe:b2:7c:f5:6a:12:9a:a0:74:
                    77:00:42:9b:10:15:e9:fb:c1:82:4d:d6:b6:cc:2e:
                    0d:07:37:05:f7:6d:50:c5:b9:c3:74:f2:dd:05:58:
                    82:c9:bb:8f:59:1e:1b:e1:1a:e4:09:49:2c:72:81:
                    f3:bf:73:24:a3:29:35:b5:8a:9f:31:46:ae:84:07:
                    c5:80:71:71:1e:84:d6:d1:b0:85:4d:1f:bb:b9:ad:
                    50:d4:54:38:cd:62:69:dd:64:8a:0e:d7:7d:c7:d0:
                    47:d9:cb:e2:3a:9e:2a:25:17:8f:b2:2c:ce:82:50:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DE:10:3D:BF:C3:A7:58:D0:FF:1C:A0:82:FC:B7:FB:39:A0:C2:BC
            X509v3 Authority Key Identifier:
                keyid:25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:74:82:74:60:35:a1:0a:fc:c7:61:53:71:1e:9b:95:be:51:
         f8:0c:52:ad:70:c2:8c:ce:ba:c8:f8:05:f0:8e:06:1f:46:ff:
         c7:4e:cd:9c:00:ab:a6:b8:07:39:ae:52:f0:03:b8:a1:44:97:
         12:a7:fa:e4:df:e7:c1:df:ca:2d:29:13:e6:28:af:f5:ab:35:
         d2:33:42:4e:5f:18:df:5f:26:8b:f2:21:8a:32:d7:67:90:a9:
         35:f8:5f:5a:ef:9e:dd:9f:40:6c:86:36:e1:41:76:6e:52:cd:
         48:ee:b6:94:bb:58:6e:41:e9:64:39:47:4c:89:75:2d:a4:64:
         7b:64:79:de:eb:f6:c3:be:2d:e0:3d:eb:ba:9d:b8:b0:03:3a:
         a2:c4:73:a0:b4:f1:36:b1:e7:ec:8f:f9:25:07:71:09:c1:14:
         57:53:15:2b:1d:97:7d:c4:f5:f5:4f:32:95:1e:03:3e:ab:25:
         c5:77:46:0c:e0:ed:4a:3a:ec:16:1c:a9:f9:59:7c:d2:31:17:
         b4:0d:5f:f6:01:4b:37:73:75:24:93:c6:52:6c:a0:c5:a5:53:
         7f:d9:64:e1:73:db:b1:0d:91:40:86:44:2d:e1:c7:3a:72:99:
         97:c6:6e:67:0b:1d:ea:17:77:52:41:95:8f:65:da:5a:a1:05:
         b5:34:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:17 2024 by rpki-client on console-fra.rpki-client.org