Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File:                     jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier:          1G+sHaEft7OET2dcm6zNHQeUr3kY7q6kG3D9r/gjyt0=
Subject key identifier:   5D:81:6C:F4:54:A4:75:EA:93:37:50:17:C6:43:F1:37:E4:48:5A:F5
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer:       /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial:       019367EA974237F50F7E8A653A60198323E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number:          114E
Signing time:             Tue 26 Nov 2024 10:00:47 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:47 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:47 +0000
Files and hashes:         1: 0qnhdec3OZ27iXQx8sfwMl4UE8E.roa (hash: K1c/EkFgnEpI/LDtRJLuVgZ4x9K1o9+YolbAfgH8WwA=)
                          2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: vQ85xv9q5bITF2pBixoJGpHORXV5Oe2IUGY+TpgWFUg=)
                          3: rVu8OfKXpGICLiyECmcQc4i57Fw.roa (hash: 5nC9c71u1IBblqwkgE/j6ZMSuO0dAOAuYrW5y+9R5B4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:97:42:37:f5:0f:7e:8a:65:3a:60:19:83:23:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
        Validity
            Not Before: Nov 26 10:00:47 2024 GMT
            Not After : Nov 27 10:00:47 2024 GMT
        Subject: CN=5d816cf454a475ea93375017c643f137e4485af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:68:08:c4:1c:fb:9d:f1:36:2a:38:26:de:
                    b7:5a:93:60:bd:96:87:f0:80:b7:bd:87:91:01:02:
                    df:b6:2e:31:49:0c:86:b8:04:dc:4e:18:e9:28:8a:
                    d5:9d:f8:5e:45:eb:3c:13:bb:c1:a8:02:88:17:f3:
                    ba:ee:d0:c3:a5:75:d5:29:20:c6:5b:2f:8c:cd:97:
                    bc:78:0f:22:a7:60:e5:d1:8f:38:da:4b:90:b0:7a:
                    69:48:b1:02:13:31:de:bd:76:63:50:17:26:38:ad:
                    a8:5e:9e:ca:2f:3a:4d:bd:75:06:fe:7c:d3:1d:54:
                    06:a2:01:6b:75:80:68:ea:ac:24:ef:00:11:3f:37:
                    41:f8:a9:96:e2:5e:05:d0:94:5f:b7:a6:fd:bd:7e:
                    3a:cd:f2:a1:fd:43:e5:f1:ed:0f:c8:e4:56:85:e1:
                    93:60:9c:c9:36:e5:f1:db:3b:d9:39:eb:a5:63:f5:
                    1f:a5:a7:22:05:47:12:41:7f:27:2b:d8:c0:6a:24:
                    0a:fd:ec:ce:f8:84:89:fd:a6:3a:91:ff:e5:63:86:
                    52:8b:d8:d3:ea:6f:89:39:6c:48:04:e6:79:15:23:
                    84:0e:9f:34:89:dc:04:1a:df:5a:94:00:2b:d9:c6:
                    0a:0c:d7:c7:41:be:ed:63:3b:ca:52:8f:91:a1:a3:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:6C:F4:54:A4:75:EA:93:37:50:17:C6:43:F1:37:E4:48:5A:F5
            X509v3 Authority Key Identifier:
                keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:da:75:d2:c5:38:dc:0a:2e:0b:e7:54:6a:c5:4d:4a:a7:
         61:ac:61:25:71:d3:22:b2:31:f8:04:19:e1:16:a9:be:ad:79:
         1d:47:37:20:31:93:7f:0e:b8:89:ac:00:99:03:51:ba:22:7f:
         39:b8:17:86:ad:95:6e:ad:19:45:73:39:46:d8:1a:f3:76:d2:
         2f:08:7c:29:0c:ae:08:be:d7:a0:6b:eb:bf:d8:de:e7:0b:29:
         6a:96:3f:91:1f:52:ee:b6:c5:46:05:d8:da:dc:5f:8d:fa:3e:
         11:65:b9:92:6b:12:3d:bc:77:3c:c0:23:6f:dd:c3:bd:73:08:
         53:2a:5f:bf:6a:d6:fb:5a:2b:b0:13:7f:05:39:39:a0:63:b2:
         f4:c1:5a:81:12:8e:a4:63:1d:16:8d:23:5a:b5:c8:d1:23:fa:
         92:dc:ef:87:59:d7:2d:29:f7:41:02:07:86:a4:d3:cd:1a:34:
         3d:5f:46:ee:d8:4a:6a:12:e2:c6:b8:59:ac:fd:a6:5b:8c:65:
         b5:78:1e:a0:d5:2e:82:ad:69:13:87:62:56:2b:af:87:fd:ee:
         b1:13:8a:d8:6f:45:12:0e:53:50:89:c3:ec:f0:33:ef:3c:b1:
         8e:95:cf:ed:b5:d7:c4:9a:f6:76:23:3e:94:50:40:5a:08:4d:
         76:eb:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:31 2024 by rpki-client on console-fra.rpki-client.org