Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File:                     JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier:          A1+8GlyF8dEruP7k60kdnKgkZ1C2kesD4b3QEf2K2rc=
Subject key identifier:   75:FE:65:A5:6B:9B:A6:64:49:E3:D9:03:23:D2:E8:49:B4:C2:19:57
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer:       /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial:       018F8936D4C5EDD8251C5B9EEABB44A68A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 01:00:23 +0000
Manifest this update:     Sat 18 May 2024 01:00:23 +0000
Manifest next update:     Sun 19 May 2024 01:00:23 +0000
Files and hashes:         1: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: Q4Dv4CPgym+mmaV/TCNFNsZ1Slvvt8JdjJLZgMqkCCM=)
                          2: aglq9I0g630_CdbhbJjlpOENYFk.roa (hash: lPWjCAyTG33FG/AmgW1+PdR+T5F2XfXvNUb/6sKbgLg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:d4:c5:ed:d8:25:1c:5b:9e:ea:bb:44:a6:8a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
        Validity
            Not Before: May 18 01:00:23 2024 GMT
            Not After : May 19 01:00:23 2024 GMT
        Subject: CN=75fe65a56b9ba66449e3d90323d2e849b4c21957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:9f:f1:d9:c8:a8:63:86:8c:d1:08:09:bc:
                    23:9e:e3:c5:c9:25:c2:48:e2:df:b3:02:45:85:ac:
                    7c:b4:d6:7a:7e:33:b7:5b:9a:8b:7a:f4:cb:3e:11:
                    5a:c1:b9:3d:76:1e:b3:e1:00:e6:37:60:27:d8:f2:
                    1e:3f:ce:06:6a:7f:ff:01:59:a0:fa:16:ae:76:51:
                    db:20:a0:20:ad:e0:e0:0d:3e:f3:0c:1c:1f:1c:5c:
                    36:ce:9a:dc:50:5f:d9:45:67:b5:30:15:1a:7d:c4:
                    20:de:f0:7f:ce:50:92:47:45:97:8e:04:24:c2:36:
                    78:69:0f:3a:c7:3c:b7:80:b5:00:90:6a:c0:c8:45:
                    26:80:58:5c:90:7a:39:87:1a:e1:8c:f0:ad:a2:fb:
                    dd:f0:58:8b:1d:89:fd:94:10:65:30:04:42:43:b0:
                    d0:c9:81:31:c6:6e:a2:91:25:1f:bb:80:cd:42:7b:
                    d1:dc:ed:c5:91:bb:dc:f2:a6:a2:dc:4b:b5:d8:6d:
                    bf:c2:13:2c:a4:3a:48:0c:8f:5c:7f:74:cb:7a:22:
                    73:eb:10:8e:1e:ff:b2:bc:d1:04:e4:97:ec:17:db:
                    17:8d:4e:1b:56:d6:27:a7:ac:61:b8:f6:5f:a4:a5:
                    75:94:f1:92:10:a5:54:55:1d:d0:60:22:cf:e4:51:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:65:A5:6B:9B:A6:64:49:E3:D9:03:23:D2:E8:49:B4:C2:19:57
            X509v3 Authority Key Identifier:
                keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:08:0d:0f:4a:44:19:be:66:11:cc:8a:be:fc:07:62:ab:a2:
         0a:19:87:12:17:dc:02:33:00:fc:b8:d7:c9:2e:ad:e9:93:5f:
         d0:8f:c6:d6:12:15:93:fa:3b:bb:53:01:da:fb:c2:8a:1d:bd:
         46:7b:44:ca:8f:2b:44:08:35:da:d0:0f:c3:80:28:81:3b:ba:
         52:06:8c:d4:82:05:a3:67:9d:32:f8:7f:1e:20:9a:48:10:d1:
         d7:7f:47:d2:c9:1b:cb:d6:08:49:57:c7:68:aa:4e:aa:b1:ed:
         8f:9f:f8:8d:50:d0:89:c7:9d:5c:c5:3d:b5:88:11:e2:48:44:
         1f:88:46:52:a5:3d:41:71:45:12:49:7c:a0:74:8f:5b:b8:11:
         48:06:9b:cd:d3:39:40:e3:7f:37:88:33:23:9a:5e:fd:9f:20:
         fc:9d:54:e4:73:a1:0d:0b:d1:42:f7:b6:69:9b:42:c6:62:9d:
         bf:37:56:c4:b7:4a:90:80:2b:89:a4:bb:83:d4:95:cc:14:d6:
         0f:42:5f:7e:95:f2:b1:17:af:f3:6a:8f:09:0d:e2:f1:1a:00:
         80:da:c2:84:b5:f8:4f:64:51:98:7f:8e:80:e1:3a:ec:21:80:
         b1:d8:f2:0a:b7:eb:e0:1f:7b:fe:be:9f:b5:e9:ff:34:b8:12:
         02:1c:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:45:41 2024 by rpki-client on console-fra.rpki-client.org