Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File:                     jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier:          xkAdLu3OvM1KJot7sXp7kT80RLPyayabRBBm1pEiwvI=
Subject key identifier:   4A:4B:56:57:9B:4B:8B:98:25:5C:24:4C:B0:93:9C:28:8B:EB:95:38
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       018F8748F497A20F91CF91D8C6DF3B143057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number:          0D5C
Signing time:             Fri 17 May 2024 16:00:56 +0000
Manifest this update:     Fri 17 May 2024 16:00:56 +0000
Manifest next update:     Sat 18 May 2024 16:00:56 +0000
Files and hashes:         1: QmloTwHmKmhH5yTgs5RYG5We5V0.roa (hash: SDb4w6Xih9Jc30muPCmHxCC2JvDjlGQ8i3Yn58XL+7U=)
                          2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: XzF8ToDHIr9gdpCZOH2LyEzneEk1JeFfWqseFVtZDd8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f4:97:a2:0f:91:cf:91:d8:c6:df:3b:14:30:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: May 17 16:00:56 2024 GMT
            Not After : May 18 16:00:56 2024 GMT
        Subject: CN=4a4b56579b4b8b98255c244cb0939c288beb9538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:62:b5:3f:d8:be:be:ef:62:c3:87:13:e4:
                    4a:8a:0c:cc:41:0f:54:6d:ad:ab:6b:58:1e:62:ac:
                    c3:73:ab:4a:3c:79:eb:9c:9b:35:74:f7:df:06:7f:
                    55:d7:ed:53:97:a1:58:34:dd:f2:bf:47:32:b5:14:
                    7f:48:61:2b:a4:0d:b1:de:27:cb:71:b8:e1:b3:68:
                    f7:45:8c:8b:7d:07:46:7e:aa:ce:53:cd:87:de:c9:
                    1b:88:8d:a9:62:3e:b1:84:60:a2:74:5e:b3:db:a0:
                    ca:a8:a3:2a:bb:7e:91:f1:ec:4c:ba:01:1a:88:eb:
                    dc:1d:2d:be:90:e0:da:1b:0f:37:27:56:52:58:31:
                    f0:45:9c:a3:8f:c2:30:b5:b9:96:93:3c:84:85:f5:
                    6b:e4:f2:06:35:40:44:61:77:b7:7a:38:68:42:04:
                    ce:39:e9:c1:ca:82:e9:14:da:5f:dd:f8:a0:b7:20:
                    57:02:2e:6e:9e:57:28:bd:a4:50:01:90:b6:70:8f:
                    d6:2f:f5:67:ee:19:0e:9b:a0:62:7e:51:91:fd:2b:
                    1d:d0:95:16:1c:af:72:3b:d1:94:eb:43:55:a6:74:
                    9b:f0:08:56:65:78:cb:20:4c:bc:27:33:75:7f:fa:
                    79:4b:cc:34:89:cc:f2:b1:34:d9:56:4a:ab:cf:19:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4B:56:57:9B:4B:8B:98:25:5C:24:4C:B0:93:9C:28:8B:EB:95:38
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:48:2e:9f:42:ff:1a:66:b2:b3:aa:c9:54:f7:03:4f:a3:00:
         fd:31:5a:1f:17:d9:a8:db:76:c6:8f:9c:95:d3:b7:84:87:c6:
         2c:6b:32:f7:ff:cf:58:07:08:3b:12:26:49:40:2b:ff:4c:14:
         75:57:86:32:92:51:2b:16:db:d6:f3:47:81:81:11:ce:83:e5:
         9a:9e:6a:62:2d:6f:18:f2:3a:ab:3b:9d:ab:47:5e:52:c3:e1:
         93:51:c1:32:1c:b4:7b:1e:b7:a3:b3:28:07:f3:b0:6b:0d:98:
         fd:4a:3b:b0:d9:38:88:30:59:70:75:53:96:10:9b:ee:e9:48:
         d5:d1:bb:65:f4:6a:36:e6:40:8c:87:ca:fc:62:7a:fa:c9:21:
         e6:ee:55:5e:0d:79:a1:8e:ff:3d:48:b3:ca:3f:6a:9a:c3:77:
         d9:e2:54:17:8b:65:eb:a1:3d:4c:85:d7:ef:ed:c4:c4:75:7b:
         06:be:6a:ac:35:fb:4e:c1:dd:b7:63:de:26:d7:c0:9a:5b:72:
         40:8c:ad:21:0e:0e:08:4e:4b:fb:0c:ea:d5:15:7a:c0:db:5c:
         2b:fb:d8:c8:38:52:84:be:d0:39:ed:7c:5d:a7:33:93:f2:30:
         2e:c4:1b:a9:63:1d:9b:9c:3d:a9:f3:ee:8c:b8:cf:c7:b7:86:
         32:45:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:51 2024 by rpki-client on console-fra.rpki-client.org