Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File:                     rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier:          dLJ4yQEu5noQinSySTVDvRxGVxq7O/UiXPyyZLDUeG4=
Subject key identifier:   4D:BC:5C:B3:C7:7E:BF:8B:84:11:36:39:A4:56:76:0A:34:B8:9D:FA
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer:       /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial:       01938C9BD52A4ECC662971E71012918B93B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number:          087E
Signing time:             Tue 03 Dec 2024 13:00:43 +0000
Manifest this update:     Tue 03 Dec 2024 13:00:43 +0000
Manifest next update:     Wed 04 Dec 2024 13:00:43 +0000
Files and hashes:         1: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: tnvW3gJ+oEPeZfbGkk8wkwUJz01ixP8cwvVGoGHrz0Q=)
                          2: ydSpSmVctt-PTc3WJS01NCnPbsw.roa (hash: UGRZxn469rFBXXtnWA2IhhVe1zHxCZT+BU6CNI4U/O0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9b:d5:2a:4e:cc:66:29:71:e7:10:12:91:8b:93:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
        Validity
            Not Before: Dec  3 13:00:43 2024 GMT
            Not After : Dec  4 13:00:43 2024 GMT
        Subject: CN=4dbc5cb3c77ebf8b84113639a456760a34b89dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:52:21:52:0d:6a:cc:3b:2f:04:37:67:6f:
                    6f:41:70:59:9b:73:f9:b9:be:dc:02:9b:e6:bb:59:
                    f0:8c:7c:64:45:d5:c8:5e:e0:65:20:13:59:3c:a6:
                    75:ac:0a:c8:41:fb:ff:b8:86:db:95:63:67:c6:42:
                    32:be:d0:93:11:f6:04:cd:02:32:4f:40:3f:49:2c:
                    da:3a:37:b4:f9:91:64:a9:bf:25:02:3e:56:58:b9:
                    e9:7e:c3:6e:55:21:16:f2:1d:37:e0:f9:27:04:4f:
                    81:46:e5:5e:9c:6e:8b:78:63:bb:88:31:d4:cc:2c:
                    b1:c3:fe:91:75:d0:29:46:6e:cc:55:ae:4e:e6:9d:
                    b9:91:27:57:00:b0:1b:e5:a7:42:04:39:94:a1:08:
                    b6:79:75:e7:e2:3e:40:45:06:7d:00:0f:7d:18:29:
                    2e:ae:53:1d:bf:06:c1:ff:dd:40:2d:4d:71:29:8a:
                    8f:3b:fa:8d:7f:8f:4d:2c:03:09:dd:c0:24:e3:9a:
                    7c:3c:52:62:13:e9:21:83:52:a0:81:8e:4b:c1:a5:
                    2c:bd:a7:02:2b:26:e3:5d:86:71:82:17:14:ae:fc:
                    9c:5b:e8:43:05:3f:1f:c1:46:ab:75:f1:59:33:fc:
                    be:eb:49:4b:bd:31:a1:2e:97:bc:41:d4:04:c2:d1:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BC:5C:B3:C7:7E:BF:8B:84:11:36:39:A4:56:76:0A:34:B8:9D:FA
            X509v3 Authority Key Identifier:
                keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:55:22:14:f3:e8:70:af:5d:c0:a4:46:9c:58:a2:93:ac:38:
         10:f1:cd:47:26:bd:78:80:cc:d0:43:0c:73:b8:2b:cd:4c:10:
         24:fa:9c:e6:f8:6a:75:d3:e1:3f:16:ac:12:91:2b:8d:5e:4c:
         48:06:a2:17:05:04:6c:e8:04:02:ef:b4:2c:f1:e2:5a:0a:f7:
         3c:16:2a:e9:74:cd:f3:c4:66:6e:18:8c:34:dc:18:df:c4:df:
         3b:81:33:65:00:4c:47:a2:75:a2:e0:c1:1a:4e:3d:67:0c:9f:
         09:a0:d1:73:7e:a3:84:b2:63:ff:7d:c9:75:60:c8:50:11:1d:
         9b:b9:e8:ce:6c:53:b4:f1:d7:8a:04:d3:08:c1:6f:3d:9e:bd:
         1b:5e:cf:b6:9b:a0:7c:46:eb:03:22:5f:a5:0c:c3:2d:79:25:
         c2:e6:47:3e:a1:f1:bb:6d:24:a4:80:cc:bf:d7:24:17:bf:8a:
         d3:41:fd:35:32:44:6d:e9:7e:bc:3f:8c:d3:4b:f2:82:b4:1b:
         8a:63:f4:5f:38:fb:8e:c5:ce:52:6f:7d:7e:5e:63:d6:1c:4f:
         d8:dc:0e:11:d0:33:c0:4c:17:22:fd:e8:f5:e5:80:a2:52:f1:
         34:57:8f:b5:9e:6d:a5:73:0b:b5:19:e6:3f:7a:7b:52:1a:fd:
         59:80:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:59:46 2024 by rpki-client on console-fra.rpki-client.org