Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File:                     JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier:          v48oM1bULn7z6AhvMX/zThBservUNtUh00MaA0/9M5A=
Subject key identifier:   30:49:70:CC:D1:88:21:BF:27:F7:09:6F:DD:B0:FD:A4:1E:90:0C:72
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer:       /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial:       018F866CF0893934EFAC34E620710354F088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number:          05E3
Signing time:             Fri 17 May 2024 12:00:37 +0000
Manifest this update:     Fri 17 May 2024 12:00:37 +0000
Manifest next update:     Sat 18 May 2024 12:00:37 +0000
Files and hashes:         1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: N5u4v5Cc96HzaOIUQYFuuXAMsCRlfqNTTgDd6hrCl4Q=)
                          2: UDsd-nYuojLeMIqeKUBvx64B-Sg.roa (hash: WmAT9FKjL1re7ZQ7UcMARP2aMS5fc8xf6zB8BKE8oIs=)
                          3: ra9RJ4mce06tEeZrkRFX0w-6-9o.roa (hash: kxXx7hQNUXaCnUSOIGYH7nteRrpwa6yF1r+3xgVxT4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:f0:89:39:34:ef:ac:34:e6:20:71:03:54:f0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
        Validity
            Not Before: May 17 12:00:37 2024 GMT
            Not After : May 18 12:00:37 2024 GMT
        Subject: CN=304970ccd18821bf27f7096fddb0fda41e900c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:16:5b:27:0c:46:83:69:c9:f7:e6:00:72:
                    17:4a:21:45:a5:0b:ba:ba:54:f9:67:2d:8d:32:a2:
                    89:eb:37:0a:74:c9:a4:50:61:fd:79:ec:05:e8:59:
                    f0:a5:45:d7:f1:1f:4c:5c:0e:60:0d:3b:5d:55:5d:
                    11:f2:a4:e8:5d:e4:07:14:31:9d:10:9f:5e:e9:6d:
                    db:78:e0:48:12:d0:19:e1:2a:c4:af:b2:47:65:fb:
                    d3:75:65:c1:be:d3:b7:0d:ff:84:8e:92:29:f1:c6:
                    68:ef:9d:ba:8b:60:68:59:ee:52:df:19:5e:c2:64:
                    dd:ea:79:8b:54:69:74:13:0c:06:1e:ad:b6:70:36:
                    cc:5d:00:34:a2:06:2e:47:16:ab:14:27:5e:05:5a:
                    3b:ad:eb:18:a1:6e:36:91:80:5d:bc:e5:5d:98:4a:
                    76:8d:b1:41:39:e2:ba:07:bc:19:09:78:2a:fd:42:
                    21:55:a7:71:de:95:fc:6b:66:00:40:49:87:02:c5:
                    72:b2:59:fd:c0:5e:af:04:7b:82:22:f4:32:0a:ce:
                    0f:80:13:59:3d:a3:1b:37:94:55:8f:2d:98:f0:cc:
                    c7:d1:3a:f2:6d:fd:c2:9f:8f:e3:36:aa:11:40:2b:
                    04:c1:f7:24:98:d1:e0:e5:d3:9f:ea:28:88:22:da:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:49:70:CC:D1:88:21:BF:27:F7:09:6F:DD:B0:FD:A4:1E:90:0C:72
            X509v3 Authority Key Identifier:
                keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:20:a6:d3:0c:0f:d2:8d:04:a4:b2:97:46:8d:2e:57:b5:64:
         32:c4:f3:35:0f:26:ab:10:70:b3:3f:37:2c:97:b7:e5:f7:07:
         0f:24:86:f1:6e:3e:ec:4a:d3:9c:e2:27:ea:1c:93:ac:fc:ee:
         f0:17:71:3c:bb:59:63:a7:fd:eb:11:f2:8d:fa:c3:f5:a0:53:
         eb:5b:0d:c6:9f:d7:ef:a1:f0:b7:11:77:f7:43:ec:ff:1a:bf:
         e4:ff:39:b6:86:42:1e:39:b8:29:f4:c9:e6:82:c7:e6:a4:26:
         19:0a:1d:ed:fd:1d:e6:62:9f:be:d3:41:b2:13:4f:7b:7d:54:
         6b:c4:6e:ec:b3:95:c3:83:0c:29:9f:d3:4f:0d:73:76:8d:02:
         4f:bd:27:5e:c6:da:4e:2e:33:4d:7b:ad:c8:1f:fb:01:65:64:
         28:5f:c4:c3:15:94:78:6a:8a:64:5f:a5:06:36:cd:d7:71:7f:
         53:6e:45:ba:83:ae:af:a3:86:97:16:e4:94:da:be:84:79:6f:
         e0:72:b4:61:30:a6:cb:e1:68:bd:bf:92:83:de:82:83:fd:2f:
         41:bd:e3:ae:bb:05:5d:ac:40:cc:10:45:52:55:a2:43:22:53:
         ff:ed:74:d5:f4:e6:3b:1a:a0:93:55:ca:45:2b:62:ca:38:f5:
         3c:25:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:25 2024 by rpki-client on console-ams.rpki-client.org