Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
File:                     raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json)
Hash identifier:          JlxoeLKdPosvL8HpztWs+dZdJQkqU6kDcEixlY19D2k=
Subject key identifier:   8F:78:CB:4B:57:48:5E:13:5D:84:E4:7E:B6:F4:D6:D2:09:4D:F3:B2
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       0194BABBDDC817B9967031B12DCFB05F57D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
Manifest number:          1458
Signing time:             Fri 31 Jan 2025 05:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 05:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 05:01:01 +0000
Files and hashes:         1: 0c-PkOX4PI2_PMLwTC1dYeZHYOM.roa (hash: mpjIfuAfztuAHI4ECXOGCCkDK1/wM+GIB/rCNtmDvTA=)
                          2: 3cvNvdSi3XGnlgqLMUXhh7Fbsns.roa (hash: RjSiDuOGFmz06JKyEcD4gXSDvTvwzOibXX44/BaGwzM=)
                          3: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (hash: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=)
                          4: CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa (hash: s6MpM43dZhbOOH2ONDtptW7UmeKZDzVPrS361Wp7DlU=)
                          5: QqlMdh24Ws5Csf0Uuo2IJQlJoC4.roa (hash: /8SKmiBGn8KNuuR9Z6Vc2oYu9cW/r06GpbN1vuAdWAE=)
                          6: VWz0dchWUkZQVyP3JtuInNAFbyA.roa (hash: SqCoHwQT1RKZsrh/slkYf8DtZsXR49Lw8MbGV9Z0lJQ=)
                          7: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (hash: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=)
                          8: jOJJqoS_PgQTtahvKFyYtdpryQc.roa (hash: NLWvbfmQ0GpKEPm+5C3Z0gDnOHe3vz+adN0kchftPSM=)
                          9: owgmBs4vbkkXbw2K0OuU1ejAVjM.roa (hash: hWN+IDhiOv5MeOYFdicsOLf4isT8+TWoYgyTGhIN3B8=)
                          10: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: LHlRloXjXZDmNBS0eRZsfd+2ZHHnyCcLawY/VWKdKSI=)
                          11: w47kV22DUX2rmSAV17IslbqJZkE.roa (hash: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=)
                          12: zBMwGWWflzLxBSFNPzJ2aqEBgrE.roa (hash: Frie/26MAD4moXE2hcnRczEyt7GQngLuPdcorC2uOx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:dd:c8:17:b9:96:70:31:b1:2d:cf:b0:5f:57:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Jan 31 05:01:01 2025 GMT
            Not After : Feb  1 05:01:01 2025 GMT
        Subject: CN=8f78cb4b57485e135d84e47eb6f4d6d2094df3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:5e:cf:61:8e:a3:ad:05:6c:6a:a5:16:76:
                    ea:2e:61:56:4c:94:f6:38:08:21:d1:9a:3f:3b:cb:
                    b2:45:e5:3e:6f:14:fa:cf:f8:17:4a:f3:a2:3e:13:
                    eb:7e:da:6c:fb:35:0c:64:51:b9:d5:25:32:4f:8f:
                    2d:1f:5e:41:6c:8c:0a:27:d9:3a:2e:af:b5:df:ed:
                    1e:ee:45:68:8d:7b:ef:70:68:8b:26:41:ed:c1:7e:
                    b5:f8:fc:44:cb:a2:b1:2e:03:b8:ef:37:b3:49:9c:
                    91:70:8b:00:95:45:3a:61:d9:89:89:23:6a:b1:d0:
                    92:55:32:07:20:38:0a:29:4c:3d:69:0f:57:e3:27:
                    b3:bd:bc:a8:ad:5e:49:4f:48:72:42:ba:38:f6:0e:
                    01:85:79:61:0e:2c:6a:6a:c4:2d:63:a3:58:0b:1b:
                    3d:a2:8c:05:f6:1d:8a:c0:6b:20:a3:9a:98:85:87:
                    5f:3b:a3:ae:86:a6:90:70:32:25:49:34:e0:f8:bc:
                    5e:ea:7d:00:43:5b:95:f0:0d:7b:ce:f4:b9:ad:34:
                    77:b5:86:ac:9c:e0:a9:3f:c4:3c:ca:67:3f:3f:a8:
                    9d:3c:59:9d:b6:fb:5a:9d:fd:38:2a:d9:66:23:22:
                    70:6a:be:83:14:ee:92:6e:f0:d9:dc:d6:79:ed:2d:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:78:CB:4B:57:48:5E:13:5D:84:E4:7E:B6:F4:D6:D2:09:4D:F3:B2
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:c7:ee:fb:d1:62:5c:42:44:4b:dc:ff:5f:03:52:75:ed:
         1d:68:88:7a:50:ad:0a:96:da:32:1f:6a:01:23:b4:60:4c:d8:
         ff:84:7c:02:ff:f0:45:13:f8:6b:59:c2:1d:82:48:f7:80:29:
         9d:99:e7:3c:d4:c0:fd:86:d4:e4:e6:a3:b7:5e:8d:d1:02:bc:
         b3:a0:5e:79:be:26:a1:ec:b4:65:8a:73:ea:84:3f:89:b8:78:
         c2:a8:3c:bf:82:0d:fd:db:6c:79:3b:d1:98:3c:ed:c9:fd:ee:
         e7:38:45:8a:18:77:e0:29:20:77:00:8c:ab:5c:fa:fa:a2:e4:
         3d:dd:5a:80:08:f8:85:e9:92:1a:58:73:46:55:5c:28:85:ff:
         62:8d:44:50:7c:9a:ca:40:84:77:80:9c:8f:8d:f8:71:a8:1e:
         ce:53:36:8a:79:ac:76:63:73:29:ef:ba:24:d8:ee:22:a3:41:
         aa:ef:4d:a3:47:7b:f6:3e:7c:62:d9:32:7b:c0:24:44:1b:fe:
         35:40:7a:cb:88:a4:84:f8:ed:03:d7:09:d9:c3:69:d4:ee:b9:
         08:96:81:97:b7:ec:b8:68:1e:f7:5f:30:da:91:b4:ac:76:f1:
         8f:4e:71:61:b9:c5:e9:bc:f5:bd:ed:02:18:cf:09:8d:34:b4:
         3e:68:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:02 2025 by rpki-client on console-fra.rpki-client.org