Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File:                     jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier:          aYio+aZuN28Evb+qCq3Kma/BJqZKb7m9nLGHPIlpW+s=
Subject key identifier:   9D:2A:4D:5E:10:17:DF:0A:68:61:28:97:48:68:79:98:FD:57:30:D8
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer:       /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial:       01901DECB6AF81FB53517CBD33CB180A2794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number:          110B
Signing time:             Sat 15 Jun 2024 22:02:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:50 +0000
Files and hashes:         1: gZk8yrdkfh6FrWipj46ad2zUth4.roa (hash: wYG1bbxzZdcc55SqOAsqbPQDL10st03ZgGepqjCnxWE=)
                          2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: G9cnCD1OKlcanyZLOFpWoDE2dG0Bh705w+0ynGlv+3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:b6:af:81:fb:53:51:7c:bd:33:cb:18:0a:27:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
        Validity
            Not Before: Jun 15 22:02:50 2024 GMT
            Not After : Jun 16 22:02:50 2024 GMT
        Subject: CN=9d2a4d5e1017df0a6861289748687998fd5730d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:69:f5:bd:f6:dd:c1:1e:35:ee:b5:41:fd:
                    89:b2:1a:13:e1:99:a5:26:b0:e5:15:1e:7d:bb:c7:
                    d7:04:6d:7f:43:61:ae:38:fe:0f:1c:93:8c:c7:84:
                    af:42:77:e4:a7:d2:28:23:91:f7:ae:3f:54:fc:79:
                    dd:7f:df:30:0f:76:da:d7:2d:4c:3b:79:23:39:57:
                    f4:cd:17:3d:cb:24:66:0d:b4:d7:ed:44:d7:aa:4b:
                    4a:3d:77:01:c1:05:97:75:da:58:e8:68:91:44:df:
                    eb:e9:40:1b:45:eb:ee:9f:12:1b:d3:0c:76:d2:9b:
                    31:90:7f:a9:47:c3:e5:93:29:25:d3:15:f6:be:1a:
                    ef:8d:61:98:a7:e3:45:fd:2f:79:74:b0:0d:59:36:
                    17:5b:17:fa:29:cf:5e:77:16:29:9b:c2:55:c5:17:
                    77:73:30:54:86:8f:e9:a3:0b:2a:59:84:17:e3:00:
                    60:8e:b2:0d:6c:a4:33:47:4f:c8:2b:34:f9:2f:e2:
                    b8:03:98:95:45:41:fc:0a:b9:da:90:1f:b0:e1:07:
                    93:2c:65:22:2d:b8:ae:89:08:4f:c4:2e:fb:9d:4d:
                    ca:7a:a7:55:23:2d:dd:49:c5:1d:cc:fb:c1:41:90:
                    f9:46:71:85:c2:4e:44:13:1b:24:d3:cc:e9:0c:2e:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2A:4D:5E:10:17:DF:0A:68:61:28:97:48:68:79:98:FD:57:30:D8
            X509v3 Authority Key Identifier:
                keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:78:ba:f9:e9:ea:25:95:97:25:83:62:2f:90:6b:00:a7:36:
         99:bb:2e:85:24:87:33:30:45:fb:5a:58:d8:51:b8:e2:83:86:
         ec:ca:33:2d:e8:c0:35:ae:61:e5:f3:4b:c9:dd:69:ff:58:a5:
         44:69:ca:57:f5:9a:bc:32:66:f2:db:89:fd:b1:82:ed:5f:a5:
         e5:c1:81:aa:ee:d9:34:7c:58:14:7c:04:e4:e4:0a:2e:94:34:
         84:43:fc:cf:1b:42:38:2f:85:90:21:fd:1d:e0:75:bc:7c:25:
         4e:e7:45:9d:4f:39:74:c9:6b:4c:33:f9:95:97:9d:86:d7:d6:
         0e:bf:52:78:a6:bd:1c:7c:75:2e:9f:90:76:dc:41:ac:7e:11:
         57:2e:e4:a2:e0:cd:40:b6:c2:d4:5c:de:21:44:e6:b4:c2:f6:
         b7:97:e3:02:39:04:b1:3d:d3:79:44:5d:02:d2:60:8b:a9:72:
         cf:ed:d4:50:e6:2b:0c:6d:79:57:5c:e5:ab:c3:79:09:02:bd:
         9d:2c:b1:a7:7d:d2:6c:8e:a7:03:cf:5c:83:85:68:57:da:62:
         56:ef:5a:73:a2:1b:11:f7:39:f7:f0:44:74:a6:55:fb:fc:f4:
         a9:42:98:3e:b4:a4:a4:c2:18:b9:a6:53:78:34:b7:be:5c:64:
         ea:7e:30:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7LavgftTUXy9M8sYCieUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGEzOTFhYWViOGZjN2M4MzNmODI1N2Q3YTllNzRhNTVi
MzNhZmUwHhcNMjQwNjE1MjIwMjUwWhcNMjQwNjE2MjIwMjUwWjAzMTEwLwYDVQQD
Eyg5ZDJhNGQ1ZTEwMTdkZjBhNjg2MTI4OTc0ODY4Nzk5OGZkNTczMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmRp9b323cEeNe61Qf2JshoT4Zml
JrDlFR59u8fXBG1/Q2GuOP4PHJOMx4SvQnfkp9IoI5H3rj9U/Hndf98wD3ba1y1M
O3kjOVf0zRc9yyRmDbTX7UTXqktKPXcBwQWXddpY6GiRRN/r6UAbRevunxIb0wx2
0psxkH+pR8Plkykl0xX2vhrvjWGYp+NF/S95dLANWTYXWxf6Kc9edxYpm8JVxRd3
czBUho/powsqWYQX4wBgjrINbKQzR0/IKzT5L+K4A5iVRUH8CrnakB+w4QeTLGUi
LbiuiQhPxC77nU3KeqdVIy3dScUdzPvBQZD5RnGFwk5EExsk08zpDC414QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0qTV4QF98KaGEol0hoeZj9VzDYMB8GA1UdIwQY
MBaAFI4KORquuPx8gz+CV9ep50pVszr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYt
ZWRiNDNlMWQ0ZWUwLzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYtZWRiNDNlMWQ0ZWUw
LzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3i6+enq
JZWXJYNiL5BrAKc2mbsuhSSHMzBF+1pY2FG44oOG7MozLejANa5h5fNLyd1p/1il
RGnKV/WavDJm8tuJ/bGC7V+l5cGBqu7ZNHxYFHwE5OQKLpQ0hEP8zxtCOC+FkCH9
HeB1vHwlTudFnU85dMlrTDP5lZedhtfWDr9SeKa9HHx1Lp+QdtxBrH4RVy7kouDN
QLbC1FzeIUTmtML2t5fjAjkEsT3TeURdAtJgi6lyz+3UUOYrDG15V1zlq8N5CQK9
nSyxp33SbI6nA89cg4VoV9piVu9ac6IbEfc59/BEdKZV+/z0qUKYPrSkpMIYuaZT
eDS3vlxk6n4w8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:03 2024 by rpki-client on console-ams.rpki-client.org