Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File:                     jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier:          erftVoq4qC1tIvPxBwSjfy3xMyqaALAVo4wFJ13IRfo=
Subject key identifier:   A7:93:94:47:A6:1C:B4:BE:81:D9:8C:E4:69:05:83:B0:31:99:76:54
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer:       /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial:       0190459D94E6337D1FD23FB983FAF3B997ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number:          11DF
Signing time:             Sun 23 Jun 2024 15:01:13 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:13 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:13 +0000
Files and hashes:         1: 05CEsUlelhrIVXU5fHxM2yMM1qE.roa (hash: i35rMwbsxJOU+qmjA++qD5IeR2URBr83mXmoI2eSD1E=)
                          2: Cq-I-KT0RZXw8nGUkHMlDRZbcX4.roa (hash: Lyg1S9cUMoYy81ZBRwZb5RmsiTUJcPyR5qCYvHtQiCg=)
                          3: b5yZgmt0DPXJdffDCyLGcVr7tDM.roa (hash: k+ysiPuODnll4bpVXgxRXy7L9TIrOxPNfucgwONNsIc=)
                          4: eXWKr3WYP7uvBphkQ1jWTbr5p9A.roa (hash: RpKkAxSXAypCVQKdSzMxis/KkQvEASC/7jYzjJzwMhs=)
                          5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: PQqI3VwFBPm2djEcE0x9D5aQ+U3trFwgV8j0mNWBrlI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:94:e6:33:7d:1f:d2:3f:b9:83:fa:f3:b9:97:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
        Validity
            Not Before: Jun 23 15:01:13 2024 GMT
            Not After : Jun 24 15:01:13 2024 GMT
        Subject: CN=a7939447a61cb4be81d98ce4690583b031997654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:3a:53:df:4f:c0:fb:eb:6a:b9:8d:28:b9:
                    eb:e5:f6:5d:9d:ab:f8:18:e6:5a:0d:b3:53:f3:27:
                    b2:1c:59:66:ce:4b:77:ce:e4:84:67:9a:a1:8a:97:
                    37:fc:fb:ed:b8:47:c6:cb:d2:53:50:bb:3c:05:df:
                    28:b7:91:28:a0:50:bf:76:37:fa:66:0a:ae:e5:12:
                    cd:6c:c0:44:5b:55:6f:83:3d:64:e8:d4:0d:ff:8e:
                    23:56:6d:ff:08:8f:1e:4d:82:48:4b:70:3a:48:b3:
                    eb:5b:b1:e7:d3:00:64:1c:d2:30:b2:04:69:54:af:
                    14:a5:1e:f4:32:05:d7:27:9a:1a:2b:48:c9:74:af:
                    86:54:cf:b1:8d:ad:6f:10:09:6d:47:c5:21:51:48:
                    e3:47:a9:ba:b9:b4:c1:95:1a:bd:17:cb:a8:d4:4f:
                    07:a1:b3:80:88:de:67:62:a7:a8:00:63:d8:fd:37:
                    30:01:36:53:a3:ef:2f:f5:ae:20:dc:3b:03:6f:71:
                    ae:d2:77:82:91:38:c8:c9:f0:67:41:5e:4d:e5:e0:
                    d0:d9:e4:fb:df:d4:19:d4:5b:b8:df:f4:72:96:54:
                    85:17:05:61:21:be:c7:0e:41:d9:3b:54:44:e0:a9:
                    84:28:f3:2c:d0:2c:83:ac:b5:11:5f:30:d8:af:c9:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:93:94:47:A6:1C:B4:BE:81:D9:8C:E4:69:05:83:B0:31:99:76:54
            X509v3 Authority Key Identifier:
                keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:b8:d0:cb:e5:ac:f0:3d:3d:68:e8:1a:09:59:95:f4:07:
         d8:c1:6b:5c:ac:78:a1:56:08:48:a6:d1:46:29:2a:00:fa:2e:
         f4:86:28:0d:91:55:a1:28:39:23:60:96:09:c8:06:ab:31:cc:
         67:47:75:b0:07:f0:f9:19:3d:aa:60:e7:d3:0b:85:47:b5:92:
         70:ac:44:08:de:5e:f3:21:14:63:53:43:56:76:c5:08:86:3e:
         7f:01:d5:07:30:69:69:b8:af:68:c6:c2:02:28:d9:d5:f2:8a:
         d2:b9:79:38:4c:37:c6:b7:ef:9f:96:d5:ba:77:cc:5f:42:15:
         3c:c8:c3:1c:54:31:49:15:00:03:4f:12:b7:14:7a:2f:13:c0:
         5a:f4:32:fc:c6:15:fc:eb:4e:16:dd:6a:d9:db:af:b4:3d:77:
         30:e1:b9:a7:c8:c8:6a:0d:02:2c:fd:b5:5c:29:21:ac:0d:bf:
         08:e7:de:94:67:16:4d:0e:11:3f:b8:bf:9e:1d:77:ab:15:55:
         e8:35:1b:fa:fc:07:47:4e:f7:2a:fb:82:fa:0a:00:31:e6:68:
         33:43:f0:15:71:5e:9a:18:3e:32:8c:9f:73:5e:08:77:0d:8c:
         5b:07:5e:a6:89:db:5e:23:b4:77:1e:e8:88:b0:69:3f:6d:f8:
         8d:18:be:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:05:58 2024 by rpki-client on console-fra.rpki-client.org