Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File:                     jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier:          v7VPDkOA2ChlYCLvKmWeRF3Q9Oe8vJxhTOxKZM6sWJ8=
Subject key identifier:   33:0E:2C:C1:85:F9:99:81:EE:9C:BE:A2:62:D8:69:5F:5E:B1:1D:47
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer:       /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial:       01901D0F6A1CA5175319F1C6A8213CAE31F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 18:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:07 +0000
Files and hashes:         1: 05CEsUlelhrIVXU5fHxM2yMM1qE.roa (hash: i35rMwbsxJOU+qmjA++qD5IeR2URBr83mXmoI2eSD1E=)
                          2: Cq-I-KT0RZXw8nGUkHMlDRZbcX4.roa (hash: Lyg1S9cUMoYy81ZBRwZb5RmsiTUJcPyR5qCYvHtQiCg=)
                          3: b5yZgmt0DPXJdffDCyLGcVr7tDM.roa (hash: k+ysiPuODnll4bpVXgxRXy7L9TIrOxPNfucgwONNsIc=)
                          4: eXWKr3WYP7uvBphkQ1jWTbr5p9A.roa (hash: RpKkAxSXAypCVQKdSzMxis/KkQvEASC/7jYzjJzwMhs=)
                          5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: 70+3UkXd686PS0EPCdWmwUe1R6uQ/u0QqVCQJtXS09Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:6a:1c:a5:17:53:19:f1:c6:a8:21:3c:ae:31:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
        Validity
            Not Before: Jun 15 18:01:07 2024 GMT
            Not After : Jun 16 18:01:07 2024 GMT
        Subject: CN=330e2cc185f99981ee9cbea262d8695f5eb11d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:eb:f3:25:06:29:7a:d6:8f:5e:30:06:c0:
                    47:b3:09:2a:1d:f3:ed:6e:56:30:5f:e3:62:dc:29:
                    c5:85:84:8c:b2:c4:f4:28:a8:3c:f7:20:a6:f0:de:
                    ea:4a:37:0f:56:fa:4f:49:eb:e0:a2:3c:6d:25:48:
                    55:75:c0:c7:d1:25:a6:a2:d2:ae:7c:0a:86:de:5e:
                    80:4e:71:fc:30:20:9b:30:d6:88:62:dd:6f:99:57:
                    1e:6f:50:f8:ef:40:06:c7:9e:0b:fe:ce:19:0d:f7:
                    80:53:69:07:00:32:6f:b4:d8:47:57:d0:18:a9:b6:
                    0b:0e:97:d0:6e:3e:12:3d:8a:ee:33:ea:22:ae:05:
                    35:ff:67:b6:90:42:2f:fb:e0:46:27:1b:d0:e4:c6:
                    e8:c8:e2:af:6b:55:53:d1:d4:61:4f:f2:97:9c:a6:
                    34:6d:57:84:9c:e7:29:3a:1e:56:b3:f4:12:25:d2:
                    6d:bf:72:6b:5e:ce:6f:ea:2c:d4:6a:42:29:b9:85:
                    26:88:ce:f4:d4:f1:2f:e6:31:0f:77:70:b4:8c:fd:
                    73:30:02:4e:18:54:56:9f:05:1a:9e:be:0a:c0:1f:
                    f5:34:e4:b3:63:3e:16:eb:9f:f4:35:29:38:8d:f7:
                    ce:32:9e:e3:62:b4:f8:db:5c:1e:fa:e3:53:21:2b:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:2C:C1:85:F9:99:81:EE:9C:BE:A2:62:D8:69:5F:5E:B1:1D:47
            X509v3 Authority Key Identifier:
                keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:44:25:9e:da:d9:70:71:63:ec:d0:d9:29:8c:53:fc:0d:
         d6:41:03:c2:e0:0b:c2:35:73:21:26:bc:83:30:67:c5:1e:71:
         fd:14:b0:1f:25:18:8e:e5:cd:85:fa:36:00:c6:a9:12:92:cf:
         71:aa:85:2a:41:bb:27:0a:9c:a1:22:b1:51:d2:00:f5:37:e1:
         3e:1d:fe:ed:f8:f3:a9:67:6c:4b:9f:22:56:fc:76:1d:0b:60:
         1e:61:6c:85:fd:1e:83:34:a2:63:fe:3e:99:1c:0f:19:f0:26:
         24:a5:4e:7b:23:b7:20:7d:81:a5:a0:98:54:61:9b:45:ab:51:
         37:1b:62:a3:21:f7:97:97:0c:a8:79:02:ca:64:5f:e0:46:a8:
         4e:b7:4d:63:6c:c3:5b:21:72:ab:29:4e:cd:c3:b4:a3:86:d3:
         66:19:50:c7:23:4e:f9:b5:4f:52:21:70:61:cf:3f:e2:5a:39:
         38:79:53:2c:9c:8f:72:a1:d0:1c:01:52:b6:69:78:9e:b3:f2:
         ab:8f:cb:bd:ee:3e:39:92:6f:94:c8:be:45:65:e8:66:eb:1f:
         fa:ef:1c:2f:56:6f:4d:04:91:2e:79:ae:55:4b:86:ca:d9:8f:
         04:47:4c:74:1f:75:a6:0f:87:b2:d4:d8:fb:d7:54:1c:6b:38:
         0a:51:f2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:09 2024 by rpki-client on console-ams.rpki-client.org