Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
File:                     JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft (raw, json)
Hash identifier:          Nzq80dxSVCNaUy47S05kXQupbdc8Qi3wmmS0fLX8+3Y=
Subject key identifier:   13:86:0D:88:F1:5E:EC:46:53:DE:3D:0E:83:9D:74:F3:87:88:9E:E5
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Certificate issuer:       /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial:       01905A6DBAD1FFFFD356FBAE36838BBF5730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
Manifest number:          11E4
Signing time:             Thu 27 Jun 2024 16:00:58 +0000
Manifest this update:     Thu 27 Jun 2024 16:00:58 +0000
Manifest next update:     Fri 28 Jun 2024 16:00:58 +0000
Files and hashes:         1: JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl (hash: J0ts5+5RktcfXtczqzpuNt8vZ0GgXxQsB229x7azvw4=)
                          2: WxGk0PbCjInZIbP7ceHgh0UHgaE.roa (hash: FlaA8pujmFqG3+EoqC1xJPyO3wq/nhZxn5ktdJrxM7I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5a:6d:ba:d1:ff:ff:d3:56:fb:ae:36:83:8b:bf:57:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
        Validity
            Not Before: Jun 27 16:00:58 2024 GMT
            Not After : Jun 28 16:00:58 2024 GMT
        Subject: CN=13860d88f15eec4653de3d0e839d74f387889ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:b7:ef:ea:0f:e2:8a:f4:5e:93:50:de:21:
                    f7:ae:1f:cd:4d:b0:f0:ef:7d:01:15:e6:e8:d5:71:
                    1f:83:e6:e6:17:55:fd:ea:bd:cd:44:e0:4a:82:5c:
                    c8:35:a5:8e:e2:e7:8c:b9:73:0d:5c:6b:41:15:12:
                    4c:40:19:cb:38:66:1a:b9:b1:29:7e:30:bc:53:1a:
                    d5:34:5d:fb:bb:ef:65:63:23:4b:b2:7e:9f:49:36:
                    66:c9:c0:00:2d:37:83:26:3c:6c:bb:7b:04:6d:83:
                    ae:03:1f:6d:f0:03:18:6e:71:f8:1c:c4:53:17:68:
                    6d:4d:5c:f2:c4:ac:7a:cd:02:ca:7d:2f:1b:70:26:
                    ed:41:2b:77:ac:fe:e5:64:e7:6c:a2:f2:52:e6:1d:
                    49:30:f4:29:61:8e:5a:59:40:2a:54:9d:33:00:c2:
                    d9:cb:35:a7:61:e7:91:ad:b9:3c:c5:79:7a:29:79:
                    ed:84:7f:33:51:c3:37:bf:12:9e:8b:13:10:85:1b:
                    6c:69:83:ea:27:d7:6b:79:c8:f0:6a:50:6b:d2:f6:
                    b5:f4:2a:d5:36:18:97:4b:67:29:62:c2:eb:d1:ed:
                    fe:21:eb:ee:5e:fc:24:7c:b8:06:f8:2c:62:d0:7d:
                    29:17:ab:3b:4e:7d:9f:13:2d:f7:3c:8c:75:6d:e7:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:86:0D:88:F1:5E:EC:46:53:DE:3D:0E:83:9D:74:F3:87:88:9E:E5
            X509v3 Authority Key Identifier:
                keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:48:18:d2:c6:86:28:6c:8d:6d:7e:df:cc:f9:de:40:aa:b4:
         7a:37:22:00:65:f3:12:ef:90:f8:84:a0:f5:91:1e:a0:eb:aa:
         a9:2a:24:a9:e9:1b:ad:30:25:d6:d5:be:cb:c2:c2:9a:45:ec:
         f0:17:0f:77:b5:19:b3:88:61:61:53:09:17:62:4f:0e:da:13:
         3a:cc:1d:b7:08:16:67:1c:36:e8:ce:ac:c5:ef:d5:9e:65:f1:
         1b:df:1b:43:6e:c0:c4:80:40:5f:31:08:58:93:2f:fe:48:d9:
         c0:80:b4:c7:cc:4d:7b:d4:2e:dd:50:f2:18:ce:a7:d0:4b:b9:
         8a:86:c8:31:c1:55:58:17:70:f9:f6:a6:19:a3:8d:fe:a8:dd:
         6d:57:c8:21:b4:0e:6e:59:38:e9:75:63:15:a4:63:75:67:cf:
         18:bf:df:21:d1:78:a3:89:be:c6:2a:a2:aa:9b:11:b2:fb:06:
         23:2c:97:8a:8b:bd:ac:66:93:a9:09:7a:8a:45:4e:23:2b:00:
         be:1b:bb:f0:ae:54:c0:50:e0:04:70:6c:8c:7f:79:58:29:83:
         1f:96:a8:38:64:25:c9:ae:a9:1c:d2:6d:92:f5:73:4e:72:56:
         4d:1a:37:08:8f:50:48:23:14:ad:da:91:b1:5a:fe:60:e2:2e:
         5c:fb:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 22:09:43 2024 by rpki-client on console-fra.rpki-client.org