Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          eEOq8I2erDjE1VkTjAo7Ht4HLKcnsmszRjKXmrHwnUY=
Subject key identifier:   1F:E5:CD:B4:69:67:85:63:A4:4F:3A:E8:8A:13:5A:21:2D:19:E9:23
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       019040AFBC4F594D7BA3AC764E73D491A959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 16:02:57 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:57 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:57 +0000
Files and hashes:         1: 1-4NIwwTC2DEh8yEiMX9bnL-8nJU.roa (hash: 3glw2dtSa2BjZYFu35uXiMtz4kDsHCBiN2c4rmVFne4=)
                          2: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: /MqVwW8BZYDuHT0u9xki/uVZ+LMAXkMMDS5DQAoXWzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:bc:4f:59:4d:7b:a3:ac:76:4e:73:d4:91:a9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: Jun 22 16:02:57 2024 GMT
            Not After : Jun 23 16:02:57 2024 GMT
        Subject: CN=1fe5cdb469678563a44f3ae88a135a212d19e923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3c:c3:ea:1d:10:8f:aa:13:35:48:59:5b:16:
                    0a:bd:8e:e2:ff:99:ec:ca:15:86:01:a1:4b:f7:28:
                    4d:c1:4a:e6:5d:15:9f:05:0a:85:fd:58:d3:97:08:
                    ac:30:73:64:8f:1d:2f:86:9b:bd:f5:ee:4b:3f:77:
                    b1:c1:8d:92:f9:c2:35:a3:f3:7b:c6:8b:8d:e8:3f:
                    6f:23:51:a9:dd:07:bf:8e:81:db:b1:41:72:b6:c7:
                    d8:cc:47:80:31:c3:50:e3:23:d0:ec:f3:53:ce:59:
                    0d:06:71:0d:d6:16:15:fd:fb:70:c4:df:db:92:58:
                    75:49:d9:be:8b:69:92:c9:5d:81:5b:48:98:f3:1a:
                    c9:4d:34:b3:26:b4:e4:02:cc:ce:46:5d:2a:6b:2a:
                    1c:8b:78:f1:e4:1c:f6:a7:30:1a:8a:f0:49:49:9a:
                    2d:e1:06:9c:ad:75:a4:36:9b:86:27:35:44:17:fe:
                    0a:ac:e9:a4:20:b5:3d:a9:fa:09:88:b0:9d:fb:4b:
                    02:a4:f9:f6:59:2d:dc:c7:c1:11:f8:d1:68:bc:43:
                    78:b8:58:51:0c:1c:aa:89:db:7a:42:1b:29:14:90:
                    bb:7c:9e:32:b0:72:25:84:2c:84:9e:d9:33:2e:ca:
                    03:8b:0d:fa:b8:0f:67:0d:ad:7a:f1:2e:47:59:5e:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E5:CD:B4:69:67:85:63:A4:4F:3A:E8:8A:13:5A:21:2D:19:E9:23
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:cb:08:6c:80:0a:a3:8e:76:5b:11:19:0d:9f:06:11:d7:21:
         d8:15:6d:80:2e:85:a6:1b:5d:3a:78:cf:d3:88:28:d6:df:11:
         3f:26:04:27:cb:79:2c:98:9b:33:63:c2:aa:6e:e8:52:16:c9:
         8e:d9:8b:20:d9:ed:ec:a3:86:33:cd:a8:38:5d:09:e8:17:9b:
         c9:ce:37:c6:b1:f6:42:4a:31:40:de:7f:3f:98:42:53:92:5a:
         07:9e:20:03:55:1b:1d:27:be:28:9c:ef:e3:ed:65:a6:3d:a3:
         93:59:f0:1d:24:7a:82:3c:51:c1:b0:11:41:d3:f6:ff:a4:84:
         73:b9:9d:5b:75:f6:af:97:89:03:df:81:92:f8:24:b8:2c:2c:
         de:37:1f:aa:bd:bf:46:c5:e3:df:5e:62:62:1a:3f:4c:27:fa:
         e9:7a:20:ad:10:3c:e1:ad:22:c5:e7:14:d5:12:03:fb:aa:b9:
         7c:8d:a2:c7:ee:9a:e3:63:cf:d4:e3:3c:49:50:89:27:02:81:
         15:57:0e:84:a8:50:c5:a7:30:4e:72:a3:8c:f5:4c:70:53:f9:
         cf:8f:3d:5c:1d:41:08:2f:09:c7:be:2f:33:10:d5:18:ed:00:
         79:c5:fb:79:c3:ce:bb:05:bd:3e:48:ac:2e:5f:a7:eb:1e:b8:
         14:34:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:15:52 2024 by rpki-client on console-ams.rpki-client.org