Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File:                     JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier:          r0F/kkhyknWauz4Vp7PCyD3q3fCsjwiKO3p9YM2zDkI=
Subject key identifier:   49:17:3D:AB:6D:6B:89:3B:5C:E3:6E:BD:7B:86:B2:0E:E8:93:5D:0E
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer:       /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial:       0190448BA066E39C0D83370152DD2111046F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number:          05E8
Signing time:             Sun 23 Jun 2024 10:01:59 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:59 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:59 +0000
Files and hashes:         1: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: PGkC/00qXHn8Dx1VSXNzPNi9cIX1X9KKzLwHRKIZ1TU=)
                          2: mI6a7lpr2AeM3eUpTpqp4xIMbco.roa (hash: tSyI5yEDLVK/T4HTj8OFAYAadX48C/SNYk+L+YIj6kA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:a0:66:e3:9c:0d:83:37:01:52:dd:21:11:04:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
        Validity
            Not Before: Jun 23 10:01:59 2024 GMT
            Not After : Jun 24 10:01:59 2024 GMT
        Subject: CN=49173dab6d6b893b5ce36ebd7b86b20ee8935d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a8:4d:ae:62:7e:95:9b:f1:14:e5:7a:54:4d:
                    91:8c:7b:31:c2:71:3c:db:e9:91:40:8c:72:7f:39:
                    06:63:37:16:70:17:72:89:3a:0e:1b:40:d9:e2:7c:
                    77:ef:22:d9:a0:e9:3f:a2:d0:b0:09:43:fe:da:15:
                    dd:a8:05:e6:aa:08:82:f6:75:b5:49:29:2a:4d:8b:
                    cb:46:f3:54:75:3b:3d:6c:16:a6:da:2f:e2:81:64:
                    fd:25:d3:04:c9:7b:bc:ed:6e:8c:05:af:f9:c6:e4:
                    41:ed:1d:39:02:23:db:20:d7:ea:74:d7:b1:22:d9:
                    45:57:e0:66:f9:fe:f5:4e:f5:09:7c:fc:0f:ba:9d:
                    76:c0:39:1f:e1:43:c7:8c:8b:6e:a2:6f:62:cc:bf:
                    8f:ea:a0:6a:ba:35:03:b0:09:74:44:48:5b:97:92:
                    96:53:93:1a:bc:1a:68:fb:bd:52:1c:1c:53:c7:06:
                    e5:be:80:7c:50:39:8c:03:f1:f7:a8:42:53:0d:98:
                    16:ab:b4:81:b6:29:cf:56:d7:ac:e3:4e:b8:1f:11:
                    46:c4:29:15:3b:bd:0d:09:1f:8d:f5:f2:f8:98:c8:
                    e7:de:a1:61:3c:53:df:df:c0:95:82:ed:18:04:ba:
                    9e:b3:f5:18:60:8f:5a:0f:e0:34:39:fd:c1:6f:01:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:17:3D:AB:6D:6B:89:3B:5C:E3:6E:BD:7B:86:B2:0E:E8:93:5D:0E
            X509v3 Authority Key Identifier:
                keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:32:b2:bb:76:e2:27:66:1a:a4:8d:0d:0b:88:51:c3:6d:cb:
         02:a3:38:9c:e4:92:8e:19:cf:ce:e6:42:2e:03:4f:a4:27:8c:
         c6:ed:ac:79:85:fd:21:9e:ae:56:f0:e0:49:db:0f:fc:45:7d:
         2f:d3:57:cf:26:bb:04:0e:45:9f:3e:6a:8d:05:3a:b5:f9:b6:
         18:43:a4:c7:d1:3a:0a:80:93:37:f7:41:69:65:b2:5f:bf:53:
         a0:53:81:f7:7c:7a:a9:a7:9d:9a:78:55:92:b6:0e:d2:e7:1b:
         0e:8e:13:62:a3:5f:47:cb:28:00:fb:51:f9:fc:b4:62:1d:9c:
         bb:3d:42:d8:bf:fb:78:56:e0:da:c3:35:b1:16:9c:98:5e:a3:
         e6:f1:3c:a8:15:fd:bd:ff:39:18:e4:3c:9b:64:d0:e2:99:f3:
         22:c3:06:ad:a3:6c:1c:ac:6d:84:91:c8:33:36:7b:6b:bc:70:
         69:84:59:47:c2:d6:12:67:aa:f3:78:c6:63:5d:4c:fe:ec:79:
         88:00:1c:0f:cc:80:89:42:99:fe:6c:95:1a:8c:79:2a:50:79:
         2c:e4:2f:14:94:1e:be:d8:e6:91:00:68:db:e2:0b:9e:2d:0a:
         7f:d1:5e:a8:03:24:af:30:b7:7a:ba:8f:32:14:66:70:d7:da:
         eb:d7:77:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:35:31 2024 by rpki-client on console-ams.rpki-client.org