Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          NPVG+pv6cg75OpeWljJkN9rdzUGIcF17AZNzEmzhFmA=
Subject key identifier:   BB:53:1E:2C:E7:F4:D6:19:0B:5A:44:63:84:83:AE:75:45:A2:5E:C0
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       019037076CC632633596C96AAD367744D654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          11D7
Signing time:             Thu 20 Jun 2024 19:02:31 +0000
Manifest this update:     Thu 20 Jun 2024 19:02:31 +0000
Manifest next update:     Fri 21 Jun 2024 19:02:31 +0000
Files and hashes:         1: 71qVwY5qrT2g6VhQlQvQ9IM9q3M.roa (hash: cgcb1YkfkdFVKUOKqRnVLMVBegRHXaJV+lpw/pOFPoI=)
                          2: Xc77nOZFw1uoO06GdpYii_vECtY.roa (hash: tT3mpiy3vobBovPeVkyWYXW9iQfSLh0nCunNyn4d2/k=)
                          3: Z4VaaAH-F3FA138AMhi6Q04plKs.roa (hash: QbNMMh9KVkUyXd8R/Oo37DpQ3jqDM9A6owodc6GElgU=)
                          4: eqNkhdgnmT_BvDt83WNw8kQ2ChQ.roa (hash: sKT4Nmiap9wrcjN20JlEE1JUjVn9bjeZiBnDweI2NAk=)
                          5: o8z2KoUjtdC4F_awGgVFXhBaFCg.roa (hash: +kxGQWW2/rmrxU0wu+zxbfwJetpoXbBMLVa8EZ9FXIU=)
                          6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: A9DFiejfY/C4mPQFvc6LM06gyyIXD2TQz4e9yqpIuPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:07:6c:c6:32:63:35:96:c9:6a:ad:36:77:44:d6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Jun 20 19:02:31 2024 GMT
            Not After : Jun 21 19:02:31 2024 GMT
        Subject: CN=bb531e2ce7f4d6190b5a44638483ae7545a25ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:c3:d4:e5:15:a8:61:e6:4c:3f:fe:9d:1b:
                    3b:6e:94:3b:c7:45:3c:e9:c0:90:0f:f5:0d:77:81:
                    6e:3f:79:85:b7:69:03:c7:31:0c:92:2e:7f:fb:44:
                    fa:f0:7d:c8:61:b5:77:c5:0c:97:49:4e:58:0b:33:
                    46:0a:92:fc:0f:ff:f7:d8:2c:80:88:e6:0d:83:7e:
                    a5:5c:cd:c7:91:f7:1d:0b:d5:9a:82:6b:fc:13:47:
                    e7:17:55:da:f7:ce:b4:db:0c:0b:3e:0d:82:a8:20:
                    a0:b7:f0:c7:95:a8:82:f8:e8:0f:15:b6:15:84:04:
                    51:a3:32:ef:71:3f:fd:c0:a0:91:f4:2a:38:9b:0f:
                    6e:75:c8:81:e0:98:2c:77:d9:23:f3:87:94:fd:cb:
                    38:76:63:a0:e9:e7:fd:bc:be:05:59:97:ae:d3:72:
                    ad:eb:cc:17:e7:70:f4:68:d2:f0:ad:62:5e:07:17:
                    64:37:63:dd:86:06:13:4a:38:7e:e7:b9:01:25:4b:
                    a6:69:8c:9c:e9:1d:9f:00:6c:3b:da:d2:32:a6:08:
                    3e:05:a0:80:bb:0e:b8:e9:ae:03:c3:48:aa:f8:f4:
                    45:39:d0:6a:6a:85:f3:7d:9f:99:31:e3:ac:e6:e5:
                    4d:b8:2c:61:1b:2a:67:06:3c:7f:fc:14:15:cb:64:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:53:1E:2C:E7:F4:D6:19:0B:5A:44:63:84:83:AE:75:45:A2:5E:C0
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2a:2d:b3:18:d6:16:b5:75:f4:d7:81:c5:6a:8d:02:cf:ff:
         32:2a:9d:40:32:b9:a7:e8:0b:49:e8:c3:9d:d0:a1:11:43:51:
         81:b8:de:5a:d9:f4:cc:b7:6f:1a:1d:9e:ac:e9:d5:d6:ad:59:
         22:5b:a9:8c:07:62:8c:05:e3:38:d1:1c:5e:a1:6c:74:21:e2:
         04:b9:94:d7:17:1b:cf:f1:18:db:a3:84:4e:63:84:de:cd:43:
         10:14:e7:06:cd:71:7a:6d:13:84:48:f3:6e:b0:22:a2:22:a2:
         19:96:e8:53:93:28:81:62:d3:f0:6b:ee:71:9d:c8:4f:8e:b7:
         9c:e0:1c:0a:db:94:98:0d:d0:0e:33:81:47:fa:ff:f2:fe:22:
         25:32:48:c9:b6:bc:3d:73:d3:e9:84:bb:93:0f:e3:57:16:ec:
         76:9f:af:81:45:ea:f9:d8:33:84:4f:17:14:e3:ae:c5:c1:c2:
         fa:18:14:55:d1:a0:08:4b:42:2e:34:04:cd:8d:ad:4c:51:0d:
         72:6b:db:e0:52:bb:42:79:ca:00:cd:c3:24:3b:33:b7:f2:61:
         a0:1e:82:9b:2e:f4:6d:09:b3:5b:8c:c8:f3:ec:44:9d:f1:53:
         69:6c:a0:1a:6e:f9:34:97:92:b8:7b:df:a6:66:9d:67:3c:a7:
         7f:c8:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:23:30 2024 by rpki-client on console-ams.rpki-client.org