Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File:                     jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier:          fiQP4iJNtcwJjiEg/o+1LYkGQ8MIzcYMeV/aWCp10zg=
Subject key identifier:   4D:96:7A:0A:17:F6:2F:46:97:F1:7E:CC:67:3C:AD:BB:A7:CB:0F:65
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer:       /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial:       019044F8B1138F39CA16A6C48422A1A1E9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number:          11D9
Signing time:             Sun 23 Jun 2024 12:01:07 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:07 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:07 +0000
Files and hashes:         1: WY_MWcpyMeByMoY3rkatVfrUP00.roa (hash: QwA8zuji5U1gwA0L5TMbXzv+PpNAvuZeSeBT7YHz5Rw=)
                          2: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: OMysiexwO9DqyyHwpDAquis5J+49x0s+uuia4645skI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:b1:13:8f:39:ca:16:a6:c4:84:22:a1:a1:e9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
        Validity
            Not Before: Jun 23 12:01:07 2024 GMT
            Not After : Jun 24 12:01:07 2024 GMT
        Subject: CN=4d967a0a17f62f4697f17ecc673cadbba7cb0f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:4a:4d:e1:11:87:ae:8f:f9:5e:da:9a:02:
                    f5:36:4c:08:e2:13:25:a0:4a:aa:dc:b6:e8:c7:08:
                    1e:29:00:dc:0c:4d:cc:ca:1d:24:1f:d8:ba:c6:6d:
                    29:de:9b:13:ef:e3:76:bf:fc:03:25:75:30:c4:31:
                    a4:25:15:aa:7c:04:3a:77:90:03:f2:e4:e8:f1:93:
                    01:c5:86:30:80:8e:d3:58:c3:a7:d1:c9:a0:9c:5a:
                    a1:7b:bf:59:93:18:cd:ba:d0:eb:ea:05:54:2a:0f:
                    2f:f1:9a:8f:d6:35:53:6e:cf:1f:85:5d:51:5f:56:
                    c8:23:0e:4b:85:f1:5e:c1:21:53:3b:28:a2:53:f4:
                    36:02:30:d1:e1:12:95:74:2c:04:51:9c:1a:e7:23:
                    3e:73:05:51:43:ff:cf:a6:ba:e9:9e:e6:12:7f:c9:
                    6a:4d:28:6f:6b:8f:f1:dc:c5:cf:66:19:d4:1f:10:
                    30:12:4b:82:f0:9d:ae:bc:55:fb:da:ef:b5:43:f5:
                    7e:f8:d8:70:c9:c5:fa:81:ca:bc:92:90:3c:b3:4d:
                    47:b1:cb:ee:3e:92:a4:4c:ca:e1:4d:55:03:33:cd:
                    85:62:c3:85:43:f8:88:87:30:a7:18:d7:2b:f0:19:
                    8e:80:34:da:0e:fb:22:f1:26:8d:2e:14:96:fc:cd:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:96:7A:0A:17:F6:2F:46:97:F1:7E:CC:67:3C:AD:BB:A7:CB:0F:65
            X509v3 Authority Key Identifier:
                keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:db:5f:41:f8:73:87:b0:cb:d3:15:0e:15:b9:34:bf:67:e8:
         3f:f5:e3:50:27:e4:62:b6:5e:ae:76:2a:07:c6:05:f1:48:21:
         2d:4b:0e:c9:5a:17:f6:10:67:38:66:da:19:94:47:2d:93:9d:
         56:27:08:a4:ec:a3:95:49:7a:46:11:47:b1:d4:0d:1f:ed:5d:
         a0:f0:59:8f:3b:c9:96:4a:34:b9:f1:82:dc:af:bf:3b:33:1a:
         76:3f:08:d0:cc:c2:53:f7:58:d8:0e:9e:6c:ce:62:1b:4a:12:
         72:e1:ec:0a:24:e1:0e:26:ea:22:03:ab:21:30:bc:27:b9:30:
         72:e4:db:dd:6d:48:d1:53:05:f0:0a:99:57:93:7d:ce:2f:a0:
         2d:56:e8:16:2e:c0:c2:20:c0:7d:5f:59:57:c0:65:ca:00:be:
         4f:b4:25:cc:21:51:79:c8:13:1d:9d:18:85:8b:35:76:85:da:
         ad:95:12:ee:d2:52:f4:71:9d:3d:7b:9b:3e:24:91:42:a5:5b:
         ca:50:cb:cd:18:ac:f1:82:a1:4b:0f:bc:e3:72:85:40:24:98:
         a6:1a:25:0b:33:5a:53:5f:3e:c2:90:4e:a0:10:c3:41:26:05:
         23:d2:2b:7c:90:8e:9e:df:e0:df:08:75:82:1d:23:da:64:6e:
         87:2a:e5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:11:50 2024 by rpki-client on console-fra.rpki-client.org