Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File:                     jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier:          2bkKpS02eSu8Ya6/bUeh7U5RdjGoxlQT40zsoPdzbDM=
Subject key identifier:   0B:22:96:93:0F:E9:10:43:DD:42:EB:1F:F4:71:C2:A9:C0:4F:75:0F
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer:       /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial:       018FBB6D3C7911059E61A22E84BF07AA506D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number:          07BA
Signing time:             Mon 27 May 2024 19:00:49 +0000
Manifest this update:     Mon 27 May 2024 19:00:49 +0000
Manifest next update:     Tue 28 May 2024 19:00:49 +0000
Files and hashes:         1: 2xM2ojpqbXgXAXgO-b53TwG2uOs.roa (hash: iiAkPAmj8C+lPPp6LJVNw37UE2SvuZzpdBNEU2iqx/A=)
                          2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: qPLl4sBjs45P/lvQRZ4CBuL12D4VtWcN7syu/oUXQ24=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bb:6d:3c:79:11:05:9e:61:a2:2e:84:bf:07:aa:50:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
        Validity
            Not Before: May 27 19:00:49 2024 GMT
            Not After : May 28 19:00:49 2024 GMT
        Subject: CN=0b2296930fe91043dd42eb1ff471c2a9c04f750f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:20:74:78:3d:87:88:b5:d7:71:62:d8:e4:
                    ad:cd:02:67:04:0e:e0:64:ca:d1:47:5f:72:5e:78:
                    3c:48:36:0e:62:cb:05:b0:37:af:51:70:39:dd:c5:
                    35:de:89:d5:10:51:0f:2d:c8:68:d3:a1:ca:01:8c:
                    cd:a0:8e:10:fa:12:55:4f:46:e4:f9:a5:ec:7a:d5:
                    2f:13:49:8d:93:e8:90:5c:bb:86:ae:ef:dd:d2:fc:
                    d3:54:5f:0a:64:11:85:ac:0e:e0:7e:1e:85:c8:80:
                    f1:53:21:ee:a2:e6:90:63:dd:ce:62:0a:72:54:df:
                    a5:a5:3a:04:61:f4:20:8f:a1:39:86:9c:10:bf:1a:
                    e4:eb:65:c6:0c:3f:7c:1b:10:6d:4a:24:a3:92:29:
                    a5:cc:9d:b4:eb:72:2e:f5:3d:99:4d:5c:98:65:46:
                    d3:d5:46:f1:11:03:25:d1:47:74:30:6b:9c:79:bc:
                    f0:df:ff:95:49:47:98:90:ef:61:02:d5:71:c4:ad:
                    e8:7e:2a:6e:7d:3a:64:a7:5b:1f:ad:02:9a:c8:60:
                    9c:58:9c:72:d7:b9:fd:e6:29:6d:7e:94:b3:e1:52:
                    f9:ce:18:4a:4e:1e:35:7e:cc:f8:d8:36:02:a1:29:
                    48:ad:5d:cf:00:60:86:15:5e:73:ec:54:2e:ba:99:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:22:96:93:0F:E9:10:43:DD:42:EB:1F:F4:71:C2:A9:C0:4F:75:0F
            X509v3 Authority Key Identifier:
                keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:ab:4d:53:3e:07:e9:53:1a:9d:e2:b6:ad:6f:fc:7e:49:
         a9:69:51:a6:59:53:e7:68:8c:83:74:25:22:06:a5:d8:48:19:
         5d:58:94:8a:5f:61:94:5b:a6:60:42:52:2f:08:30:3a:ff:94:
         8b:7e:77:29:fa:9a:97:6c:e8:86:65:48:8e:64:a2:19:8e:5b:
         0f:1c:fa:c6:9d:d0:5b:2f:2b:3b:ba:41:62:b4:3f:07:cc:63:
         3a:38:1b:a9:3a:fc:76:fa:9c:1b:1d:6c:1a:bd:cd:ea:37:59:
         c7:e2:de:fc:47:e3:f9:b1:72:00:5e:0a:54:17:ed:7e:8c:3b:
         03:97:66:2c:e7:fb:e4:72:48:51:48:d8:68:d1:e1:33:6d:a5:
         cc:ac:a7:05:1f:c5:ed:4e:5e:9a:d6:14:a8:13:c2:3c:59:c4:
         b2:eb:d8:9e:18:6c:d3:b9:7d:c8:e2:02:69:43:d2:8c:6d:c2:
         82:c1:db:d3:f8:e4:53:ac:a7:e1:82:a3:bd:2b:29:a7:c8:60:
         64:5d:fc:ad:30:12:e1:39:02:3b:95:5f:97:c7:99:4f:78:0c:
         df:d2:b4:81:83:25:72:dc:59:4a:ca:78:85:6f:7a:19:35:5a:
         66:9b:4c:2e:e4:a4:1d:76:62:b5:d4:a0:18:c2:40:4e:c1:f1:
         ae:f4:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 21:50:01 2024 by rpki-client on console-fra.rpki-client.org