Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File:                     jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier:          FAIuG+7yBOPyHkdwYSaBw/yhhTH8AW2b2PyQ31ktj9A=
Subject key identifier:   68:7D:CA:8B:92:50:A9:EA:21:B4:56:E5:0A:7B:2A:A1:1F:90:D1:67
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer:       /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial:       01901DEC4B61B835F2EC62C9F14AE57DB216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number:          1158
Signing time:             Sat 15 Jun 2024 22:02:23 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:23 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:23 +0000
Files and hashes:         1: 7l6X42hiC478dmwjqdo9nCkYEy0.roa (hash: tgxkFfvVfxvYev1unkTL2GRp5pspIiTZnZtzAL0qgyY=)
                          2: LZUEXPt1PY1P5yNWiMft3PC95Eg.roa (hash: ywz8QTuGNC/Q0PN4bDybxJWv+wwOc1l8SaZ4ztJ1MOU=)
                          3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: cMawY5j1O4Pv6/77f3HOFewb8SsEHiZkmQXEBU/KbPw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:4b:61:b8:35:f2:ec:62:c9:f1:4a:e5:7d:b2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
        Validity
            Not Before: Jun 15 22:02:23 2024 GMT
            Not After : Jun 16 22:02:23 2024 GMT
        Subject: CN=687dca8b9250a9ea21b456e50a7b2aa11f90d167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:cb:c1:2c:0e:69:6d:e4:f6:77:55:8b:56:
                    28:3a:a1:0f:14:b2:d9:b3:6c:e2:95:42:6e:5d:27:
                    7e:8a:32:37:35:a5:f1:62:3c:0c:a6:b5:aa:0a:01:
                    35:cc:0a:ca:45:e3:c3:10:6a:fa:05:72:7d:75:3d:
                    61:2a:31:8d:13:de:e8:7e:bd:b5:96:5f:de:d4:a8:
                    b8:0b:01:c4:9f:2d:bb:da:fa:27:a1:f1:c5:13:df:
                    00:25:cf:d5:ec:94:60:f3:ea:f5:c7:98:22:b2:8c:
                    09:fd:70:f8:f9:8b:b6:b5:84:48:5d:21:83:d6:38:
                    48:c3:f2:f3:7d:f3:8d:a1:4d:01:2a:32:1c:48:6c:
                    8f:03:39:ca:41:e4:9a:a1:17:82:a9:22:93:9f:13:
                    ce:9d:e5:e0:d1:4e:a9:47:ca:39:31:97:a9:ed:94:
                    fc:50:f7:b7:55:46:72:3e:cc:4d:90:f8:ff:92:3c:
                    8f:84:d9:a2:94:35:cd:ab:ad:f0:f6:10:a1:9f:7d:
                    cf:2e:bb:09:71:28:da:96:7e:77:77:70:e0:5f:a1:
                    c7:f0:7c:96:04:72:39:79:34:49:33:4c:0e:a9:77:
                    54:2c:27:34:e1:de:2f:ec:22:48:7b:19:e5:dd:b9:
                    d0:f2:93:2e:1c:01:ba:9f:b0:7d:e5:e9:ba:97:59:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7D:CA:8B:92:50:A9:EA:21:B4:56:E5:0A:7B:2A:A1:1F:90:D1:67
            X509v3 Authority Key Identifier:
                keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:90:7d:9d:7b:49:ce:ea:52:90:8a:18:89:4d:b3:03:bc:
         27:db:f2:5c:bd:40:ba:be:14:d4:97:10:86:60:e3:05:2b:f6:
         45:a8:3d:d6:14:f5:6a:62:37:a0:64:d9:14:94:f9:5d:d9:f3:
         6c:bd:eb:b7:cf:0e:20:91:c0:20:57:ab:0b:07:1f:0c:2b:15:
         ff:20:01:27:d2:1d:63:00:71:43:d7:3e:3a:d5:30:1c:49:5f:
         99:d2:4a:f6:82:3a:03:fc:72:d1:e2:66:9d:19:87:b9:76:61:
         6d:fc:1a:73:8c:a9:be:0a:fd:c8:af:cd:dd:5e:0e:4f:8f:5f:
         64:52:e9:47:2b:79:f8:a2:e9:59:28:3d:5e:ac:b7:30:b5:79:
         b7:6a:7e:e6:82:95:86:33:4f:8c:8f:0f:31:e3:90:b7:70:9c:
         e6:08:ae:aa:5d:3a:fc:00:16:0b:e9:78:b1:1a:4a:57:d0:a5:
         50:24:c9:5e:9d:63:2b:f1:e6:d8:e0:a1:9b:af:d6:31:10:d5:
         30:4c:06:a0:a4:2f:40:8d:7d:f4:66:b1:e4:1e:19:74:17:f3:
         d9:8e:c1:94:b1:66:6d:fe:23:20:d7:12:46:78:dc:ed:c2:75:
         93:d8:4f:c2:8c:15:ad:e8:11:65:ea:33:44:67:ea:6b:bf:ac:
         aa:60:b1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:55 2024 by rpki-client on console-fra.rpki-client.org