Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File:                     j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier:          PPv56lfcZVP0u78QPIiOZk1sOcPJmMVlonYoSVLMRmE=
Subject key identifier:   D5:C5:32:24:FA:4B:F5:3C:1C:0F:1D:35:57:6F:FB:CE:1F:14:0A:0B
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer:       /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial:       01901DEB72E5A904D9921FEA50CCAEA6C871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:01:27 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:27 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:27 +0000
Files and hashes:         1: GNXWP4MIXXZv_Wx1SGm78mApm8Y.roa (hash: PVcmbI849da9QDOtT2+f8+Zk528OedcilY7aD+CR3B4=)
                          2: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: oj0q/balcvPXtUdwHdJLH/wgd8+JvlVqvbV1XilrBsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:72:e5:a9:04:d9:92:1f:ea:50:cc:ae:a6:c8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
        Validity
            Not Before: Jun 15 22:01:27 2024 GMT
            Not After : Jun 16 22:01:27 2024 GMT
        Subject: CN=d5c53224fa4bf53c1c0f1d35576ffbce1f140a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:e8:7a:a6:8f:b5:f0:66:9b:21:7b:74:64:
                    18:d1:5d:50:ae:d1:03:fa:86:77:3e:9d:a7:0d:fa:
                    19:08:6e:1d:5f:d9:76:0d:19:51:b6:6d:d3:5c:2d:
                    8c:9b:6a:bd:89:80:a0:61:44:07:64:52:3c:81:34:
                    e1:9e:25:36:46:5e:86:66:6f:4f:63:5a:a9:67:b5:
                    9b:8f:0f:16:f2:e0:92:a6:0e:28:af:0b:76:64:56:
                    96:d4:eb:d3:6d:ea:a1:35:3a:9f:5f:94:f2:c3:2e:
                    78:6e:e5:49:30:99:5c:18:0b:10:4b:aa:d0:c0:1d:
                    25:82:a8:4b:0b:f1:2c:fd:7b:6c:3c:3f:e0:33:98:
                    5f:e4:49:a8:6a:fd:ea:5a:17:f2:97:1d:8b:95:bc:
                    2d:ca:65:5d:c9:4b:d1:2c:b7:2c:b8:79:15:48:91:
                    42:d2:9b:62:43:09:2e:3a:9f:b7:f0:d0:a0:03:20:
                    34:fa:1c:a6:36:ed:50:b9:62:73:2f:70:6c:54:64:
                    fb:7d:19:9f:a2:bd:02:2e:4e:9c:2c:63:28:fd:74:
                    63:bc:5a:55:2f:52:d2:ab:c3:9d:b8:a1:4e:f2:a3:
                    31:17:af:dc:1d:5d:6f:57:15:f7:a6:d9:4c:6b:70:
                    b0:ae:b2:64:e9:e3:bb:73:64:c5:0e:50:86:f5:8a:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C5:32:24:FA:4B:F5:3C:1C:0F:1D:35:57:6F:FB:CE:1F:14:0A:0B
            X509v3 Authority Key Identifier:
                keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:e8:65:7a:77:e5:05:8a:48:52:f8:b7:30:f6:4f:ae:80:
         18:d3:44:79:02:e2:37:01:63:5f:99:72:c7:98:d0:31:5f:4d:
         51:83:72:fa:97:bd:8b:1f:b9:02:40:6d:03:83:02:b4:d6:f9:
         da:6a:3f:19:f5:5f:70:4d:46:7e:79:86:9c:4a:50:b7:1c:75:
         e0:79:e5:7c:41:c2:17:d2:46:82:5e:12:ed:14:5e:e2:1b:2a:
         de:2c:68:e3:42:b5:49:27:db:b6:29:55:33:58:63:ba:b7:91:
         97:63:e1:18:d0:0c:ea:79:88:74:2f:ff:30:92:73:46:b0:4b:
         b3:b3:d8:fc:51:3c:c9:65:c2:40:eb:ae:c0:17:42:82:21:34:
         aa:35:cd:99:9e:c3:ac:e5:39:93:80:03:1b:7d:e5:30:0e:de:
         f0:14:ad:49:c2:7c:49:94:86:63:83:f9:ca:00:3c:c8:10:15:
         70:7e:1c:b5:53:f7:11:5b:db:5b:a4:9f:1d:7f:84:53:c4:6c:
         5f:24:7d:00:17:06:9f:e4:49:fb:ce:90:98:b4:e4:22:91:0a:
         60:85:d0:6b:d7:52:10:3b:fe:35:55:3e:90:8f:e0:d0:6b:08:
         a8:f9:89:be:12:cb:38:22:85:96:34:ad:ea:27:ad:a4:84:b2:
         69:b6:57:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:52:38 2024 by rpki-client on console-fra.rpki-client.org