Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
File:                     JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft (raw, json)
Hash identifier:          FoHD8usY2d1BnB8oVBWViCLplkb3SMlg6J2DH+QwQ0I=
Subject key identifier:   C2:7F:17:33:04:59:E8:CC:64:61:25:88:F4:22:E3:71:61:66:2D:DF
Authority key identifier: 24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4
Certificate issuer:       /CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
Certificate serial:       019041C0E2D017A8409890FB499A60AEBFFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
Manifest number:          058A
Signing time:             Sat 22 Jun 2024 21:01:18 +0000
Manifest this update:     Sat 22 Jun 2024 21:01:18 +0000
Manifest next update:     Sun 23 Jun 2024 21:01:18 +0000
Files and hashes:         1: JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl (hash: PGvV7/Ttb59Zfy5nVRD38an0LeGMVaZEmbHphe1fj+4=)
                          2: S-1RMbboBNB_fsNvjIUtnFHTJo8.roa (hash: 4UhQ2XICNvH09RnS6sjZgLUOREbvEPWbzuO2t3X/pJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:e2:d0:17:a8:40:98:90:fb:49:9a:60:ae:bf:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
        Validity
            Not Before: Jun 22 21:01:18 2024 GMT
            Not After : Jun 23 21:01:18 2024 GMT
        Subject: CN=c27f17330459e8cc64612588f422e37161662ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5c:be:32:1a:d9:26:47:52:d6:0c:3d:fc:8f:
                    c9:51:a1:18:5a:8d:99:5f:42:65:c8:72:16:1a:1c:
                    93:a3:ce:67:0d:2d:ba:dc:d2:c0:0c:9d:66:8c:f5:
                    a6:c3:ae:eb:8d:27:9b:a0:03:30:df:d9:b7:a4:a6:
                    d1:47:b4:d4:3a:8f:bf:c2:89:34:f4:c0:63:42:2b:
                    de:17:27:fc:ad:f9:50:cc:16:d9:a9:3c:14:b7:cd:
                    31:b8:a0:a1:db:24:db:86:74:1b:d8:85:7b:a5:4e:
                    0d:3b:72:3b:78:dd:2a:54:e4:2f:cb:7a:2c:87:7d:
                    38:f0:01:51:b5:47:1c:37:4c:20:87:9a:82:23:88:
                    5f:5a:ae:50:d4:09:d5:8f:1f:e6:3a:dd:11:9c:9f:
                    03:d7:bc:74:17:ea:f7:70:81:5b:ad:09:41:b8:ca:
                    01:f0:57:bf:ca:3a:43:e6:cb:a7:a3:0f:ae:dd:9a:
                    2c:1c:11:0a:0a:9b:51:df:34:05:8c:8d:19:33:00:
                    a3:14:8b:e0:38:e0:c5:1e:09:54:5b:06:db:d5:98:
                    93:6c:7a:ee:88:0d:f3:0e:56:f1:a9:56:1c:ce:dc:
                    ad:83:db:00:e7:c0:b9:33:5c:4c:0a:43:f6:43:2b:
                    1f:41:43:cb:7a:5e:23:01:d7:b9:17:5a:aa:90:1f:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7F:17:33:04:59:E8:CC:64:61:25:88:F4:22:E3:71:61:66:2D:DF
            X509v3 Authority Key Identifier:
                keyid:24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:40:a1:cc:e7:9e:29:07:2a:35:cc:39:d8:d1:03:4c:38:
         3e:07:3f:ef:44:3c:b5:bd:bd:1a:fd:e2:39:02:63:b1:0d:83:
         b5:db:07:57:40:07:01:18:a2:29:86:a8:9d:8b:ee:e3:81:aa:
         5e:d7:aa:69:5a:d0:b8:0d:b9:67:0d:c4:8f:16:50:85:5d:3c:
         16:7b:00:7c:a8:45:9d:92:44:a0:f2:8f:80:14:f5:62:2c:e4:
         81:fc:e6:42:f2:dc:db:c6:b9:8b:ff:7c:b8:89:a9:49:54:e8:
         86:10:fd:95:26:c3:d6:a2:8d:86:94:3e:6b:b4:12:ff:7d:0b:
         8f:12:ae:51:c3:eb:72:3b:74:41:d8:2b:c6:f1:46:7c:92:20:
         8c:f6:eb:ec:a9:de:f2:a3:4e:14:37:c5:de:a0:0f:22:6c:77:
         45:26:84:d3:31:02:fb:40:1e:d6:52:12:7d:91:7d:0a:17:4a:
         c9:c5:23:3e:7d:3a:6f:d6:2d:a2:94:a0:e2:bf:b7:1f:44:61:
         51:8a:52:5b:ea:93:5f:56:55:db:95:73:52:2f:f8:3f:48:f6:
         5d:7c:d3:aa:c4:3e:43:eb:c7:da:68:79:7f:1e:ee:64:94:4d:
         c8:b4:8e:eb:38:4b:6e:7d:54:d8:21:39:2d:a5:10:6a:a8:21:
         cc:59:f8:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBwOLQF6hAmJD7SZpgrr/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTlkODRjNmQxNmMwODMwOTNjMzM3MWI0NTc1ZDM2ZWY0
NDhmZTQwHhcNMjQwNjIyMjEwMTE4WhcNMjQwNjIzMjEwMTE4WjAzMTEwLwYDVQQD
EyhjMjdmMTczMzA0NTllOGNjNjQ2MTI1ODhmNDIyZTM3MTYxNjYyZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ly+MhrZJkdS1gw9/I/JUaEYWo2Z
X0JlyHIWGhyTo85nDS263NLADJ1mjPWmw67rjSeboAMw39m3pKbRR7TUOo+/wok0
9MBjQiveFyf8rflQzBbZqTwUt80xuKCh2yTbhnQb2IV7pU4NO3I7eN0qVOQvy3os
h3048AFRtUccN0wgh5qCI4hfWq5Q1AnVjx/mOt0RnJ8D17x0F+r3cIFbrQlBuMoB
8Fe/yjpD5sunow+u3ZosHBEKCptR3zQFjI0ZMwCjFIvgOODFHglUWwbb1ZiTbHru
iA3zDlbxqVYcztytg9sA58C5M1xMCkP2QysfQUPLel4jAde5F1qqkB9V1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ/FzMEWejMZGEliPQi43FhZi3fMB8GA1UdIwQY
MBaAFCSp2ExtFsCDCTwzcbRXXTbvRI/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktuWVRHMFd3SU1KUEROeHRGZGROdTlFai1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wNWNhMWQtYzM1Ny00OGJjLTk2MDkt
NDVhNTM0ZjIyMmY0LzEvSktuWVRHMFd3SU1KUEROeHRGZGROdTlFai1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8wNWNhMWQtYzM1Ny00OGJjLTk2MDktNDVhNTM0ZjIyMmY0
LzEvSktuWVRHMFd3SU1KUEROeHRGZGROdTlFai1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftNAoczn
nikHKjXMOdjRA0w4Pgc/70Q8tb29Gv3iOQJjsQ2DtdsHV0AHARiiKYaonYvu44Gq
XteqaVrQuA25Zw3EjxZQhV08FnsAfKhFnZJEoPKPgBT1YizkgfzmQvLc28a5i/98
uImpSVTohhD9lSbD1qKNhpQ+a7QS/30LjxKuUcPrcjt0QdgrxvFGfJIgjPbr7Kne
8qNOFDfF3qAPImx3RSaE0zEC+0Ae1lISfZF9ChdKycUjPn06b9YtopSg4r+3H0Rh
UYpSW+qTX1ZV25VzUi/4P0j2XXzTqsQ+Q+vH2mh5fx7uZJRNyLSO6zhLbn1U2CE5
LaUQaqghzFn4Nw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:30:29 2024 by rpki-client on console-ams.rpki-client.org