Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File:                     jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier:          s/XyLW265wDMtTrBrkyR+TI7wMJ3f8VJhRIPNhVdhiI=
Subject key identifier:   17:D0:4F:D5:88:10:BA:88:D9:7B:B2:22:78:58:B3:DF:0B:E4:19:FE
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer:       /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial:       01901DEC44EC98E7CC28CB9DB1CD23CA0AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number:          0FDF
Signing time:             Sat 15 Jun 2024 22:02:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:21 +0000
Files and hashes:         1: i8GvaR3gptFHvmvUaqFBBfjK1ig.roa (hash: rGktInduqJOxqSb0GxwB81MW6MRFBQWr39gsdA1IjEg=)
                          2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: lqJ2hwEHlX28GKr41+3oE97WIn11KrVdyhI7KMfRmZo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:44:ec:98:e7:cc:28:cb:9d:b1:cd:23:ca:0a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
        Validity
            Not Before: Jun 15 22:02:21 2024 GMT
            Not After : Jun 16 22:02:21 2024 GMT
        Subject: CN=17d04fd58810ba88d97bb2227858b3df0be419fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:3d:0b:5a:04:a6:e2:c0:67:e4:40:26:b9:
                    90:ac:10:db:69:0c:fc:4d:95:25:db:72:4b:a7:6d:
                    a7:f1:2c:05:20:78:42:c2:5c:00:6e:28:b9:4d:ab:
                    23:89:a8:65:1a:29:d3:2f:9a:6c:f1:8e:56:3e:b7:
                    49:a4:59:8c:47:09:31:32:bd:30:6e:0a:3e:3b:01:
                    b0:7b:ce:08:d5:70:f3:91:fd:83:5c:55:18:3c:0f:
                    2e:b5:b4:dc:b9:da:46:e7:b0:ed:55:1b:ca:df:bd:
                    33:a9:76:3a:0e:bc:83:fd:94:e7:4a:15:42:ae:f2:
                    93:36:ad:90:1e:95:6f:b0:2e:ec:f0:d8:ee:45:a8:
                    b3:f1:41:54:08:9b:65:83:12:f5:a0:62:12:1a:a0:
                    33:3a:8e:42:9f:aa:5a:38:ed:95:e3:2c:5b:32:55:
                    1c:54:d6:55:9c:09:a4:29:85:86:b9:ec:26:f3:73:
                    12:b7:8a:26:52:8c:dc:ed:af:38:5e:bf:d6:09:db:
                    72:74:2d:da:5b:92:0a:d4:78:61:71:e9:79:e4:d4:
                    4f:4b:40:86:27:4e:7b:4d:f5:fc:09:f4:4c:5d:05:
                    84:69:4d:9d:71:4d:bd:e8:36:cb:37:69:dc:39:cc:
                    ba:ba:8e:83:26:ac:60:1f:50:04:3a:15:14:47:9f:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D0:4F:D5:88:10:BA:88:D9:7B:B2:22:78:58:B3:DF:0B:E4:19:FE
            X509v3 Authority Key Identifier:
                keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:bb:8c:82:1e:35:18:04:91:88:71:ba:80:ff:98:80:2a:be:
         f5:61:2f:9e:1d:a2:5b:75:52:34:08:ee:3c:cd:e4:b5:2b:61:
         bd:63:bc:36:ed:97:3c:0b:73:88:8a:46:af:3e:b6:0f:a2:67:
         e0:3a:34:d7:87:f7:30:82:d5:7b:76:17:ab:9a:f4:2d:85:a1:
         63:85:0b:c1:65:82:2e:ab:2d:3d:eb:84:18:fe:17:27:d2:16:
         f2:50:c5:f1:1d:dd:b4:fe:30:fb:fa:f0:6b:34:8b:b3:c4:8e:
         85:e0:aa:c5:6b:9f:3d:4c:0d:31:8d:27:13:1b:9c:06:ca:8d:
         76:2f:c1:3c:79:ba:c5:c6:da:db:b2:7f:0a:c0:e6:4c:f5:4f:
         ad:1a:44:ab:15:36:ea:3d:1d:65:63:01:6d:2c:d0:83:b0:67:
         df:29:d7:e1:a9:bb:24:3e:b8:1f:4d:ca:74:c9:81:23:69:d2:
         28:79:56:79:8e:f8:7d:66:7b:a3:f3:ed:71:ce:f6:51:d0:de:
         52:2a:4d:01:e6:df:c8:76:35:19:3f:64:bf:ce:33:e4:b7:10:
         d4:fc:d9:91:68:c7:19:78:c6:12:95:e0:f8:a9:7b:dc:2c:ad:
         d8:25:45:dc:6e:0b:ff:ad:cd:fa:c0:27:d8:dc:76:cd:8e:b3:
         f9:33:e5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:43 2024 by rpki-client on console-fra.rpki-client.org