Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
File:                     jxy5c3UkxDf2-nUhF2uwq3H77mM.mft (raw, json)
Hash identifier:          dYLmdv7CAkGy88wmp3/IsR1oPl259rbTIL8OC001aKA=
Subject key identifier:   DC:31:86:5B:01:CF:38:93:0B:66:5A:5E:57:ED:3A:B9:9E:3B:3F:BF
Authority key identifier: 8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
Certificate issuer:       /CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Certificate serial:       01901DEBD8A875A9E6A44EBB2D26033B836A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
Manifest number:          0345
Signing time:             Sat 15 Jun 2024 22:01:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:53 +0000
Files and hashes:         1: 4TLGiRKRAWmZsvWhVdIK7lZ_KQo.roa (hash: o/7HkR/4TcBOBNgU8fnTyekebm3MkdHLsrLzAEPnzvQ=)
                          2: jxy5c3UkxDf2-nUhF2uwq3H77mM.crl (hash: iO+zQHxA8TRQb20hejWIE0J0rS3aCh9rQ/wQEK1OFAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:d8:a8:75:a9:e6:a4:4e:bb:2d:26:03:3b:83:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
        Validity
            Not Before: Jun 15 22:01:53 2024 GMT
            Not After : Jun 16 22:01:53 2024 GMT
        Subject: CN=dc31865b01cf38930b665a5e57ed3ab99e3b3fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:7e:eb:8e:b8:6c:a3:73:b2:a0:af:f4:d1:
                    b4:f7:17:b2:23:be:b2:8b:d9:9d:61:c2:8a:e7:ca:
                    19:d4:91:fc:16:1e:41:ec:7c:ca:3a:79:7a:ae:fa:
                    5d:aa:42:b2:86:41:92:1f:31:1b:4c:74:ff:78:ed:
                    20:d9:9e:49:f9:0b:67:d7:86:d4:2f:c5:d4:f3:b8:
                    82:60:48:ff:f0:6a:31:29:d5:af:37:66:29:ce:c8:
                    fb:7a:4e:70:45:f5:b8:3f:ef:ec:4e:d1:a9:4d:8b:
                    2d:e6:43:d9:e6:73:55:81:1a:39:a8:bc:22:19:04:
                    cb:8c:24:0e:96:68:27:4e:8f:bc:67:24:8c:af:0c:
                    b8:bd:c5:5a:e2:5e:07:4e:fa:68:a0:a4:02:52:b1:
                    73:e1:23:f9:d5:e9:0f:9c:fa:4b:37:9b:8c:cd:cb:
                    7b:85:8a:65:38:b9:07:72:7a:66:ff:b3:3d:60:e0:
                    43:3c:02:8f:dd:18:fd:7d:0f:53:5b:a8:d6:92:aa:
                    8c:53:20:18:5e:25:7a:de:ec:ed:b2:df:42:c8:fe:
                    01:71:87:6e:f5:f4:7d:7d:87:e7:05:6a:dd:42:79:
                    cb:82:04:14:48:c7:4d:2c:95:1a:27:11:91:a4:23:
                    87:2e:cd:b9:08:3d:e2:db:26:0a:b7:be:ea:b0:95:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:31:86:5B:01:CF:38:93:0B:66:5A:5E:57:ED:3A:B9:9E:3B:3F:BF
            X509v3 Authority Key Identifier:
                keyid:8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7b:bb:1c:f6:2a:73:0e:41:6a:80:a8:e6:e8:32:2d:ee:5b:
         e9:83:f2:4c:4a:da:58:77:8a:e8:7b:71:1e:e2:ed:6b:84:1a:
         38:eb:04:90:0d:89:cc:a6:fb:ea:44:c3:27:0b:11:b9:84:c1:
         6c:28:b3:ef:06:9f:6a:bb:6f:97:ac:36:d6:ee:57:89:7f:a2:
         88:f4:72:cd:cb:e4:32:4e:26:e3:df:ca:de:0e:6b:86:89:7b:
         3c:c2:91:ed:a1:57:d4:bd:67:fb:31:5a:b1:42:82:11:38:68:
         ba:53:bd:92:9e:9a:9b:9e:65:1c:72:dc:b7:b6:ca:81:34:1a:
         fa:10:cc:06:d1:54:9b:40:56:4a:f1:bb:9c:7c:49:48:05:ca:
         f1:57:36:9a:74:37:19:4b:8e:5b:db:1a:b0:4d:2b:8b:a4:13:
         cf:56:a5:9b:07:fb:a2:b1:b9:c8:c9:61:db:f2:b1:ec:8c:97:
         f7:f7:37:d8:39:7d:54:88:dd:3c:29:ec:46:67:ea:43:d3:a2:
         70:92:75:24:80:15:b8:30:24:46:d4:e6:c7:78:a9:8d:ee:8b:
         79:72:a4:3d:f6:cf:6f:6d:d9:bf:63:9a:e8:c2:3a:10:05:9c:
         0a:6b:3f:a4:28:a8:5a:e6:a4:69:3f:c7:68:15:6f:89:a1:91:
         af:f0:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:35 2024 by rpki-client on console-ams.rpki-client.org