Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
File:                     jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft (raw, json)
Hash identifier:          GD9TayisuSGtcpoZAwbX/6oyYI/eJFkt0Ie9VWQGAZQ=
Subject key identifier:   BB:0B:8C:A7:DC:AA:4F:F0:A4:53:24:76:81:5F:93:E9:99:24:ED:05
Authority key identifier: 8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
Certificate issuer:       /CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Certificate serial:       019033CE1E30ABA0DDF37EFAFDAD9D19E10D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
Manifest number:          0B92
Signing time:             Thu 20 Jun 2024 04:01:04 +0000
Manifest this update:     Thu 20 Jun 2024 04:01:04 +0000
Manifest next update:     Fri 21 Jun 2024 04:01:04 +0000
Files and hashes:         1: QJg-CbaRmp7x7cWECceto1So7ig.roa (hash: VCDbu3ps5PQjvpKEg6A+yNRmqHLrVBgU+3KXmVTaxIg=)
                          2: aoIUzEs6QhPKBDGrylsB49coCpQ.roa (hash: njsc2yMTQjcEgBeAXcbusvFBe4XeVh5KYG+KfigxNV4=)
                          3: jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl (hash: WxOLp1rnX+A2Wmb3bEHwcWXVZq7LDX5f/pN3hXQwVOU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:ce:1e:30:ab:a0:dd:f3:7e:fa:fd:ad:9d:19:e1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
        Validity
            Not Before: Jun 20 04:01:04 2024 GMT
            Not After : Jun 21 04:01:04 2024 GMT
        Subject: CN=bb0b8ca7dcaa4ff0a4532476815f93e99924ed05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:71:bc:eb:a7:7c:7f:01:8b:84:df:13:e7:
                    d0:73:b6:b6:75:5f:09:9a:49:21:7a:53:c0:f4:78:
                    ab:d1:e8:52:59:95:79:f5:99:96:0a:f8:de:dc:d8:
                    51:51:0e:cd:7e:cd:4d:20:a0:7f:31:b2:ea:b8:80:
                    8c:56:fb:18:d6:4a:3c:75:78:a0:06:c5:1b:f0:b9:
                    5b:6a:d1:7d:c0:d4:65:a0:04:f4:1c:0f:d9:2e:a5:
                    1b:56:ce:5d:a4:a3:68:c8:bc:98:20:f3:45:66:29:
                    81:d1:87:ce:78:02:80:d6:40:55:5b:c6:00:c8:27:
                    0d:d6:13:e0:5c:81:c9:91:69:04:7c:d2:b2:dc:ad:
                    23:48:f0:eb:04:d8:da:1a:e7:de:17:7e:90:9b:32:
                    3d:3f:23:9b:8d:ff:17:d0:d7:a2:d4:6a:aa:fb:28:
                    11:d4:dc:37:0a:1a:ef:52:8f:90:82:fa:82:9f:9a:
                    ad:b5:6b:c7:17:bb:40:56:8d:e4:35:79:78:0b:d4:
                    e0:c0:65:bb:73:24:dc:f6:90:da:1d:0c:7c:43:22:
                    0b:f7:21:fb:8b:27:ef:27:4e:92:03:36:ff:a2:dc:
                    b5:93:f6:47:9a:4c:d0:d5:41:35:98:8d:39:68:72:
                    51:53:08:2a:78:2f:22:55:6c:f1:15:85:24:4e:a0:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0B:8C:A7:DC:AA:4F:F0:A4:53:24:76:81:5F:93:E9:99:24:ED:05
            X509v3 Authority Key Identifier:
                keyid:8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:18:47:58:24:91:a1:ce:ff:04:fd:72:b1:a4:46:0a:d3:f8:
         e3:08:67:b2:69:64:07:14:9a:1a:00:f8:6b:ba:e0:d1:8d:9d:
         ba:2e:7e:13:79:48:47:60:1f:71:67:41:c8:2a:57:bb:43:4c:
         86:04:bd:f0:06:81:95:cf:ee:26:54:42:5c:d5:da:41:29:ad:
         ef:45:8c:73:9b:34:40:02:03:b1:c2:16:d0:71:cf:cc:cc:11:
         9f:86:89:58:b1:7d:17:59:63:3c:fa:cd:b1:be:c8:a3:b6:40:
         37:43:6f:79:92:2a:56:50:97:f3:18:9b:e0:88:0d:16:0e:43:
         a9:21:54:33:b0:df:81:a2:3e:04:e5:c1:e5:1c:b9:46:e5:11:
         8a:e4:e9:5b:55:f4:8b:a1:c0:4c:28:17:34:05:c9:e8:96:a3:
         34:2b:15:87:29:d1:2b:c0:e4:fa:59:56:14:7b:d9:0e:ce:df:
         64:ba:70:6c:80:dc:d1:92:99:6a:2e:4d:ad:11:76:08:a6:86:
         83:27:d6:ff:f6:90:b8:14:54:39:f2:c6:71:18:be:0f:09:65:
         8c:e1:b6:cd:22:17:9c:c9:5e:82:d4:54:13:6d:7d:ef:11:2f:
         7b:9f:41:9d:c0:08:dc:75:b1:15:a8:57:49:e5:43:c4:62:7d:
         4c:32:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:51:51 2024 by rpki-client on console-ams.rpki-client.org