Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File:                     jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier:          wr9R2bpaFDvlWFiF281ywwHng3/naY6BkRxbc18rNow=
Subject key identifier:   38:D0:54:C9:8F:CD:2D:C3:CA:8D:30:4D:8E:E1:98:65:BB:45:27:90
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer:       /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial:       01901DEC4F9DCBEC7A54C9118F9D3847C243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number:          0EF3
Signing time:             Sat 15 Jun 2024 22:02:24 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:24 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:24 +0000
Files and hashes:         1: GQDcURubTYCXm3KOtwNOhGswcvc.roa (hash: 1qwvSL3/U0Cc00/AlhOzYHPCuuo1S7Ufs8RS+pAelNU=)
                          2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: o/JCrcD9pa/HAe6JNHklRpTr4dPlRjHz1atSFpUMdQs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:4f:9d:cb:ec:7a:54:c9:11:8f:9d:38:47:c2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
        Validity
            Not Before: Jun 15 22:02:24 2024 GMT
            Not After : Jun 16 22:02:24 2024 GMT
        Subject: CN=38d054c98fcd2dc3ca8d304d8ee19865bb452790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:b0:de:b2:81:25:8d:c6:9f:f8:79:1b:6b:
                    a8:39:98:4d:7d:fb:44:55:f0:74:2e:18:0f:83:98:
                    c1:97:ab:90:4a:d8:13:a0:81:23:a2:8e:32:4f:c3:
                    e1:4d:ad:97:e6:12:54:43:1d:b6:e5:eb:93:bb:df:
                    24:ff:dd:46:96:16:11:99:76:53:c8:9d:ed:86:9d:
                    8e:3b:bc:c1:e4:e0:27:3e:0e:7c:f5:c9:bb:86:df:
                    b3:a6:91:1c:d9:d5:d0:63:7f:8c:11:c7:f5:11:31:
                    14:dd:f9:a0:cf:24:77:c4:83:5f:ea:2e:f7:63:5d:
                    3f:8f:0e:31:d7:09:4b:e0:21:ea:62:1f:7c:00:e3:
                    00:df:91:49:28:73:9b:74:36:41:78:f4:d2:d3:8c:
                    b6:21:ed:c2:af:08:54:d1:24:66:2d:c0:15:72:1d:
                    30:18:3b:ef:14:9e:98:5a:10:8b:7d:eb:7f:01:44:
                    4a:09:06:1b:7f:2f:59:ce:fd:05:8f:d9:13:bc:84:
                    3e:34:51:ef:80:d3:13:c0:8c:ca:7f:71:6e:a5:f3:
                    8d:6c:dd:3b:c0:3e:b1:d3:06:cf:57:9a:f0:8f:72:
                    0b:8e:e7:6d:a5:56:82:5b:de:99:cd:9a:2a:9b:90:
                    27:df:6e:d5:94:a4:53:ed:a8:5c:d6:54:be:35:fe:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D0:54:C9:8F:CD:2D:C3:CA:8D:30:4D:8E:E1:98:65:BB:45:27:90
            X509v3 Authority Key Identifier:
                keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:c7:96:95:f4:34:71:ac:60:b7:5b:f1:c2:5c:f9:a8:7d:
         37:75:f3:5a:83:93:bc:ca:80:f2:c0:96:73:06:c3:2d:92:2f:
         43:9e:ed:c1:f6:e3:47:0e:3b:70:61:b7:ad:47:45:39:61:68:
         17:f5:57:35:3b:7d:57:cc:9a:89:90:d5:a7:b8:48:0a:af:b9:
         6b:5b:bc:28:cf:b9:6d:86:88:4f:59:7c:5c:13:ed:e5:b6:67:
         15:2f:e4:93:ce:5c:e4:e6:12:c0:ce:55:54:fd:27:ac:7b:ae:
         19:df:17:54:f9:b3:83:4f:dc:9e:f3:06:40:7d:39:04:79:38:
         a5:d8:46:34:1b:56:5e:27:06:b7:52:09:16:86:da:b7:b4:b8:
         bd:d7:2b:28:0c:ac:38:7c:e0:28:76:55:a2:8a:3a:9c:bc:07:
         1b:d4:ea:48:9e:a8:d9:8a:8c:f5:9c:c5:1d:38:1c:93:a9:49:
         ec:97:72:9c:5a:31:59:a4:84:b8:46:d9:a8:86:a3:16:35:e6:
         4d:c3:e8:0d:51:53:a5:1b:af:37:7b:dc:20:89:cc:25:22:6e:
         ff:04:c4:c1:94:ec:f2:c8:07:be:31:4c:51:ca:a0:c2:a9:dc:
         08:a2:8c:20:64:19:5e:16:52:cf:de:e6:df:f2:4e:10:cd:45:
         7c:f2:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:08:11 2024 by rpki-client on console-ams.rpki-client.org