Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File:                     jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier:          bTWtqnWTco/6TfWyWDnsgQW80bf3+VC+VdF5dWqpknM=
Subject key identifier:   52:1C:DA:53:50:92:9D:0D:6F:E6:35:F4:93:BA:D0:D9:C8:85:6D:7D
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer:       /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial:       01901EFDCA7CF78559A7658A5F898605FDF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number:          0E60
Signing time:             Sun 16 Jun 2024 03:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:07 +0000
Files and hashes:         1: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: D1V92k4pnZD3QWDvSgw5mj0IELweWi8Fi99owsNHJV8=)
                          2: lLAuXQBa34BSpcVwh8hzyI_P7vs.roa (hash: Ux0V/mR0zQm5R/BxtbjHp138ShTX2cTsJ/RVo8gCPTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ca:7c:f7:85:59:a7:65:8a:5f:89:86:05:fd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
        Validity
            Not Before: Jun 16 03:01:07 2024 GMT
            Not After : Jun 17 03:01:07 2024 GMT
        Subject: CN=521cda5350929d0d6fe635f493bad0d9c8856d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:37:f4:b0:03:64:06:9b:99:ab:87:4e:da:
                    db:d7:23:8a:b5:78:6a:1d:a7:95:0e:97:78:c9:70:
                    ce:91:ff:d4:ce:8e:8b:b8:7e:ce:66:57:71:90:2e:
                    58:54:fa:b7:c5:aa:40:88:8a:68:48:ce:1d:e9:07:
                    e1:51:0f:fd:75:6d:ab:07:39:96:51:28:52:55:85:
                    88:aa:4f:b9:94:7b:ed:3b:97:5d:2a:0c:25:e3:94:
                    97:da:20:70:bb:3a:1d:28:7a:76:2b:27:29:88:21:
                    2f:8f:6b:da:30:ec:8a:d6:a6:b7:2e:3e:f8:52:a1:
                    fb:7e:f1:02:a5:29:ac:c1:6f:44:87:ee:6c:3a:61:
                    ea:fa:b2:2e:63:a1:b6:fe:2d:a0:da:31:fc:03:0b:
                    2b:8d:64:39:c5:b4:81:a8:0d:99:db:32:fc:cb:14:
                    c1:0e:fc:31:69:c2:33:1d:22:8e:bf:88:57:86:0c:
                    6b:83:73:06:f8:8b:02:ff:f1:7b:0f:ea:6a:09:84:
                    c9:fd:36:c7:f0:3a:4a:e0:d2:26:4a:41:ab:97:92:
                    e4:49:8e:26:f3:2e:13:87:51:c6:43:e4:0c:45:86:
                    77:1b:aa:a9:60:42:bd:0b:b6:d4:95:d0:df:72:94:
                    f1:aa:5f:36:f9:5d:7a:bf:5b:47:e0:81:5f:ea:13:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1C:DA:53:50:92:9D:0D:6F:E6:35:F4:93:BA:D0:D9:C8:85:6D:7D
            X509v3 Authority Key Identifier:
                keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:15:20:11:97:bc:70:56:e4:64:2f:bd:05:f2:db:6e:07:78:
         b1:3f:6d:83:9b:3a:bc:0a:ab:3b:a7:6f:72:3c:32:7f:c3:c2:
         23:45:de:1e:ac:1d:06:08:68:0a:fa:e5:b8:c2:c9:63:d5:63:
         e9:a7:cb:54:0b:c8:9c:11:bf:8d:ce:be:4b:09:53:ec:86:ab:
         bf:71:91:04:0b:d0:f0:1b:2d:a7:26:38:bd:6a:ea:e6:06:10:
         e6:d1:12:25:b0:a8:c2:89:f1:17:6f:94:32:f6:92:83:2f:0a:
         9b:83:41:fa:a7:89:7b:f3:f7:7b:5c:68:ff:9e:6c:34:56:0a:
         2d:51:25:85:a8:fd:69:ca:b6:c5:98:87:23:f1:90:47:4a:96:
         57:c8:a8:0d:4a:f0:4e:01:30:cc:d6:97:f2:05:2d:ca:f8:40:
         50:67:c4:e6:dd:4e:66:f9:d4:34:2d:14:0d:40:3d:24:05:8e:
         62:e8:dd:cd:d7:ca:f4:3a:c3:30:b0:e4:e7:4c:9d:4b:0c:62:
         b6:0e:83:9c:b0:46:2d:9d:3c:4e:32:97:bc:4a:15:35:6b:a5:
         f9:7b:22:14:22:2f:74:3d:96:93:5b:8a:75:1d:ce:03:fc:bc:
         d7:7b:2b:42:5d:a2:af:39:ce:28:47:ff:28:2c:94:00:17:37:
         07:f4:01:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/cp894VZp2WKX4mGBf3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDdlY2Q3NjY2Y2NlZjkxZTgyZjdlY2JjZTBiYTI4NTMz
NmZiNDUwHhcNMjQwNjE2MDMwMTA3WhcNMjQwNjE3MDMwMTA3WjAzMTEwLwYDVQQD
Eyg1MjFjZGE1MzUwOTI5ZDBkNmZlNjM1ZjQ5M2JhZDBkOWM4ODU2ZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkQ39LADZAabmauHTtrb1yOKtXhq
HaeVDpd4yXDOkf/Uzo6LuH7OZldxkC5YVPq3xapAiIpoSM4d6QfhUQ/9dW2rBzmW
UShSVYWIqk+5lHvtO5ddKgwl45SX2iBwuzodKHp2KycpiCEvj2vaMOyK1qa3Lj74
UqH7fvECpSmswW9Eh+5sOmHq+rIuY6G2/i2g2jH8AwsrjWQ5xbSBqA2Z2zL8yxTB
DvwxacIzHSKOv4hXhgxrg3MG+IsC//F7D+pqCYTJ/TbH8DpK4NImSkGrl5LkSY4m
8y4Th1HGQ+QMRYZ3G6qpYEK9C7bUldDfcpTxql82+V16v1tH4IFf6hN8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIc2lNQkp0Nb+Y19JO60NnIhW19MB8GA1UdIwQY
MBaAFIwH7NdmbM75HoL37LzguihTNvtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NDg0MDYtNTgyNi00ZGJjLWI5M2Ut
NWQyN2M3NWFhZTZmLzEvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NDg0MDYtNTgyNi00ZGJjLWI5M2UtNWQyN2M3NWFhZTZm
LzEvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhUgEZe8
cFbkZC+9BfLbbgd4sT9tg5s6vAqrO6dvcjwyf8PCI0XeHqwdBghoCvrluMLJY9Vj
6afLVAvInBG/jc6+SwlT7Iarv3GRBAvQ8BstpyY4vWrq5gYQ5tESJbCowonxF2+U
MvaSgy8Km4NB+qeJe/P3e1xo/55sNFYKLVElhaj9acq2xZiHI/GQR0qWV8ioDUrw
TgEwzNaX8gUtyvhAUGfE5t1OZvnUNC0UDUA9JAWOYujdzdfK9DrDMLDk50ydSwxi
tg6DnLBGLZ08TjKXvEoVNWul+XsiFCIvdD2Wk1uKdR3OA/y813srQl2irznOKEf/
KCyUABc3B/QBcw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:31 2024 by rpki-client on console-fra.rpki-client.org