Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File:                     j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier:          lDoxNlVjuadpO1tg0xYizA1VzywNg/SJbTDH6qUj04M=
Subject key identifier:   8C:F9:DA:C3:21:73:57:78:8D:4A:07:2B:D3:F6:BA:D6:22:8A:04:52
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer:       /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial:       01901BFD62F719096FDB2FEE331919136636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 13:01:48 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:48 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:48 +0000
Files and hashes:         1: YlpRXRW2srYnz_9-V6hQll_Jiss.roa (hash: q08b9LunKHhxJvPm8QkX3cSSj4P3Tc/0dZtetsZB0Qg=)
                          2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: 1uJQrd4gQeiDK7xXKE5cbpy69YlZlrW83I/wTssz3Ng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:62:f7:19:09:6f:db:2f:ee:33:19:19:13:66:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
        Validity
            Not Before: Jun 15 13:01:48 2024 GMT
            Not After : Jun 16 13:01:48 2024 GMT
        Subject: CN=8cf9dac3217357788d4a072bd3f6bad6228a0452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:ac:92:7a:7d:69:a3:84:fb:65:9f:a8:05:
                    30:20:96:1b:12:93:5f:01:f6:cb:3c:ec:f1:f3:4d:
                    fc:b6:9d:03:e3:39:11:d8:f7:48:c2:5f:7f:3a:ba:
                    f2:c4:2a:e4:59:61:81:39:76:56:b1:5c:6f:1d:1a:
                    10:d3:77:ec:a0:9d:27:17:a9:94:70:5d:5c:a8:e4:
                    7b:61:d5:ac:ee:06:3c:2c:4e:58:97:b0:e5:56:49:
                    21:d5:23:03:f5:e6:c5:90:a0:8e:c8:0d:f0:14:dc:
                    6c:7f:74:a0:93:7b:3c:88:ef:e0:41:20:94:bf:34:
                    8c:5a:62:12:35:e4:30:a3:78:96:22:89:a1:9b:33:
                    58:ae:d3:e5:70:19:19:b4:8d:9d:05:e0:8d:c8:77:
                    26:b7:0b:86:a2:85:9f:3b:90:b1:11:06:01:fe:60:
                    18:af:f2:7f:91:73:d4:d6:b7:13:7b:72:0d:b0:53:
                    18:d5:f1:7c:b9:75:4f:8a:96:f9:c0:7b:84:3a:eb:
                    de:b4:8f:65:f5:ee:53:5d:b0:1e:4f:11:1a:63:69:
                    a3:14:f1:a3:68:4c:c2:d7:ac:19:0d:bf:45:c8:1a:
                    c3:17:0b:d3:ce:2d:a5:4e:2c:33:dc:79:6e:ea:02:
                    60:65:06:93:cf:bf:c1:62:67:a0:e6:ed:59:41:1b:
                    a6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F9:DA:C3:21:73:57:78:8D:4A:07:2B:D3:F6:BA:D6:22:8A:04:52
            X509v3 Authority Key Identifier:
                keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a3:06:89:a9:af:89:53:95:04:1e:29:df:5d:cd:3a:d1:cb:
         90:2d:cf:ac:07:0b:55:be:0d:59:4f:b7:e4:85:d3:ed:04:a0:
         f6:f0:5d:da:77:a9:37:3e:ec:ba:b2:75:d7:7e:e5:9e:fd:62:
         2a:ef:8f:93:87:ce:8a:31:90:e3:d0:27:23:bb:3b:9c:f7:22:
         be:af:59:68:41:ba:bd:6b:41:75:19:85:a6:66:43:ab:76:ea:
         41:9d:c3:5e:ba:bb:9e:85:7d:df:d9:0a:c7:7d:d3:43:70:32:
         64:52:57:06:db:59:e9:70:06:74:79:70:fa:b6:32:90:8d:7a:
         cc:88:5e:55:a0:1a:9e:dc:47:ef:93:06:a1:e8:fc:27:bc:81:
         16:4e:93:40:c2:b1:a3:2d:00:b3:40:48:23:01:66:71:ed:46:
         e1:4f:02:78:9e:40:2b:48:c5:40:92:45:2a:c9:aa:4e:0c:de:
         66:c6:9b:17:8a:25:27:d3:60:99:5a:cc:b5:8e:e5:7a:9c:48:
         2f:7f:1d:72:d6:5c:82:9c:85:0e:13:63:f0:b6:ed:37:98:29:
         29:cb:46:71:59:06:17:c0:77:6d:1f:cc:ba:e8:a5:eb:df:6c:
         94:0f:ec:c4:fb:fe:1c:a1:d8:86:b4:d2:e2:43:a0:3c:dc:21:
         41:33:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:38:29 2024 by rpki-client on console-ams.rpki-client.org