Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File:                     jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier:          +scZx5cNsbhWs7MiX8lU2D405e3R4HEXfmqvwnhtcxU=
Subject key identifier:   D7:76:CE:71:C4:09:90:E6:1B:0B:C6:C9:D9:23:50:F4:45:38:42:AD
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer:       /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial:       01901D4622521E03CFD42A3600D04BBD996D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number:          0289
Signing time:             Sat 15 Jun 2024 19:00:53 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:53 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:53 +0000
Files and hashes:         1: C-xVAWonogCe9hR-gFCsuORZlu0.roa (hash: oTUEmbElaXhqLv5RlpzLBmb+fHJr8yuDucHXNCnuqoo=)
                          2: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: Bm3WltC4cub7MgoyKO5KDKPF4VOEpsYNBbLAS8umW4w=)
                          3: yTQcNvt29EEBK8wzO244GuYtg_4.roa (hash: opojTvpCvHGSRJJilkuj0ADM9wJOX/ZR6+iAP3baoMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:22:52:1e:03:cf:d4:2a:36:00:d0:4b:bd:99:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
        Validity
            Not Before: Jun 15 19:00:53 2024 GMT
            Not After : Jun 16 19:00:53 2024 GMT
        Subject: CN=d776ce71c40990e61b0bc6c9d92350f4453842ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:46:db:ca:d9:fd:9a:46:9e:e8:d4:82:82:
                    29:58:a2:71:fc:38:61:89:92:d8:93:8a:2a:b3:b6:
                    7f:a3:2b:eb:85:60:c0:9a:79:20:4d:44:35:12:02:
                    f6:3d:5c:03:a8:ba:f2:f5:e7:57:32:46:f4:a2:3a:
                    ca:96:99:c6:00:a3:cb:e6:de:10:51:11:db:6d:e3:
                    87:05:27:cb:05:c3:d2:68:7a:47:f2:a8:2f:dc:3b:
                    49:a5:e7:45:84:83:e0:ed:05:31:14:25:4a:8c:a0:
                    a0:67:dc:da:c4:20:59:62:d6:e4:4c:35:eb:ff:a0:
                    da:25:f2:9c:c6:f2:7f:23:32:a3:d0:46:94:03:93:
                    af:91:e6:60:30:18:47:9e:f4:89:ed:07:02:7f:44:
                    ed:d5:3f:3e:3b:c1:f7:ae:5b:70:79:e3:6d:83:41:
                    05:c1:c0:44:f7:94:cc:67:e0:56:ef:74:39:cf:43:
                    64:69:d6:55:26:cb:99:8c:fe:74:95:9a:29:c9:f3:
                    0c:8e:23:59:44:00:0f:20:93:96:5c:0c:3b:04:b4:
                    d3:b3:df:8a:00:b2:7b:a6:69:56:bf:bf:3e:44:fa:
                    90:e0:15:be:1e:5c:e0:c1:fe:e5:7d:b8:35:85:a8:
                    bf:4e:78:8e:9e:e8:e8:3d:4a:49:87:b5:bb:3d:2f:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:CE:71:C4:09:90:E6:1B:0B:C6:C9:D9:23:50:F4:45:38:42:AD
            X509v3 Authority Key Identifier:
                keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:54:64:e9:1b:ce:ce:6d:d2:e2:ca:40:9b:65:7f:ac:47:
         59:95:69:1e:7a:da:70:9f:fd:b3:63:2f:be:b9:b8:50:2c:0c:
         9e:ef:a5:69:c8:22:3d:e4:fe:fd:d0:05:97:fd:02:31:e3:79:
         be:0c:ca:6c:9b:b5:00:8f:26:88:b6:b0:4d:dc:de:88:62:42:
         8e:d6:09:40:5c:bf:74:8c:60:05:95:a4:c8:19:6e:ee:f9:c7:
         6d:4d:0a:f1:c7:e3:8f:67:dc:3e:4d:04:8b:e5:99:d8:14:2f:
         ff:21:f1:45:44:d9:e6:51:d3:23:87:b2:c0:64:94:23:d1:8c:
         94:13:fb:52:cd:66:ed:77:98:1f:74:ea:7b:a6:ba:4c:ef:e8:
         f7:e1:ee:31:5d:68:c6:8d:e3:0e:f3:2b:72:cd:2a:3a:54:d7:
         b2:86:a6:13:4d:19:02:f2:c4:f3:7a:2f:79:fa:b1:e5:de:4f:
         50:c3:f4:0f:d9:e3:74:ab:cc:56:0a:20:b0:fe:c3:20:b1:c1:
         ba:a3:81:d3:23:16:be:c9:37:34:d1:ea:26:e0:86:9e:ee:3b:
         c2:2e:f4:4b:d5:29:b6:cc:5a:e3:5a:1e:84:97:41:cc:ce:c5:
         7d:23:1b:da:d4:c9:d2:0a:35:69:3f:62:5c:b8:07:92:b1:5f:
         7c:68:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:00:59 2024 by rpki-client on console-fra.rpki-client.org