Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
File:                     jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json)
Hash identifier:          UU6Jyh6YdBnM81lLMc9eYUJcbo5tfw1mQjllkH8NgN0=
Subject key identifier:   E3:AE:7D:FD:01:E5:FE:88:13:65:C6:39:D9:D9:59:8E:05:C2:39:81
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Certificate issuer:       /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial:       01901CD80DD0B696ED3790EF5997A6B96C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 17:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:39 +0000
Files and hashes:         1: L-AmUMsq9Az0-dS3wr6hS7PpK_w.roa (hash: 4jweCMRkv8K5MgkTtkCibyhQZw4ikZTLLT5AMGnOPek=)
                          2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: wVF8IejHytGRRnnFN6PJTI6Ys6z9fgzWl26TNIGXcEU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:0d:d0:b6:96:ed:37:90:ef:59:97:a6:b9:6c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
        Validity
            Not Before: Jun 15 17:00:39 2024 GMT
            Not After : Jun 16 17:00:39 2024 GMT
        Subject: CN=e3ae7dfd01e5fe881365c639d9d9598e05c23981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:54:d1:a5:44:c6:eb:60:c1:71:d2:8a:c0:
                    08:07:93:d5:94:1e:8c:50:91:55:44:ee:40:cf:56:
                    b1:9d:1e:cb:c9:4c:7f:da:59:e1:da:d9:24:fb:0f:
                    aa:ce:44:ae:88:25:52:03:e2:c6:e7:b1:7b:ec:e6:
                    c1:f8:23:98:f0:17:86:34:1a:66:b4:ad:5f:59:d8:
                    cd:54:a2:8d:2f:6e:ad:6c:c5:c4:f4:a9:30:40:51:
                    60:a1:12:eb:0d:ba:21:14:9d:a0:6b:39:57:f7:2d:
                    ef:9d:4a:8a:ce:46:dc:76:30:a2:d2:31:e3:bd:8b:
                    73:e6:21:95:a1:39:0c:41:18:53:2a:bc:a5:09:cf:
                    0b:03:ad:35:54:07:3b:a6:ea:b4:45:1d:9d:6b:6e:
                    0f:e5:71:1b:b1:52:34:10:4a:4f:a1:d2:46:a4:98:
                    6c:bd:68:61:8c:e5:26:de:2d:be:2f:9f:2f:d2:9d:
                    4e:8c:99:67:d0:a5:3f:d5:53:a9:3c:09:0d:f5:36:
                    3c:e9:9d:4b:c4:9b:b6:cb:fe:29:9e:24:aa:a3:d3:
                    90:60:f3:a5:cf:28:a5:9f:f9:06:2b:22:06:80:1a:
                    c2:14:70:6a:23:ba:61:fe:32:6d:ab:32:1d:1b:46:
                    7d:9d:85:c7:6d:6b:1d:3e:d5:31:12:72:93:bd:91:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AE:7D:FD:01:E5:FE:88:13:65:C6:39:D9:D9:59:8E:05:C2:39:81
            X509v3 Authority Key Identifier:
                keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9b:0b:65:48:9e:c0:18:fd:04:0d:77:40:8c:47:d0:64:12:
         3d:c0:d8:84:3a:20:88:30:c7:5f:fe:f0:28:a2:dd:f4:4f:d5:
         38:e8:50:a7:e4:48:49:02:df:2b:16:9a:16:3b:71:d1:7a:62:
         fa:f4:9a:2b:4b:5f:a5:04:55:7f:64:ba:32:2f:cb:61:05:00:
         9b:12:b9:15:ec:18:d4:08:2b:d3:34:23:70:14:c4:29:da:ae:
         2d:e5:69:b6:f1:ac:6b:70:60:9e:95:7f:0d:b5:27:d3:66:45:
         1f:34:e4:ea:a9:f8:f3:bd:49:06:c7:62:c4:e3:3e:e1:ae:d8:
         c5:63:96:40:a3:15:47:fd:db:71:ec:5b:7e:2d:d8:4a:18:63:
         be:81:e5:0f:37:79:85:0f:f6:40:2d:59:fc:ff:d0:c0:fa:09:
         7b:2b:ed:f1:d9:74:06:23:c3:9b:6a:80:ee:c5:27:af:c2:03:
         fc:66:f5:ed:e5:13:79:73:7d:cc:3b:84:ad:f5:b4:3d:b8:9b:
         e1:d8:e9:66:0e:dc:32:57:31:25:67:27:f0:04:3a:01:cb:ed:
         aa:83:fb:38:a2:ff:04:1d:fa:71:0e:9e:fa:c7:56:ab:5f:d7:
         13:59:b1:dc:96:0a:ee:38:c9:ca:61:16:da:58:5c:e7:aa:02:
         bd:1d:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:02:42 2024 by rpki-client on console-fra.rpki-client.org