Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
File:                     JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json)
Hash identifier:          Capy3j84vIUkmcwjGIlQ+7GNvAqVSe58qRvTu/XbWiw=
Subject key identifier:   C4:C1:9F:4C:3B:DE:72:2A:4B:E6:00:63:E4:3B:BD:B2:05:FF:BD:41
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Certificate issuer:       /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial:       01901F3498F3FFFC4BA4B1AAB39A2200D83F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
Manifest number:          0406
Signing time:             Sun 16 Jun 2024 04:00:58 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:58 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:58 +0000
Files and hashes:         1: HqiXn2VdzRY4ADXh4LHC_5GDBRQ.roa (hash: DleGgOYgTUs5KdclgG1PWq0idI47KwW+2iFXOMoNWEQ=)
                          2: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: 5WqpMZsNK5K31K349mBv6Ydfpniv9CfVUX3ken83md4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:98:f3:ff:fc:4b:a4:b1:aa:b3:9a:22:00:d8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
        Validity
            Not Before: Jun 16 04:00:58 2024 GMT
            Not After : Jun 17 04:00:58 2024 GMT
        Subject: CN=c4c19f4c3bde722a4be60063e43bbdb205ffbd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:b9:0f:60:12:65:ef:8f:08:06:c4:07:55:
                    8a:3c:71:0f:fa:0b:41:38:de:93:0b:e9:df:82:f4:
                    6b:f7:92:33:19:ce:21:d4:42:ce:8a:72:b8:7a:dc:
                    73:9a:a9:b2:5e:36:ef:d2:98:9d:e5:2b:e6:a0:72:
                    a9:be:7a:e8:f7:3e:6a:90:5e:be:7b:c6:05:ce:d1:
                    db:8b:ed:a1:f0:f3:c3:2a:2d:ee:cb:f8:1c:a8:fe:
                    58:76:2a:3f:74:05:59:f9:3e:5a:76:39:75:67:13:
                    a8:d7:60:2d:44:30:bb:29:56:87:4d:55:5a:94:bd:
                    e1:2d:e8:d1:0b:7a:06:ef:21:dc:c3:cf:94:40:e9:
                    28:7f:0c:1d:4f:86:e0:4e:78:5f:52:58:6f:3f:15:
                    18:ce:94:3c:ba:f3:59:dd:8b:b2:a2:08:16:bb:bf:
                    1f:d5:6e:c0:17:bb:dc:8f:28:ec:55:2a:0d:97:62:
                    26:6c:03:80:17:a0:00:0c:c4:6d:89:c6:43:71:e7:
                    6c:50:fb:6b:c4:69:8a:40:3b:ac:29:79:56:f2:33:
                    72:eb:a3:44:61:5a:71:89:7a:7c:a2:fa:cf:46:64:
                    a6:46:28:b5:80:3f:a3:8a:17:d8:10:33:77:ed:6f:
                    9f:9b:5a:02:d4:bf:b6:c3:72:a6:21:21:11:12:9f:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C1:9F:4C:3B:DE:72:2A:4B:E6:00:63:E4:3B:BD:B2:05:FF:BD:41
            X509v3 Authority Key Identifier:
                keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:bc:07:ef:0c:a7:c4:90:36:f7:0d:d6:8a:00:e7:3c:21:
         31:02:0a:33:37:5f:8d:58:af:d0:e2:83:c6:2c:65:18:bb:da:
         49:93:30:3a:4e:d8:1b:54:98:78:d7:84:a0:0c:53:17:22:d8:
         3c:bc:c1:9e:1a:0a:06:96:03:b3:31:38:a3:2c:d8:44:5a:4a:
         d6:02:3a:d9:6a:65:24:a0:48:f8:a7:37:2a:e0:79:87:e9:c0:
         03:6d:9c:f0:db:37:0f:33:4f:46:ea:48:1b:14:3f:96:c7:25:
         ad:c3:7a:e0:d3:d3:c8:66:1f:72:94:fc:64:4a:e1:e6:06:a7:
         05:21:8e:9f:14:1a:32:c0:c7:14:ba:6d:78:fa:2f:f7:ee:98:
         3c:a8:07:86:63:1e:35:94:4c:04:3a:73:e8:96:58:0d:93:c5:
         d8:71:dd:ee:22:fd:1b:2e:1d:df:03:4b:bf:cd:aa:51:22:85:
         9d:03:3d:a0:f9:38:fe:f6:47:06:12:04:66:36:9f:35:17:21:
         67:fa:30:42:f4:7b:63:87:fb:3f:06:96:ae:4d:ea:6b:e6:90:
         89:0e:c3:f5:e9:de:40:6b:46:2f:a4:c8:44:20:41:2b:6c:98:
         f3:c3:29:22:bf:cb:8d:47:e0:e5:43:63:22:ad:02:0d:ab:c9:
         89:b8:cb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:36:53 2024 by rpki-client on console-ams.rpki-client.org