Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File:                     J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier:          nONlR/fTuMTMzRYictpGTTn80IMXeGFCjga4NvaM3Og=
Subject key identifier:   1E:2D:C1:3C:B6:AF:81:EB:12:5B:61:9D:F6:AB:D8:FA:C2:F4:49:5B
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer:       /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial:       01901DEBEBDD222888A0E9C2C86585AC75FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number:          07DA
Signing time:             Sat 15 Jun 2024 22:01:58 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:58 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:58 +0000
Files and hashes:         1: EdLZcuUoPIggdSjFqbcY9A2Zww8.roa (hash: 4OCPDPJjqE9tjOZS/qChZOMSj0voQLSo3u5rgABTUHM=)
                          2: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: gH/EGSsbgDBWbBKNIOKzEgbYKQmm79ibnyoRw+uyFVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:eb:dd:22:28:88:a0:e9:c2:c8:65:85:ac:75:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
        Validity
            Not Before: Jun 15 22:01:58 2024 GMT
            Not After : Jun 16 22:01:58 2024 GMT
        Subject: CN=1e2dc13cb6af81eb125b619df6abd8fac2f4495b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:ee:31:b8:f2:a9:44:f5:c0:64:73:ec:1f:
                    fd:3f:fb:6a:f5:1f:30:bb:aa:e8:bc:6e:75:88:6b:
                    d9:17:e6:43:3e:74:d4:b9:77:08:34:5f:49:35:31:
                    eb:fa:a1:cf:9c:af:e8:22:c1:8d:59:3e:1a:d7:4e:
                    6e:f8:04:b5:32:60:6f:fb:44:8c:52:9e:be:df:27:
                    f4:9b:90:74:fb:6c:60:bf:15:5a:67:c4:8d:12:ae:
                    ae:e8:9e:92:4d:f4:4a:b2:7f:66:44:24:5c:22:50:
                    5e:c4:ef:50:ab:76:38:ed:8d:7f:83:46:d4:cd:92:
                    ab:b7:03:e2:cb:91:c7:6b:a5:34:aa:94:9a:0c:7e:
                    96:27:cc:d3:f5:d2:af:4b:66:1a:26:65:e5:9b:2d:
                    b8:b8:f5:25:c3:a5:a8:fb:0a:d0:27:5f:27:47:98:
                    a0:25:6d:05:00:e4:30:e2:ba:0d:1c:ae:43:13:fd:
                    91:25:7a:ed:27:d8:8c:84:98:fb:52:3d:15:33:5c:
                    63:75:be:54:e1:7b:f3:bd:3f:73:c1:cc:1e:d7:5f:
                    63:ad:99:b6:88:64:82:06:2c:5a:12:a8:c2:79:85:
                    ef:d6:52:11:ac:91:b6:01:13:4e:59:5c:16:db:ad:
                    af:e4:19:c1:37:76:44:83:1c:c1:4c:6e:50:25:02:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2D:C1:3C:B6:AF:81:EB:12:5B:61:9D:F6:AB:D8:FA:C2:F4:49:5B
            X509v3 Authority Key Identifier:
                keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fc:34:43:7a:b2:77:3f:c6:bd:3d:f0:b1:07:1c:44:2f:07:
         b9:40:d2:61:17:9e:88:ae:81:01:f6:8e:bd:bf:81:1e:9a:c6:
         19:2b:ad:20:bc:9f:7d:99:64:70:99:e0:8a:cd:e5:89:95:ce:
         0b:da:dd:d9:29:c4:a2:52:0b:d2:83:ad:e6:8e:f1:f7:5f:fd:
         ce:e0:ee:4a:d5:57:45:f7:fd:98:98:ce:5a:e7:94:35:c4:ab:
         26:3a:54:f2:c0:7f:a5:fc:39:16:82:6f:0a:9b:3e:19:a4:28:
         79:09:03:0a:cc:a4:74:0b:e8:75:54:06:3b:5e:2e:86:4e:37:
         89:0f:dc:83:3c:ea:3d:38:a4:19:e5:55:32:74:9b:5a:12:8d:
         3b:2e:d8:ac:fe:43:9a:6b:39:00:ea:2e:51:35:7c:b9:be:b7:
         de:16:15:75:be:4a:a4:e5:5d:7d:ee:81:c8:3b:18:a2:9a:c4:
         4c:0b:9b:5e:1e:09:57:8f:cf:2b:cf:d2:91:c2:c6:56:fe:15:
         9f:15:92:82:b0:62:5a:cd:f2:ec:33:01:ba:b8:bf:df:e9:1b:
         8b:f6:e8:7c:8b:e3:9a:53:11:77:94:21:e1:7e:fc:6f:b1:0b:
         a9:12:36:5b:10:a3:56:9c:5a:de:89:46:08:4b:38:39:df:e1:
         5c:5b:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:27 2024 by rpki-client on console-fra.rpki-client.org