Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          FbEh0/cpDJIZzIjaT/gNbe/6OGe8z803BMpY9VkN0NM=
Subject key identifier:   0A:F1:A9:D7:3D:19:5A:A1:CB:EB:F9:5D:97:36:6B:EB:B2:A4:25:CC
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       019045669A6B6AB42BDFE2263C04812473F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          11D9
Signing time:             Sun 23 Jun 2024 14:01:10 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:10 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:10 +0000
Files and hashes:         1: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: KH1xTIe/JxqnQUsc3jzpaob9vgZdtNRKQVQUuSzxM8Y=)
                          2: n7Ehr3QdD_NucZRZQWOJHB4xgGo.roa (hash: A9YPmsu4cLdQoCSCB0URzsu51gDu0jxzKcukhG6m8bw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:9a:6b:6a:b4:2b:df:e2:26:3c:04:81:24:73:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: Jun 23 14:01:10 2024 GMT
            Not After : Jun 24 14:01:10 2024 GMT
        Subject: CN=0af1a9d73d195aa1cbebf95d97366bebb2a425cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:82:0e:6c:5b:0d:32:5a:c5:10:b6:61:e9:35:
                    33:1a:f0:34:c8:f2:36:cd:9a:a0:e0:32:3f:55:d1:
                    93:3c:50:3f:f1:7e:0d:a7:98:97:c5:86:22:32:e7:
                    eb:cc:eb:c9:c9:d3:56:aa:83:f4:d7:e2:3f:e9:04:
                    e6:9e:28:26:31:a4:bd:44:7b:8d:30:50:f9:6f:94:
                    74:ed:0a:a2:7d:63:6e:71:19:ab:73:b4:3a:2a:f3:
                    e7:a8:89:a3:10:f9:bc:68:89:c5:f3:04:03:d8:e2:
                    ff:e5:92:28:57:f6:68:3f:9b:8e:a9:b3:77:73:1c:
                    e8:8e:fc:04:40:fc:aa:87:81:51:54:b7:e9:03:ce:
                    03:68:7d:7b:9b:75:87:a3:4f:b3:7d:b7:70:f5:b5:
                    15:de:3c:78:82:df:ef:31:8e:de:b1:1b:ad:3c:74:
                    69:6f:31:05:08:0e:b7:a9:4c:5a:a9:f3:98:34:c6:
                    23:0e:0e:e4:d8:2a:1f:43:8a:be:88:99:eb:ce:61:
                    0e:cc:3a:73:62:46:3e:88:9d:84:cf:8b:f9:bd:91:
                    a3:e1:3e:46:ac:0a:60:d1:c7:45:0d:bf:37:a8:a0:
                    5a:7d:66:64:11:72:84:bb:12:ac:c3:f8:86:31:f6:
                    36:f5:7f:ba:0b:1c:11:84:88:ff:f5:0b:40:7e:c4:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F1:A9:D7:3D:19:5A:A1:CB:EB:F9:5D:97:36:6B:EB:B2:A4:25:CC
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ed:63:f2:f7:e8:2d:ac:e7:69:33:20:53:a3:29:36:08:76:
         48:08:b0:f8:a9:33:92:cf:36:67:fc:1a:42:5c:7d:a9:0e:3e:
         79:09:b0:cb:2e:67:85:e8:10:86:dc:bc:40:88:83:1e:91:b2:
         5f:71:b2:de:f4:17:74:61:ab:01:98:cc:1b:eb:d6:81:77:d5:
         c7:db:8d:7a:05:38:76:4b:06:5d:e7:ce:92:83:b2:89:43:58:
         e8:7a:9c:79:1b:6d:e6:28:d9:80:dd:3e:d5:6a:71:46:b0:31:
         1e:f1:3b:bc:be:ea:66:ec:b4:b7:11:5d:1f:85:bb:d8:8d:ea:
         48:4f:f8:ae:5f:51:f6:52:ba:e0:48:72:42:18:ca:81:02:7c:
         1d:95:aa:d3:bb:14:88:07:bc:62:f4:2c:3b:7c:3d:72:ea:d3:
         1f:fc:78:95:95:60:67:4f:c4:77:84:b6:93:07:82:f3:0a:43:
         0b:05:a7:3a:fe:a5:21:e6:46:99:22:59:88:56:c4:c1:7a:c6:
         d8:01:2a:f4:35:48:b8:b2:74:30:bd:39:e9:d4:ca:21:bd:28:
         dd:f8:9c:40:e5:f1:16:7b:c4:3c:a9:35:d7:e3:96:1d:8a:3b:
         f0:4c:ea:7c:5b:6a:81:39:1d:c5:3b:b1:b6:a0:0b:b4:37:76:
         1c:74:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:35:42 2024 by rpki-client on console-ams.rpki-client.org