Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File:                     jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier:          qlTHfeAeJBi/eQlZIKmhj7tFA7BxNgt9Mkcjs11rNyY=
Subject key identifier:   83:7C:3F:1B:5E:EA:84:BC:85:EE:B6:20:51:B3:7F:35:9F:8F:D3:70
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer:       /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial:       01901D46A04435EC2F003A7AA6345C650C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number:          05B1
Signing time:             Sat 15 Jun 2024 19:01:26 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:26 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:26 +0000
Files and hashes:         1: WLs8o4VngfOkLCPN7kqZZWMXGFk.roa (hash: SjZj2TPP1jbTr95vRAY2U1KbcMhQmioRsVfWijNENDg=)
                          2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: f/KUTmiWbCNGOsI5KB8FzyBIEtryzIHZj6UxNvwfKXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:a0:44:35:ec:2f:00:3a:7a:a6:34:5c:65:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
        Validity
            Not Before: Jun 15 19:01:26 2024 GMT
            Not After : Jun 16 19:01:26 2024 GMT
        Subject: CN=837c3f1b5eea84bc85eeb62051b37f359f8fd370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:32:d8:2e:20:da:43:63:b3:61:98:5b:27:
                    a4:2c:3c:98:1a:91:c6:d4:42:e9:0b:0b:0c:d6:ce:
                    ff:da:48:ff:b5:d1:a8:7f:f0:65:45:38:71:f4:33:
                    99:2a:59:60:de:04:1e:23:3a:35:22:2c:78:45:4e:
                    f6:15:72:20:52:04:e1:0e:4a:34:8a:8b:16:4e:06:
                    a3:97:d9:0a:26:9a:8f:f6:9f:e8:de:1a:29:0a:13:
                    1f:c1:9b:d1:18:bd:06:9d:95:fd:68:93:f3:a1:81:
                    06:7e:e7:41:f4:d3:40:4a:fe:1a:53:bc:c2:56:34:
                    b1:d6:27:ee:e9:02:65:7e:15:18:a9:f0:ae:2d:cf:
                    ef:0b:db:d5:ef:61:36:82:f2:cd:81:47:83:9c:62:
                    33:20:9d:b7:4e:98:83:a6:04:00:40:9a:4d:d0:c4:
                    a1:91:3c:3b:52:98:88:56:19:34:d3:1a:70:28:f2:
                    9b:d1:5d:4c:5e:70:1f:63:98:00:e0:1e:ce:f5:91:
                    55:72:b1:c2:b8:02:a2:36:63:c3:25:2c:b2:ec:97:
                    18:9f:8f:23:68:bd:f2:01:c6:dc:f1:03:10:8f:70:
                    2e:c3:88:7e:4c:3e:62:74:dd:2b:41:c3:25:4f:96:
                    2a:cd:19:27:5d:8a:45:d4:37:bd:93:7f:4c:06:b5:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7C:3F:1B:5E:EA:84:BC:85:EE:B6:20:51:B3:7F:35:9F:8F:D3:70
            X509v3 Authority Key Identifier:
                keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3c:99:8e:dc:b7:53:60:01:a8:0a:e9:bb:2d:22:fa:7c:f9:
         46:ff:13:db:d7:13:74:9c:59:7d:3b:63:57:e1:f4:af:85:f0:
         45:29:24:6e:0f:9d:5c:79:13:ec:7b:48:62:0b:1b:29:67:79:
         da:90:12:77:8e:e8:ca:9f:79:6b:e5:0d:91:b9:ba:eb:8f:8c:
         4f:71:c0:dd:61:2c:8a:8d:4f:f9:18:db:1f:ef:64:87:77:f7:
         f8:01:51:43:5d:74:54:85:da:18:95:18:e8:67:de:cd:1d:18:
         ab:bf:1a:c9:8d:9b:59:f0:26:c3:80:aa:2e:6d:6a:e0:98:04:
         64:40:46:3d:6b:e0:55:6a:83:7f:00:73:5f:96:c0:4b:39:a4:
         05:33:85:73:b9:f7:b8:1b:43:db:06:07:61:c8:76:59:bc:09:
         de:ec:07:9a:3e:05:4f:d9:5f:75:8f:e1:df:ea:89:ce:b4:b4:
         72:8d:77:a5:36:31:2a:82:a2:c8:0a:94:5a:7f:ab:02:68:e6:
         e4:70:e9:cf:87:4a:3d:e6:24:57:6d:e3:9c:6e:fb:73:64:56:
         f6:b1:aa:57:f7:4d:a8:7a:35:6c:c3:16:78:a1:b3:59:59:e6:
         2c:c9:4d:8a:f2:06:ff:56:e7:af:a5:b9:05:22:bb:d3:e7:7d:
         b0:fd:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:25 2024 by rpki-client on console-ams.rpki-client.org