Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File:                     JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier:          02p5fPk1OjUwevrtl+NPTgp0kH53uEN5ylSkqNOILn8=
Subject key identifier:   FA:FF:AF:5D:7D:3A:F3:E5:0E:55:4F:58:11:42:5E:8D:E7:BE:66:82
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer:       /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial:       01901DEB0B74A962B214DB4BC05C7BB63367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number:          0C7C
Signing time:             Sat 15 Jun 2024 22:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:01 +0000
Files and hashes:         1: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: Xkv/qUIxkPeHAhr79YcXKLOwxy5zeaa+9rQN/ZLjvKk=)
                          2: U7D4TZTpDT8HLh7cA3VX7s7UwLM.roa (hash: lHErScciJYCx6ZKhuLnaAHIj3ArNIjAbGMParEdy3fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:0b:74:a9:62:b2:14:db:4b:c0:5c:7b:b6:33:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
        Validity
            Not Before: Jun 15 22:01:01 2024 GMT
            Not After : Jun 16 22:01:01 2024 GMT
        Subject: CN=faffaf5d7d3af3e50e554f5811425e8de7be6682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:21:74:1c:63:e6:fe:89:7f:af:ab:3e:f2:
                    c6:30:af:8b:e0:34:cc:50:ad:c4:76:4e:36:fb:f9:
                    b1:4e:67:04:ef:ba:c0:07:70:62:05:bc:98:7e:d2:
                    e4:35:3b:31:7c:2e:33:a9:3f:61:09:1f:9d:f1:8d:
                    ca:27:cc:d7:a8:56:f4:85:17:40:6a:40:cc:7e:39:
                    e5:6d:30:1e:de:fd:3c:10:21:c6:73:8a:c8:46:38:
                    85:8c:ef:ab:c5:9c:ce:e9:f1:4c:08:fe:f1:ca:17:
                    cd:21:09:dc:b3:b3:19:8e:59:b6:1f:61:53:3d:e4:
                    ea:29:aa:fd:23:02:20:dd:5b:e5:25:0e:83:f1:54:
                    4a:a3:04:eb:00:ae:f6:c5:b8:ae:7e:bf:33:00:db:
                    78:bb:2d:a2:21:07:57:46:64:8d:1d:01:b9:e4:26:
                    11:4d:9d:81:f4:27:ef:a3:bf:5a:f1:13:7a:0b:4a:
                    90:46:f0:d4:1a:5b:d9:8c:c9:cb:63:4f:48:51:b0:
                    4b:7c:e2:4a:29:9d:4a:b6:34:e6:f5:48:7a:18:0b:
                    6e:a2:ea:8f:07:ae:15:35:fb:cf:82:5f:68:e1:3c:
                    8f:9c:46:7e:1c:25:05:85:36:75:90:de:b0:f5:3e:
                    a3:f2:49:cd:93:98:61:50:21:53:ce:0d:f9:4d:c4:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FF:AF:5D:7D:3A:F3:E5:0E:55:4F:58:11:42:5E:8D:E7:BE:66:82
            X509v3 Authority Key Identifier:
                keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:04:50:b2:75:62:e7:0c:dc:1e:e6:38:6f:23:55:8b:c0:9e:
         5e:90:45:ec:71:ed:39:5e:70:ad:c2:4a:e4:bb:e1:d6:ad:49:
         7f:9c:ac:f2:25:f0:e4:e0:25:44:3f:d3:d3:c6:f2:29:22:23:
         18:1f:31:f8:09:ec:78:45:9e:c0:e5:70:4b:43:6c:59:ca:14:
         29:97:91:8e:02:ac:6e:29:df:0f:9b:5f:e4:fb:de:fb:3f:f8:
         7e:f1:5d:44:31:58:55:5b:5a:df:db:43:65:c7:fc:ca:4f:82:
         07:6e:7d:82:d7:dd:bf:52:02:80:7d:f4:97:33:86:da:e6:46:
         34:08:3d:ea:57:e5:39:13:58:19:7a:96:5e:f2:a3:3f:70:3c:
         52:3d:55:0c:90:24:32:b0:35:ce:5f:02:f3:a2:69:6e:44:b5:
         b4:d4:5f:73:4a:a9:73:97:c1:62:05:64:d2:51:80:d6:c4:e4:
         73:6e:fc:fa:16:65:78:6d:11:66:93:e5:1f:89:48:7d:f3:55:
         d0:20:83:1b:1d:5f:84:4b:00:02:30:f6:63:c9:e6:7e:06:45:
         dd:c4:b2:89:24:86:63:ff:ed:77:70:b2:3c:32:22:df:76:ba:
         3e:16:2c:b2:81:c5:d6:6c:6b:0d:b8:e3:7b:09:31:71:50:97:
         25:61:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:34 2024 by rpki-client on console-fra.rpki-client.org