Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File:                     JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier:          gj0inyfbiWqTpHrVM0s4+HqOrWraq8ChLqlHHjJ+DTc=
Subject key identifier:   70:5D:E9:B6:F8:9D:99:68:55:B2:69:2F:CF:C2:28:9E:65:ED:4F:4F
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer:       /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial:       01903707AD6F34E7B09C78C1122BBA3BD676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number:          0E67
Signing time:             Thu 20 Jun 2024 19:02:48 +0000
Manifest this update:     Thu 20 Jun 2024 19:02:48 +0000
Manifest next update:     Fri 21 Jun 2024 19:02:48 +0000
Files and hashes:         1: Hz4cNXyx-bdC1QZXijHqXGN0hDs.roa (hash: tBbvVtXU8J8WH6TFpDEqyCd71T8sXezte7Lz4xqED/4=)
                          2: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: ozrjioZc8dTcmHbN7lLhV7BLSEZpPPj4dYbsss/uI9M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:07:ad:6f:34:e7:b0:9c:78:c1:12:2b:ba:3b:d6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
        Validity
            Not Before: Jun 20 19:02:48 2024 GMT
            Not After : Jun 21 19:02:48 2024 GMT
        Subject: CN=705de9b6f89d996855b2692fcfc2289e65ed4f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:de:e7:e7:db:5f:0d:97:d0:9b:9c:b2:48:
                    dd:a6:fc:56:83:29:ad:76:84:56:01:ea:d6:1b:39:
                    c5:0f:a9:70:40:4f:da:ed:e2:2d:4d:1b:f1:b4:d1:
                    d3:fa:af:30:a4:5c:26:fb:95:09:f5:f2:66:d2:c8:
                    2b:ff:12:ea:28:75:48:99:73:4f:bf:a9:a9:39:e5:
                    ab:47:ba:c3:9e:44:51:ea:7c:c7:be:61:03:61:01:
                    aa:86:8f:e7:8a:1a:ae:9b:fd:44:ce:08:0e:c2:f3:
                    5a:fc:69:c7:fb:45:9a:fe:d0:8e:97:11:9f:05:73:
                    cf:7c:01:e9:34:2c:ff:52:e4:16:a7:d9:70:af:94:
                    4a:50:c9:8f:92:3a:49:36:9f:11:40:14:b4:67:43:
                    c0:e7:66:70:a5:fd:4e:94:1c:5e:a0:73:1c:df:2d:
                    42:18:3a:29:bc:af:9b:9d:5d:4c:cc:6e:24:29:02:
                    01:e1:f5:62:30:f9:20:20:4a:56:e8:24:c5:cd:79:
                    25:41:aa:c9:05:45:d2:ae:d1:ec:99:65:83:92:26:
                    4e:ac:f5:0c:54:b3:29:2e:12:b4:48:8f:ad:4d:6e:
                    52:59:37:76:46:b3:6b:1d:46:01:c0:ab:ea:82:88:
                    b7:26:cf:5b:b5:7d:43:b2:1f:a3:14:ef:fe:b8:1c:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5D:E9:B6:F8:9D:99:68:55:B2:69:2F:CF:C2:28:9E:65:ED:4F:4F
            X509v3 Authority Key Identifier:
                keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:22:63:07:a1:39:8d:0a:66:6e:6c:5b:c1:09:ab:b5:be:c8:
         2b:f2:d6:64:bd:76:8d:a7:86:6d:91:ee:46:b6:92:08:e1:1a:
         45:e9:fd:c7:77:d9:85:23:74:8e:8a:33:15:24:e5:46:67:9c:
         03:bc:ec:77:7b:10:14:38:6e:af:24:ae:89:ce:6f:77:ff:65:
         a1:f5:ac:9b:69:0f:d6:8c:26:69:8d:5c:5e:f9:9c:3c:3f:ca:
         13:91:65:fc:62:a0:f7:84:ac:7e:8b:a9:5c:33:99:56:a8:a3:
         a9:5d:95:85:e8:66:bf:80:cb:15:b6:54:c8:06:7e:ca:79:1b:
         c0:84:2c:02:8e:3c:cb:5d:f4:e7:ce:ac:b5:11:1d:bc:28:27:
         bd:81:30:8e:8f:4f:06:81:1f:65:20:56:fb:e0:64:9b:73:71:
         70:e2:6d:6b:83:83:07:43:27:7f:18:cc:d8:e0:6a:4b:6c:87:
         42:cc:43:8a:61:0e:bc:96:b8:b9:5e:db:37:80:61:1d:34:b0:
         57:6a:de:d6:a0:fb:59:26:fd:07:27:84:0b:d1:74:d5:e6:1c:
         ae:53:52:19:9c:9f:e7:b6:cf:90:fc:76:0b:3d:79:78:c3:56:
         aa:de:7c:e2:35:b7:6e:67:31:07:7f:b8:21:44:f3:7c:05:fd:
         ba:20:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:25:56 2024 by rpki-client on console-ams.rpki-client.org