Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File:                     jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier:          be/6O1auUlhdJc0IvxhtskTRcpC3NSX7gIMgBPeZoVo=
Subject key identifier:   B8:27:8C:9A:E4:33:02:3C:4A:DA:CB:18:4A:42:87:CD:DA:48:FE:72
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer:       /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial:       01901DEB5FFD3460C5B2636724BA8C2D0736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number:          0AF1
Signing time:             Sat 15 Jun 2024 22:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:23 +0000
Files and hashes:         1: 8FcL5VyeDWo8VAvAIU3tx3F99yw.roa (hash: rWaa/mGnQm+bviYl3DpiK06fXfebRN5QKizUnN9gCVI=)
                          2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: wqjQPNbtRTA/ONNaVlgvmjC9bqvYzw2PkJizfKGDq+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:5f:fd:34:60:c5:b2:63:67:24:ba:8c:2d:07:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
        Validity
            Not Before: Jun 15 22:01:23 2024 GMT
            Not After : Jun 16 22:01:23 2024 GMT
        Subject: CN=b8278c9ae433023c4adacb184a4287cdda48fe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:89:97:a2:f3:12:e9:68:28:ff:7a:7f:f0:
                    08:31:04:3d:56:ec:f4:30:9c:c6:3a:a1:7c:3a:03:
                    7f:80:42:49:01:7c:e8:7d:33:55:5d:7a:85:61:ad:
                    a3:87:08:9e:1a:8e:82:a4:c3:f5:59:38:e0:ba:5a:
                    de:33:1b:95:c3:24:c1:76:3c:db:5b:02:56:25:e4:
                    bf:01:19:5c:46:ba:54:fd:3e:af:ed:96:6d:87:eb:
                    b9:25:48:37:a9:2c:7e:a4:15:ef:91:66:b6:f0:aa:
                    cc:2e:f8:0d:9c:d7:d4:d5:86:24:79:be:8d:79:a9:
                    49:02:1c:25:57:88:c9:cd:25:0b:64:0e:8e:f8:e3:
                    0e:49:66:d5:46:da:12:f1:2a:18:ad:fc:2d:dd:67:
                    01:b4:5b:f5:aa:42:6f:69:20:89:b2:72:f7:89:eb:
                    c0:91:30:cc:8b:0a:28:7d:7b:3f:10:db:5b:7c:90:
                    f8:e5:b0:be:6f:3a:a5:67:88:8a:62:a3:2c:ac:43:
                    b5:b8:74:d6:53:e8:92:be:af:f3:3d:65:22:9f:e8:
                    20:5a:eb:9e:3d:b1:6b:15:60:07:03:a1:31:a8:76:
                    fa:2f:d7:8e:dd:10:89:8c:94:52:d7:34:fd:1b:82:
                    0d:b4:c2:fe:b5:0f:2a:9a:60:0b:62:4f:1a:c6:8d:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:27:8C:9A:E4:33:02:3C:4A:DA:CB:18:4A:42:87:CD:DA:48:FE:72
            X509v3 Authority Key Identifier:
                keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:31:06:50:ab:92:e0:bf:69:cc:50:48:26:cc:62:04:35:ce:
         fc:a7:56:07:26:72:9c:3f:e1:96:bb:9a:bf:73:1e:15:45:a6:
         78:cd:57:4a:19:8c:07:f6:80:74:95:71:13:b9:e9:59:64:4a:
         49:b6:df:26:17:76:66:ca:bc:6c:48:28:dd:9a:5d:33:5e:78:
         e9:f4:9d:8b:38:bd:94:c6:e0:74:c0:3e:3a:40:d9:94:df:b4:
         9a:80:d3:f1:78:17:3b:f0:8b:18:1f:ac:74:ee:a5:10:52:84:
         23:1b:0d:eb:5a:30:ef:49:86:8a:fe:ea:5f:9e:c7:29:2c:e3:
         c5:db:60:54:e1:55:19:bc:c5:da:68:80:b5:e3:c4:8e:82:2b:
         d9:9e:fc:b8:2f:24:9c:94:35:d8:eb:fc:4d:42:96:81:31:2a:
         98:d0:1a:af:e1:06:60:25:0b:92:77:aa:7a:7c:8a:03:9b:a6:
         3c:27:b9:77:f4:e0:37:70:a9:26:43:2c:84:75:b2:25:cb:13:
         5b:3e:8f:0f:14:1e:27:a8:47:03:ec:d6:35:6b:7e:bc:fc:8f:
         6d:7c:19:d9:5f:c0:be:2a:c3:de:38:89:54:66:e6:51:81:80:
         48:fb:e1:a7:07:d5:77:90:59:d0:b2:4e:c4:15:6c:83:95:08:
         d6:c4:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:29 2024 by rpki-client on console-fra.rpki-client.org