Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File:                     rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier:          Q2jG4bvzikoSACUYiKbpRZ5Lor4WComJqDiMM7two74=
Subject key identifier:   27:D4:B5:59:D5:77:A4:6A:BA:95:7F:92:10:34:FA:AC:F9:87:0D:43
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer:       /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial:       01901DEBC0300A186B87E4537378946E63A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:01:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:47 +0000
Files and hashes:         1: l7-4YZkvgEhO-NOsVR2mLfj4tZI.roa (hash: d1YZfkFV0Q9ysLUKLudvBLcwQ+KepZQanzy63C5kRo4=)
                          2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: 0aFsoOaHS4+iXQt8BZXbVOlm3u6eKZbs8y5w8oDoC0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:c0:30:0a:18:6b:87:e4:53:73:78:94:6e:63:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
        Validity
            Not Before: Jun 15 22:01:47 2024 GMT
            Not After : Jun 16 22:01:47 2024 GMT
        Subject: CN=27d4b559d577a46aba957f921034faacf9870d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:e3:6d:0b:db:39:25:79:8f:21:65:08:64:
                    81:0f:1b:52:93:4a:19:d2:4b:de:dc:48:2d:2c:2e:
                    fd:45:43:5a:ea:e3:2a:f4:ff:79:7c:29:f7:6b:ec:
                    74:11:b7:13:94:3d:93:6b:78:83:c5:2c:63:ab:e2:
                    d8:3a:b0:62:94:6e:be:79:cb:a0:33:07:3d:6a:60:
                    01:b2:04:5b:f0:be:74:f3:66:79:a9:a8:62:64:44:
                    36:69:15:d8:43:92:d7:1a:cf:32:a8:33:ac:1f:9b:
                    e1:f9:5c:6e:d3:ec:95:d3:6d:fb:99:8a:cb:51:85:
                    6f:70:e9:2c:bc:fe:a8:15:ca:c2:89:f0:94:e3:4e:
                    86:5b:77:0c:a4:be:d6:4c:a8:86:2c:07:b0:4e:59:
                    09:f2:81:8e:2a:af:cd:1a:fb:67:c7:9a:7c:9f:7b:
                    e4:53:51:d1:84:8c:0e:f0:25:74:bf:31:c3:4e:8b:
                    4f:f3:15:19:75:ae:50:16:5c:b5:1f:3c:9b:99:3c:
                    a6:e2:8b:40:56:9c:ec:90:73:28:8d:16:54:66:1d:
                    97:b2:ac:d1:b6:35:83:12:8f:66:09:de:aa:b2:f8:
                    ef:33:7e:23:2c:03:56:c5:0b:c0:cf:04:42:55:35:
                    3d:95:01:7b:83:3b:e3:b4:cb:26:ae:6a:4c:02:e5:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D4:B5:59:D5:77:A4:6A:BA:95:7F:92:10:34:FA:AC:F9:87:0D:43
            X509v3 Authority Key Identifier:
                keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:db:1e:46:81:59:fa:e4:d4:b5:82:b2:cb:e7:26:e9:d7:
         36:33:b7:da:01:d2:4f:ea:ef:70:27:84:06:44:a5:f3:93:8c:
         bf:46:59:e5:29:b8:7d:d9:ca:5a:be:6c:68:a3:4f:f4:4d:f6:
         b5:59:2c:15:6f:c0:41:23:3c:42:52:d6:71:7c:d9:74:3c:98:
         c3:fb:c9:96:3d:f2:2f:ea:1c:df:3b:32:ce:cb:94:66:45:9e:
         b4:f7:36:80:a4:d5:71:29:65:f8:14:3b:ba:df:33:a0:29:77:
         e5:fa:0b:3b:3f:e8:d4:fa:31:6c:33:07:d9:9d:ca:c2:6c:0c:
         9b:ad:73:e7:36:f9:b5:23:a3:ee:07:3a:e3:90:a4:ec:bd:65:
         ad:5b:8f:3e:8e:af:83:32:5c:0e:3b:89:9c:7f:85:7e:ca:7b:
         1b:54:65:6d:9d:44:29:80:f8:4b:ce:36:3c:14:af:d1:1b:84:
         e7:11:41:1d:4a:c6:bf:ec:67:1e:c4:52:c6:55:73:da:0c:c6:
         f6:9e:9f:8c:55:54:56:ea:26:ef:bf:33:dc:20:d6:a4:6d:e9:
         9a:f8:be:f9:5f:d2:dc:0c:d5:23:64:c7:be:0f:76:7c:2c:3c:
         28:7b:30:37:b3:df:7c:74:20:0d:65:c3:6d:50:c5:43:28:a7:
         da:df:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:59:24 2024 by rpki-client on console-fra.rpki-client.org