Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
File:                     2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft (raw, json)
Hash identifier:          m+nzRhVRDvqKZLf5ib5dHtkPXpzmmpVe2dPerv3TRXk=
Subject key identifier:   E0:14:EA:C2:E2:A8:2F:90:EC:9E:9C:95:0F:41:56:D7:33:5F:23:D5
Authority key identifier: DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
Certificate issuer:       /CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Certificate serial:       01903EBFA2B41924E45B90B922A32C30145C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
Manifest number:          11D3
Signing time:             Sat 22 Jun 2024 07:01:04 +0000
Manifest this update:     Sat 22 Jun 2024 07:01:04 +0000
Manifest next update:     Sun 23 Jun 2024 07:01:04 +0000
Files and hashes:         1: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl (hash: hry/pCe7LUdp1jOeN+Gd8ubOWTp4zNBH/8yowUAFiGs=)
                          2: tlt3xCB-nNMWv5uEHH-LzxfJzd8.roa (hash: jz99xs3SRIlWJkPYBQHw+peQcplkS8yGEnVMhjHEcxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:bf:a2:b4:19:24:e4:5b:90:b9:22:a3:2c:30:14:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3d2580c54980cab3db1356182ed8cc819ffc07
        Validity
            Not Before: Jun 22 07:01:04 2024 GMT
            Not After : Jun 23 07:01:04 2024 GMT
        Subject: CN=e014eac2e2a82f90ec9e9c950f4156d7335f23d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:e7:85:70:a4:a7:c4:88:79:ee:b5:ce:dd:
                    87:b7:d6:1c:e8:b1:a2:f3:9e:0c:74:f2:fd:6b:78:
                    09:13:fd:b1:0b:ea:ec:43:66:a0:b9:48:b0:b5:a4:
                    66:71:52:94:8e:10:0f:89:c6:21:86:83:75:0c:7b:
                    09:e0:5f:bf:85:b4:17:a1:a3:6e:09:7b:b0:15:1d:
                    9d:c4:d9:6f:da:41:99:ba:f2:97:74:d8:38:d0:ea:
                    9a:0b:52:b9:f5:65:36:1a:c2:01:d9:48:6b:7d:bd:
                    3f:42:60:ef:d8:a2:d5:2c:8e:34:4e:b8:aa:01:67:
                    6e:f7:78:ec:57:6e:a3:45:cf:96:c5:4f:ea:68:20:
                    23:b3:04:a0:9e:6e:c2:0b:66:eb:a9:f8:62:27:05:
                    7b:5d:49:79:1d:25:52:c9:cc:b6:57:40:1d:68:42:
                    85:9f:79:aa:7a:b6:41:7e:f4:5c:25:40:87:28:f8:
                    24:da:6b:cf:18:76:c0:96:77:f6:69:e5:1d:3b:94:
                    7c:c4:35:df:73:47:d4:75:15:b7:46:0d:10:8e:44:
                    9d:ac:36:50:b1:bd:ff:97:27:b8:cb:5b:7c:7e:81:
                    81:3b:4a:09:b4:94:a0:32:c4:74:26:7b:07:c6:f5:
                    d4:8c:a4:57:ce:df:14:82:7e:e7:be:4a:4c:6c:80:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:14:EA:C2:E2:A8:2F:90:EC:9E:9C:95:0F:41:56:D7:33:5F:23:D5
            X509v3 Authority Key Identifier:
                keyid:DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:09:27:aa:37:59:07:3d:58:86:64:fd:fb:c2:91:78:7a:df:
         28:d6:be:d4:9a:53:37:52:cb:18:ea:d3:96:69:79:04:ee:11:
         ef:0a:8f:6f:9e:a1:2e:c3:fc:c8:19:06:f8:e1:a2:28:ff:fd:
         72:42:a4:db:3e:7a:fa:cd:51:67:c9:64:64:6c:eb:07:13:76:
         6b:4f:88:99:0d:90:a0:19:12:b1:c3:90:2c:71:cc:f0:40:76:
         8c:74:2b:86:b4:4d:e7:70:5a:4a:bb:28:58:a7:09:d3:58:5d:
         92:db:75:0a:8d:11:74:1b:44:1f:8c:5b:08:93:c7:21:c4:4e:
         b9:fb:7c:34:bc:ed:c2:12:e0:e0:f6:e0:59:3d:2b:dc:f1:13:
         27:bb:d3:39:89:53:c5:95:3a:4b:94:6a:d5:43:a9:51:9b:d6:
         63:b1:47:4b:3d:fc:03:ba:92:cc:e7:1f:ed:85:40:e8:ac:59:
         e1:d0:d3:31:00:10:ad:63:98:11:e5:c4:a2:de:59:d2:fe:46:
         e7:17:13:e4:7b:70:cc:62:d5:74:a6:39:b2:7b:0d:29:aa:d2:
         9f:33:8b:e1:11:43:a3:9d:25:59:26:80:15:cf:83:9c:24:14:
         16:0f:64:fb:f9:a9:96:90:53:4b:de:a0:72:f5:07:27:9b:95:
         ed:fc:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:46:11 2024 by rpki-client on console-ams.rpki-client.org