Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          NdPTyhVkuJUQsvuHEORwJo7ncisqq2zk6TC5kHuqhS8=
Subject key identifier:   A8:82:25:FE:4F:E3:71:0E:FF:9F:50:79:74:5E:DA:0C:78:A6:3E:46
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       01901D0F0C02A987D69787C3C7CB9E470D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0983
Signing time:             Sat 15 Jun 2024 18:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:43 +0000
Files and hashes:         1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: qQsK9jj+4Kb6Aqmam4y/Jf3490S2fVmQOr6MIwGfcUA=)
                          2: z8OuSCGJchVeCUpQYS1C9lyJdfQ.roa (hash: DpfwIon8LxlRlWc8oVUrCsq2KEdEj3C2oAT8Sfo35hk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:0c:02:a9:87:d6:97:87:c3:c7:cb:9e:47:0d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Jun 15 18:00:43 2024 GMT
            Not After : Jun 16 18:00:43 2024 GMT
        Subject: CN=a88225fe4fe3710eff9f5079745eda0c78a63e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:57:6b:b4:82:55:3a:9e:40:e5:e5:33:b2:
                    99:bd:24:84:4c:7c:3b:80:8c:31:fd:7d:53:09:d9:
                    d8:53:28:24:51:4b:25:33:22:a0:30:a5:79:6a:00:
                    3d:93:84:17:94:66:c3:fb:51:e8:4d:7f:9e:f8:f6:
                    db:bd:98:53:ef:3d:a0:c1:cd:cb:cd:5b:53:b4:53:
                    cd:b9:85:5d:28:cd:d6:57:48:b2:62:60:12:a3:cb:
                    6d:ed:c7:3f:76:cd:48:22:be:cf:11:46:8f:23:26:
                    02:08:8c:f8:cf:c1:35:c4:ac:5b:7f:d2:3d:15:da:
                    40:79:13:9c:b6:f4:a5:f1:e6:ff:0a:2f:02:65:c3:
                    d6:0a:d6:f9:0e:c3:eb:90:41:a6:62:f9:f4:d4:49:
                    c7:86:84:90:fc:8f:29:3e:7e:b9:89:a4:57:d0:7f:
                    e4:1f:63:7c:ce:7a:0f:39:13:a6:d0:41:fb:5b:23:
                    81:d8:fb:23:b8:8e:6a:ea:24:35:95:16:dd:fd:60:
                    d9:78:48:91:57:38:f4:8e:1f:9b:5c:2c:78:62:42:
                    66:3c:4d:c6:f5:54:b0:0f:20:ef:be:25:0d:cf:3d:
                    7f:f7:36:9b:b8:f2:55:51:2f:5e:d8:94:8f:14:4f:
                    73:bc:8b:6e:2a:9f:7e:d2:bd:7d:8f:fb:42:99:7e:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:82:25:FE:4F:E3:71:0E:FF:9F:50:79:74:5E:DA:0C:78:A6:3E:46
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:2d:24:13:04:55:a7:0c:78:f8:28:6a:14:98:6d:64:a6:
         42:b3:67:46:67:95:95:c7:3b:1d:12:d6:10:d6:e9:52:07:0b:
         56:83:04:97:01:e2:62:34:71:c2:1e:5b:9f:b2:6f:68:11:39:
         ad:4b:30:51:cd:36:ed:e1:fe:25:53:0e:0f:04:0d:06:6c:31:
         39:ac:69:ff:68:99:91:c1:91:9b:1d:f5:79:af:85:45:e2:8b:
         1a:07:7b:1e:90:8f:b1:a8:8b:67:9a:5c:70:ee:69:17:ac:74:
         78:89:de:d5:29:60:5d:91:f5:64:02:21:93:53:04:7b:a3:41:
         c5:77:02:35:4f:57:b1:68:0e:9e:a3:59:09:d2:7d:33:a6:22:
         17:a3:fe:ab:bf:dd:a8:1c:17:cf:85:f9:46:2c:4e:26:c2:de:
         41:9d:4d:a5:5c:65:f9:fb:bc:2e:92:80:8e:66:d4:ea:45:af:
         b0:d9:20:99:fa:58:bf:2f:a7:28:94:1f:44:4e:81:9a:c5:ff:
         6e:2b:1f:e5:3d:5e:85:65:db:39:ba:e3:bd:c0:56:6b:68:21:
         83:3f:b8:41:44:87:ed:b5:6d:3c:6f:b4:c1:12:e7:12:c7:2b:
         55:62:78:a3:36:80:f7:bf:28:90:97:c7:19:07:c7:e8:b9:00:
         6f:c9:8d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:04:32 2024 by rpki-client on console-ams.rpki-client.org