Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          wyztUtQquhAFRF5/cYQPT0jTDgJRhPuz/ia8I3/gXYg=
Subject key identifier:   D0:EE:A3:02:C7:1C:F5:83:EE:C8:39:28:48:79:A7:98:CA:9B:31:F6
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       019041C0C27810B456E05898000E9557BB99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0996
Signing time:             Sat 22 Jun 2024 21:01:10 +0000
Manifest this update:     Sat 22 Jun 2024 21:01:10 +0000
Manifest next update:     Sun 23 Jun 2024 21:01:10 +0000
Files and hashes:         1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: 1L+WdueVfqoC5nUUNG1tufT/7rdo0IoWO8SN0IuoXNI=)
                          2: z8OuSCGJchVeCUpQYS1C9lyJdfQ.roa (hash: DpfwIon8LxlRlWc8oVUrCsq2KEdEj3C2oAT8Sfo35hk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:c2:78:10:b4:56:e0:58:98:00:0e:95:57:bb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Jun 22 21:01:10 2024 GMT
            Not After : Jun 23 21:01:10 2024 GMT
        Subject: CN=d0eea302c71cf583eec839284879a798ca9b31f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:0f:6a:38:73:8f:46:45:30:74:b6:95:38:
                    44:dd:b2:00:64:93:43:4b:51:97:5e:f1:11:4b:40:
                    19:9f:fe:03:44:4d:e2:e7:f9:6f:d2:2f:6e:8b:e8:
                    52:fa:3f:e2:9e:b4:bf:11:84:6c:bd:17:17:c6:d1:
                    db:43:3b:14:3a:30:07:28:da:bf:95:cf:0f:b5:6c:
                    b2:9d:c3:35:93:ed:9e:08:43:3d:5b:67:1c:a3:08:
                    0e:4c:bf:44:8d:f4:1c:b3:b6:da:c7:7a:dd:24:c7:
                    2e:d7:88:7c:49:52:02:80:1d:37:7d:f9:b0:7e:fa:
                    bc:81:ad:17:c6:bb:17:9e:a4:69:a1:ce:98:a6:11:
                    70:0a:34:3c:d9:2e:b0:62:71:58:34:62:8e:42:40:
                    86:1f:2e:43:a5:40:85:17:ff:66:28:81:f7:e7:f2:
                    38:3e:97:7c:2f:c4:28:ac:d2:78:6d:e9:48:6b:b2:
                    ce:92:e2:43:a2:68:00:37:70:12:89:73:2c:be:58:
                    b9:77:51:13:31:29:4d:24:f1:e0:cd:ed:34:d2:84:
                    73:d5:e1:2d:e0:60:76:01:50:82:b8:69:6a:dc:cf:
                    d3:e5:12:9e:52:86:e3:80:eb:c6:ba:95:1c:bb:49:
                    70:9d:45:e3:e9:c4:a3:63:08:35:8f:d3:f6:12:77:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:A3:02:C7:1C:F5:83:EE:C8:39:28:48:79:A7:98:CA:9B:31:F6
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:90:c1:c1:69:0c:2f:ba:80:7b:d4:cb:df:32:65:a7:df:05:
         c9:40:74:b8:e6:cd:68:81:45:d8:25:c5:6d:f0:f3:ec:4a:68:
         52:c5:6f:27:7f:15:5a:52:ba:85:09:67:9a:d7:5d:c8:b0:7a:
         fb:c8:c0:ad:b5:e0:77:49:d9:14:ee:de:82:26:b1:f4:28:15:
         52:20:8d:71:22:d1:78:dc:dd:60:c4:41:8f:09:a5:ee:56:ab:
         23:f9:46:4e:01:d5:5e:42:ea:9a:f5:f9:2e:a3:d1:1f:5d:55:
         51:16:ab:27:c0:a9:ec:89:8d:1b:c9:a2:a6:f7:79:b0:50:38:
         5c:84:08:69:9a:49:b2:ca:7a:ec:fd:ec:b2:5d:86:3b:2d:38:
         d9:5c:34:7e:1b:16:5e:13:99:d3:d4:94:a6:89:bf:6b:74:8d:
         35:dc:e0:45:47:9a:11:6a:bd:61:75:e8:39:4a:e6:77:20:a8:
         5a:a7:9b:28:f1:25:6a:fc:9e:7f:60:5a:18:18:94:6f:11:fc:
         33:df:f2:86:d9:6a:eb:3f:00:f7:da:fb:ec:91:84:10:53:6e:
         d4:06:6d:b2:c1:ea:26:57:d7:c0:5a:31:9d:25:ac:48:db:8f:
         0f:ef:64:65:a3:ab:dd:f4:49:1d:8a:b7:30:f8:7b:6c:a3:c9:
         72:5a:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:26:51 2024 by rpki-client on console-ams.rpki-client.org