Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File:                     jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier:          lcoKrmyui6JTceaZWUS54DkNtTFcTH+EZUWdjVckUh8=
Subject key identifier:   E9:EB:ED:4B:81:CD:E0:3E:1C:0E:B5:3A:2F:A0:1C:13:EC:DC:C5:0E
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer:       /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial:       01901E21A84596A310C6A58925357ADA4612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number:          08D4
Signing time:             Sat 15 Jun 2024 23:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:40 +0000
Files and hashes:         1: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: ejtg0b5zuTqz1FYIJLo7ZwDVH0rjfPnSQ6YX1MIrvAA=)
                          2: yiU5G5chgpRbSZMuKJg_7LTkFqY.roa (hash: h1R711r6ZclVsJAPZqVmjiW4Vxtiy5WEv0UTRYrweZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:a8:45:96:a3:10:c6:a5:89:25:35:7a:da:46:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
        Validity
            Not Before: Jun 15 23:00:40 2024 GMT
            Not After : Jun 16 23:00:40 2024 GMT
        Subject: CN=e9ebed4b81cde03e1c0eb53a2fa01c13ecdcc50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:83:7d:e6:59:a7:7d:36:af:4b:68:16:76:
                    a4:d4:cb:5d:d9:1e:36:00:f7:2e:3f:85:01:e8:f2:
                    c6:2f:f8:73:cb:86:64:ea:eb:d2:f6:dd:83:00:41:
                    6d:5d:74:07:67:4e:9e:44:47:b0:53:77:fe:93:be:
                    97:02:6e:0c:c7:c5:93:2e:5b:77:4f:e8:74:69:c7:
                    19:7c:39:1e:57:19:44:e8:c5:4d:eb:cc:32:1b:07:
                    62:45:14:cd:ad:6d:12:d2:1c:36:13:71:63:c9:18:
                    ba:6f:30:ad:82:79:c6:10:9d:ef:fe:33:aa:a2:fd:
                    55:93:0b:6f:b8:0a:8f:08:2c:3b:fc:17:e6:67:ee:
                    8c:82:76:22:cc:7b:36:98:22:47:c2:e6:a8:ef:d1:
                    45:44:7b:88:31:a7:24:cb:47:93:56:7a:10:f5:a9:
                    09:d2:57:d3:86:09:4c:6a:48:33:d7:4b:61:24:aa:
                    ea:b5:92:b1:e8:81:f9:76:b8:2d:4e:b3:b1:28:e8:
                    3e:1b:b3:88:cf:6a:08:a7:21:bc:30:60:82:8e:e0:
                    6e:b0:bb:65:f9:3e:a8:9b:33:ed:04:45:b9:28:d0:
                    9d:ef:26:64:a7:8c:11:22:ec:d8:2c:69:c5:41:83:
                    6e:7b:49:26:6d:c8:02:3f:53:46:9e:dd:ef:9e:ef:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EB:ED:4B:81:CD:E0:3E:1C:0E:B5:3A:2F:A0:1C:13:EC:DC:C5:0E
            X509v3 Authority Key Identifier:
                keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:b4:90:bb:f0:1c:65:26:89:0e:68:6a:38:f0:94:0d:37:
         0d:ef:18:c3:7d:a9:33:ed:37:50:1e:82:d1:05:4a:d8:8e:be:
         ee:57:b6:a8:1e:70:89:89:d7:5b:e9:87:fc:8b:d0:32:3c:aa:
         8e:5a:8f:2c:46:ab:f4:60:d0:f7:21:84:cf:bf:9d:e5:1e:d7:
         f5:aa:50:3d:80:41:ec:2c:ad:46:38:53:f0:7d:91:b5:3e:4c:
         43:7b:0a:c1:78:4f:66:45:0a:99:ad:aa:a1:ac:4c:e6:57:71:
         0c:cd:2e:8e:22:7c:f6:38:05:a7:14:de:47:8c:f7:84:7b:ce:
         10:3b:9e:ca:f5:49:e6:23:e4:01:06:51:c7:e0:94:7a:16:7f:
         55:a8:3f:12:32:1b:bc:98:74:2e:81:7d:e3:67:d2:69:52:9b:
         db:9c:73:19:3f:61:0f:b7:d6:02:b1:04:0e:93:f0:18:af:2a:
         5d:53:e6:bd:52:4f:4e:98:6d:67:4d:af:c5:50:f9:97:7d:13:
         9d:4b:33:72:f7:65:b0:d4:be:35:69:2e:da:00:df:95:9c:43:
         75:89:8f:9c:b1:37:0c:b3:ba:98:76:2a:31:1f:97:78:0f:ef:
         ab:90:2c:95:c0:f0:76:15:6d:e3:21:0f:77:45:53:57:26:e9:
         48:06:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:52 2024 by rpki-client on console-ams.rpki-client.org