Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File:                     pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier:          nqdENVgIm4AhCfho0H5dmsXzcXUI32FOZZBy+e5sWf4=
Subject key identifier:   60:69:07:47:37:F0:0F:58:C2:DE:D3:EA:1D:78:D5:8B:32:59:9F:42
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer:       /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial:       01901CA1831F094CABDCC34909EAD9A79D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 16:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:05 +0000
Files and hashes:         1: D_NUq-Ua3TXwxbB5u4jvtgo3Ac0.roa (hash: W/LPCg3j7so2xBBwDVMHe/vIjhOme6siD4lRrNXG0lo=)
                          2: F20RePYUMCkJ4HOZQXU0Fxre2Jo.roa (hash: ZtCruU9JiKZDFOlJgW3IOZlb7irO4TDeUCO9ecyFkyo=)
                          3: H5NJ6zTpmbaILRBMywPMxyg5sFI.roa (hash: ha2PXmm316FNLFFZJzAZYMpXgFUdt1xwquFKnxkNhQU=)
                          4: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: rS4uFHWaqTZrFWUQxVjdikrP+r1iMuc4u8LoL/2jz0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:83:1f:09:4c:ab:dc:c3:49:09:ea:d9:a7:9d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
        Validity
            Not Before: Jun 15 16:01:05 2024 GMT
            Not After : Jun 16 16:01:05 2024 GMT
        Subject: CN=6069074737f00f58c2ded3ea1d78d58b32599f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:6f:94:3a:15:f8:23:2f:f3:fe:50:53:41:
                    9f:17:6d:1b:9b:af:85:e1:8c:5c:8d:a6:68:9c:75:
                    ad:a1:04:cb:83:f3:27:6c:83:b8:09:fa:f5:e6:0d:
                    ac:4c:95:ef:4d:fe:cf:f9:07:c5:68:f4:cb:f7:8c:
                    68:de:08:d4:1a:bc:03:52:f9:3b:e1:94:00:c0:ff:
                    f4:c3:5a:63:07:b1:1a:8d:3e:ba:69:f5:9b:b8:63:
                    47:b2:a4:e5:00:45:14:e0:67:64:7e:52:7a:2b:8a:
                    bd:01:66:81:d5:52:e7:a5:b3:0f:cd:2a:ad:5e:33:
                    54:98:47:e2:85:08:5f:51:e2:e9:51:53:57:82:92:
                    77:8c:14:f6:ab:cc:04:0e:81:87:b1:27:19:d3:7c:
                    53:f8:7f:5a:3f:18:97:82:f6:39:7a:85:31:1b:dc:
                    55:88:ad:bf:04:60:ae:8c:aa:71:e6:83:b8:7d:4c:
                    6f:1d:95:be:90:66:c8:bb:b8:44:94:83:9f:fb:99:
                    f1:bb:73:6f:61:9c:30:f6:d2:92:79:33:12:b2:31:
                    c1:38:a0:11:b8:33:c4:3a:28:99:6b:fb:77:b3:4f:
                    a1:88:f8:05:13:eb:4e:ee:c3:0b:9c:65:e1:31:7e:
                    8d:4e:f1:cd:dc:94:c6:d9:54:de:d1:45:49:3f:a0:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:69:07:47:37:F0:0F:58:C2:DE:D3:EA:1D:78:D5:8B:32:59:9F:42
            X509v3 Authority Key Identifier:
                keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:89:5c:45:b4:cb:a1:59:71:ed:7f:68:a7:6d:86:24:73:57:
         1a:10:e4:82:81:07:ce:4e:30:c7:25:0c:94:c0:60:9d:db:fb:
         f9:6f:9e:3e:aa:c3:ee:3c:21:13:5e:aa:5d:ce:63:95:cd:5b:
         4c:eb:1b:4e:d7:98:24:85:3a:8c:b4:f6:03:46:d3:12:86:7b:
         e1:20:2d:39:eb:22:6a:03:b0:44:06:aa:a4:6d:c5:95:e8:51:
         e0:8d:a6:8b:e2:9c:48:d4:fa:1d:72:95:04:43:05:be:9d:65:
         1d:b8:3e:ec:aa:09:ce:04:91:d0:8e:fd:7c:ef:40:a1:32:f5:
         55:43:c8:c1:08:e2:93:27:09:49:d3:62:44:db:0d:4d:f4:6b:
         50:2d:88:64:93:fe:9d:4f:96:d1:89:88:7b:35:e6:c2:fc:af:
         02:e1:2c:63:4c:af:ab:54:a0:53:cb:3f:9c:18:06:b2:e2:bc:
         67:c9:10:e1:11:a8:0a:e0:25:5b:92:e1:37:68:6b:25:8f:0e:
         d9:76:4a:3c:89:08:84:62:59:e1:91:e7:65:2f:1a:03:03:94:
         8f:7a:17:de:b8:19:90:37:b7:8c:4c:38:12:72:40:fd:20:24:
         8a:ab:28:f4:7a:be:33:1e:9f:e9:86:a4:d1:30:bc:46:1c:a1:
         b0:90:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:08:27 2024 by rpki-client on console-ams.rpki-client.org