Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File:                     pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier:          RbqcPLp/Xd2uo9LA0QV68LcKmZ8LzW93k2+WgfxlsY8=
Subject key identifier:   B6:E8:AD:BA:DA:9E:EF:A1:AC:75:E8:FA:84:1B:C6:05:98:8F:66:96
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer:       /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial:       01904152D2BD42F1D0EB4DA0330D6B83BD7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number:          11DB
Signing time:             Sat 22 Jun 2024 19:01:05 +0000
Manifest this update:     Sat 22 Jun 2024 19:01:05 +0000
Manifest next update:     Sun 23 Jun 2024 19:01:05 +0000
Files and hashes:         1: D_NUq-Ua3TXwxbB5u4jvtgo3Ac0.roa (hash: W/LPCg3j7so2xBBwDVMHe/vIjhOme6siD4lRrNXG0lo=)
                          2: F20RePYUMCkJ4HOZQXU0Fxre2Jo.roa (hash: ZtCruU9JiKZDFOlJgW3IOZlb7irO4TDeUCO9ecyFkyo=)
                          3: H5NJ6zTpmbaILRBMywPMxyg5sFI.roa (hash: ha2PXmm316FNLFFZJzAZYMpXgFUdt1xwquFKnxkNhQU=)
                          4: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: HE2H64fbjXwUYbBMfOY5dWGe3NegR5M8HMkrRFkwT9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:d2:bd:42:f1:d0:eb:4d:a0:33:0d:6b:83:bd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
        Validity
            Not Before: Jun 22 19:01:05 2024 GMT
            Not After : Jun 23 19:01:05 2024 GMT
        Subject: CN=b6e8adbada9eefa1ac75e8fa841bc605988f6696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:12:cb:2c:9f:90:5e:78:9f:ff:5c:a3:55:
                    ce:94:e0:c0:3d:eb:ad:ee:f9:a6:be:d3:5f:cd:40:
                    46:78:38:4c:6e:ae:6d:ad:70:a4:75:db:33:08:1c:
                    25:5f:e6:fb:70:26:e0:ec:69:aa:07:f0:97:9a:ab:
                    7e:c4:eb:fe:62:d4:f1:2b:49:18:0b:09:2e:e0:03:
                    1b:75:f9:d0:7a:68:aa:b8:bf:34:1e:c3:5f:9c:f0:
                    bc:47:d1:49:73:9f:af:cb:a1:25:46:71:2f:6c:39:
                    94:ee:f4:4a:4f:29:32:63:75:20:23:59:75:48:e0:
                    52:f6:43:80:8f:af:06:1e:04:67:b5:e5:c0:78:72:
                    b8:1f:04:b3:89:01:ae:db:2f:e3:83:3d:90:5f:96:
                    0f:76:04:df:c3:b6:30:1a:44:67:38:7a:2d:9b:9f:
                    ba:dc:2a:03:8b:5e:5d:0c:08:d2:eb:ad:5d:e7:fd:
                    ea:38:f7:0a:ea:8c:0c:b3:6b:5d:70:99:3b:a8:13:
                    73:31:4b:fa:5c:30:ba:8f:82:a9:1e:34:70:41:77:
                    4f:9c:c4:88:49:24:76:da:c1:44:d4:d9:68:2c:98:
                    cb:b6:d1:ac:d8:d8:2f:0f:18:aa:26:e2:85:ca:ae:
                    7e:6a:79:0e:ae:6b:14:ee:b8:8e:b4:96:1d:02:a5:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:AD:BA:DA:9E:EF:A1:AC:75:E8:FA:84:1B:C6:05:98:8F:66:96
            X509v3 Authority Key Identifier:
                keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bb:39:25:72:75:07:d0:b9:bc:e7:93:c0:f9:03:c4:22:0b:
         d2:7b:e5:0c:13:1e:11:c4:4c:f1:c7:3d:1d:85:6d:81:e9:38:
         0c:dc:ec:d7:96:eb:e4:e2:be:84:7d:d8:89:7b:db:2a:a9:00:
         cb:7a:43:c6:dd:6c:2d:3d:4b:a7:ee:0e:d0:1f:90:03:52:88:
         8b:e4:6f:69:92:4f:93:ce:87:e3:fb:58:eb:97:e8:23:28:4a:
         48:26:fe:1f:72:1d:a3:ed:7f:01:8d:74:e7:45:90:90:f4:4d:
         3d:9f:dd:bd:d8:6f:91:d9:e0:38:4e:46:82:3a:41:3f:36:ed:
         6a:eb:c6:9b:2d:b7:e5:6d:b8:2b:3e:1c:b1:bf:ae:2d:6c:a5:
         ee:ce:07:97:55:96:42:96:30:2a:17:94:35:75:89:cc:ab:3c:
         47:f8:b8:21:60:49:d2:0f:56:c5:47:ca:64:02:3a:7d:c4:4e:
         4f:40:25:c8:b9:bd:a5:1d:7b:c7:2b:5d:a6:bf:d6:20:e0:eb:
         dc:d9:56:ce:74:72:72:c7:af:a4:f4:f4:2d:93:bd:a3:1c:3f:
         2d:c0:b8:33:4b:6d:62:7c:a3:ff:1b:1b:0d:02:5d:89:4d:88:
         d8:7e:16:96:d1:97:7c:4d:8c:f9:77:ae:19:1b:ea:83:f1:26:
         53:78:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 19:41:15 2024 by rpki-client on console-fra.rpki-client.org