Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File:                     jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier:          sSoCn/8QR1cAjsuT3HcxMp9PbzJR76Z7hnE7bNdd/1M=
Subject key identifier:   DD:1E:CD:C0:2B:92:3F:9D:C6:C0:27:20:7C:E8:E3:75:BB:60:AE:CF
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer:       /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial:       01901DEC008D3E0487AC81215D59D293F756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:04 +0000
Files and hashes:         1: JBzstpri_9JhfLK0gmwYFsTQjPE.roa (hash: erCjlMioOqhkkGNVKATfQ4ZuhMbOOOMFWqyMpIH2qV8=)
                          2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: p+gEQgPViO0u52Ny0pwBjz/CY8JKrW1KgM/c2hKUTOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:00:8d:3e:04:87:ac:81:21:5d:59:d2:93:f7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
        Validity
            Not Before: Jun 15 22:02:04 2024 GMT
            Not After : Jun 16 22:02:04 2024 GMT
        Subject: CN=dd1ecdc02b923f9dc6c027207ce8e375bb60aecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4b:6f:52:64:1a:d9:8b:93:de:da:80:3e:9b:
                    63:07:0b:15:3c:ac:a3:aa:76:bc:77:c3:d4:0e:d5:
                    29:23:50:d0:fb:c9:dc:6d:ca:49:e9:11:a5:7b:3e:
                    d9:e2:64:3d:5f:d1:02:6c:cd:b4:5f:93:79:24:59:
                    8c:34:30:63:61:31:04:6e:01:f6:c3:e7:bd:be:23:
                    4f:43:fd:ff:d4:07:b4:a8:7b:47:ab:30:3a:a9:eb:
                    16:eb:8c:a3:53:11:95:51:a7:2d:82:34:9d:f0:e3:
                    c5:84:33:af:bf:58:7b:c1:59:40:be:f4:64:72:56:
                    9d:c0:cc:72:2b:93:c5:49:96:e9:5e:a2:ed:14:d5:
                    4d:83:70:0a:09:8a:18:a1:57:07:fe:8a:be:3d:16:
                    ce:1c:a2:ea:b5:22:ff:b4:d5:5f:9b:97:79:56:15:
                    db:a1:20:a5:c2:b9:0b:03:44:2f:48:c2:6b:f9:5b:
                    60:c8:aa:d8:83:29:1e:94:d2:79:e4:b0:36:08:ba:
                    63:de:8b:b1:a3:a4:d8:41:36:ec:fb:5c:55:9a:eb:
                    3b:06:73:b0:f9:d9:c0:a8:bb:69:a0:f1:4b:6d:f7:
                    a9:67:21:16:36:6c:f5:06:52:79:87:8f:79:e1:06:
                    74:64:75:1f:ad:d1:5d:05:86:bb:87:a2:70:51:34:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1E:CD:C0:2B:92:3F:9D:C6:C0:27:20:7C:E8:E3:75:BB:60:AE:CF
            X509v3 Authority Key Identifier:
                keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:e2:a2:f9:3a:7b:5a:38:63:b3:1c:2e:6a:26:e8:d9:71:
         f2:96:6e:50:a5:19:b5:e9:21:b8:48:55:f0:b1:4e:ae:43:af:
         bf:e9:5e:ff:15:27:3d:16:9e:c8:81:eb:23:5c:99:2a:6d:cb:
         1c:25:68:d6:41:70:ce:b7:f0:2b:33:69:ee:c6:94:87:04:f6:
         b5:0f:7c:c4:3b:cd:86:75:74:21:ab:4c:b2:c4:7c:f6:c8:9e:
         5f:a4:28:dd:c2:21:e2:a9:08:3c:f7:24:24:a6:6f:11:e6:b4:
         76:3a:ea:ee:49:fe:f0:ef:71:bb:30:1a:9f:63:33:38:4b:e1:
         cb:a0:d3:80:3e:69:c7:f5:28:6a:18:d7:cf:c4:8a:48:af:80:
         0c:02:79:f3:ba:df:f0:37:81:25:75:8b:e5:0d:b2:a6:75:9f:
         40:a2:96:bf:16:49:71:08:2f:9c:c0:05:73:00:b8:47:bd:11:
         2b:48:a8:f1:7c:e6:fe:80:fc:03:1d:cb:15:c6:15:82:88:05:
         8b:39:30:4d:ba:1d:62:39:9b:40:ea:8f:e9:d7:0c:63:10:1e:
         c4:86:b4:fc:ec:1e:0d:d1:87:78:2d:47:1a:8e:fe:41:4e:49:
         3a:43:27:34:0c:4b:ac:b1:37:50:20:bf:90:21:a0:77:c4:be:
         2e:d5:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:08 2024 by rpki-client on console-fra.rpki-client.org