Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          tWQEGQ46+Dx7IJJYZRBaBTKxhof5MVt2Jp5mCUSo+Pc=
Subject key identifier:   CE:25:88:18:DA:A3:9E:B4:78:39:91:93:58:BC:43:EB:3D:44:0B:59
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       018F88FF9EF3D30F77C2AAFF45B7B7A6EFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          11A1
Signing time:             Sat 18 May 2024 00:00:04 +0000
Manifest this update:     Sat 18 May 2024 00:00:04 +0000
Manifest next update:     Sun 19 May 2024 00:00:04 +0000
Files and hashes:         1: 8wQbxG0KRKuWI1S7YGJQCvWvB-M.roa (hash: 1gISVguOyOhC0kJinPDxVVS1MYiMVdBfoMfiOlgJNdo=)
                          2: 9-FhmxiZK5Xe9jqdKdiUhgP0shQ.roa (hash: nRZC+FxQO/beGVSiu8Mcdh7bavwgXmX2HbabrGbOXGU=)
                          3: FBJQvS2d6aPtDmBC26dMXvcwKF0.roa (hash: oCRUCnSPOCTMgmLQuFKvPgwJ36wIdbWFOaouIs5Wjng=)
                          4: IjTHt34fcGQWGmoNOHkegXHL0Nw.roa (hash: Nox69MuD6x2YwTUuiHb7HXKEQNWjaq5zrOadyfMMFhY=)
                          5: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: wZLLHpclgBeogkTc2adz9z7oN40KP3mbpKWv8DnQkn8=)
                          6: Obt-TsVOHprXLZD1cL22W05ZE9k.roa (hash: NrWhDc9axZrK741ba10UBeDqkjQq1gZkBBrMqllwAa8=)
                          7: PZ9nQHSnG3UsfTdeKfPTlgzNGqQ.roa (hash: sI544LGLxkuGeOh3oV87NmA/OvHOOkqgwCDcswKeYH4=)
                          8: d12QY9rHhuSDE3GWiNW4CEaBptw.roa (hash: aeDGoILf5960kb68xSf2WB8bgtuNw04EtpGWl8P7Dyk=)
                          9: fR48VQDXb1tXA5q8olbHpzKvGTI.roa (hash: +9yD6Jy5GH9s1ivHLVmc0cmLZyNWxUp7UZw9QLfaciM=)
                          10: n0m62i3DR3LjgqHx-5XJLQKY6L4.roa (hash: 99mDwyhN6MkxvMwx+iX7RkDxhZGG9oMQxrMRXk9TV78=)
                          11: vv-PwzapaKEYBrWPq1aAilEeGwU.roa (hash: fEUMdnCtkqWyzDMcU+ZtUp3IEaZef9S3+ZcC98hSrvA=)
                          12: wtO9H6MOFY2AfefxRjPcng3KwwE.roa (hash: /tMCB8S3lEgfikhfwLZanCTAvQIHM3gc6AdLgUx/3ao=)
                          13: yZ-kJcVnVw-jBC8bbpJ9j4e1ATg.roa (hash: Ib21Nkp2+DoMLQvqaafBeZ/6ZFoSCLii+u8g7k88jY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:9e:f3:d3:0f:77:c2:aa:ff:45:b7:b7:a6:ef:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: May 18 00:00:04 2024 GMT
            Not After : May 19 00:00:04 2024 GMT
        Subject: CN=ce258818daa39eb47839919358bc43eb3d440b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:08:3c:bc:d0:3a:ed:71:33:a9:98:6f:12:82:
                    a6:9d:fd:d9:7e:c1:39:34:9c:42:af:4f:49:31:48:
                    29:a1:36:be:ee:da:fb:c1:b6:bc:ad:12:89:d0:a0:
                    85:12:56:40:9a:2c:f2:b6:3d:67:0d:80:f7:14:71:
                    da:8c:be:b3:29:f2:2f:b8:93:8d:2b:87:a2:2b:0f:
                    33:74:aa:14:b8:02:bd:ba:8c:4d:61:f8:87:4f:a7:
                    33:8f:71:5a:1b:d5:fe:12:99:bf:2e:d1:c5:6b:f6:
                    f9:32:b2:e2:93:11:ce:e9:c3:de:a8:3d:d2:97:e7:
                    32:1c:c8:82:a7:cc:76:35:f0:f6:2b:82:09:0c:17:
                    ec:07:51:fd:18:86:bc:c9:5a:fc:a2:56:13:f1:74:
                    72:56:06:54:3e:1a:b6:f5:0b:47:aa:97:f6:07:b8:
                    34:29:77:c1:ac:0b:cf:8e:f0:c1:25:af:4a:33:9b:
                    93:f4:e0:d1:fe:be:67:e2:1b:bb:ca:d3:11:0b:23:
                    18:39:0c:a2:98:59:42:e9:18:8d:57:c9:93:1a:a7:
                    ea:e3:ff:44:63:16:2d:8b:61:d3:d8:c6:77:45:d3:
                    d3:19:07:da:04:b7:8c:db:43:df:9f:73:ba:e1:20:
                    bd:15:c4:fa:07:44:cb:30:2c:4b:3c:a6:9f:ca:59:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:88:18:DA:A3:9E:B4:78:39:91:93:58:BC:43:EB:3D:44:0B:59
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8b:c0:9c:84:92:63:fa:2b:a5:f6:91:3f:29:9b:ce:fd:a8:
         86:ed:99:e1:ef:24:ee:7a:ed:a6:20:cb:f6:9c:ae:d4:9c:1c:
         94:9f:ca:4c:0c:d8:fb:fb:39:5c:b1:6b:46:fe:5f:68:9b:c4:
         d5:18:4f:ed:2b:66:df:33:82:4e:87:91:99:f8:e8:6b:51:46:
         57:07:42:24:9b:aa:3e:7a:d4:cb:35:e1:da:1f:57:7a:24:09:
         84:14:47:7c:4f:46:79:aa:7e:a1:38:fb:d8:68:43:91:f1:f0:
         a3:ce:51:15:d9:1c:bc:94:44:c3:72:06:5d:2e:6c:16:35:79:
         53:2a:a3:23:62:af:1b:57:0d:2a:4b:ba:d9:41:fe:ef:57:f5:
         3e:0d:cc:b7:88:c8:33:b9:72:22:ef:a0:ea:30:af:67:8e:30:
         0f:d4:ed:bc:7a:8d:79:0e:45:27:4d:a5:61:5a:64:82:25:9c:
         fb:0f:d0:20:6b:2e:12:44:35:b8:c2:25:bc:72:32:13:23:ee:
         bc:8c:d1:e4:d4:fa:bd:9d:12:ac:b6:8c:b9:05:76:00:a4:d8:
         33:b1:7b:e2:d1:f5:9a:db:13:9f:5f:f0:4a:94:ee:89:a1:e7:
         99:81:bf:d0:0c:67:f3:25:18:ce:0d:96:bd:23:28:fe:b8:d1:
         ce:39:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:18:39 2024 by rpki-client on console-fra.rpki-client.org