Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File:                     jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier:          CizfR30i073d3MEU4gyBhXst/cv8ni+hhXIFtnlvLoc=
Subject key identifier:   DA:A5:EC:5A:91:A5:2E:BE:FA:FD:F0:CD:C3:F2:4C:28:B7:DB:10:90
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer:       /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial:       0190459DA313679EC1C6781508B359E05FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number:          10D9
Signing time:             Sun 23 Jun 2024 15:01:17 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:17 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:17 +0000
Files and hashes:         1: 9PIKHl84kaeIVGJRk6_xafgogDU.roa (hash: cvht2CA13cCQlodfI0kxr98XhesIHPvn5n6QGi2fscI=)
                          2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: vZ/MMzd9meNW9hr7AhW+How4m9RMOe8eRU8twG9t/+8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:a3:13:67:9e:c1:c6:78:15:08:b3:59:e0:5f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
        Validity
            Not Before: Jun 23 15:01:17 2024 GMT
            Not After : Jun 24 15:01:17 2024 GMT
        Subject: CN=daa5ec5a91a52ebefafdf0cdc3f24c28b7db1090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:65:e6:d9:a0:cf:55:c4:41:a5:5c:44:3f:
                    97:3d:89:3d:0f:57:55:55:c6:58:be:06:0a:96:f7:
                    d6:89:2e:fa:a9:2e:20:bc:13:5a:50:3c:ec:3c:f2:
                    b4:fe:50:0e:83:27:76:4d:89:c1:c1:e1:f4:97:22:
                    b9:98:b9:84:4e:94:fc:34:3f:cd:dd:ca:eb:b1:17:
                    dc:d2:e9:79:c7:0b:e7:40:27:ff:e0:12:6e:8d:1b:
                    af:f5:1e:f9:47:48:83:7d:5c:49:f8:20:94:c0:04:
                    a8:e4:79:9d:32:18:67:d7:cf:f4:3a:c8:57:73:4d:
                    4c:7c:0f:ce:59:28:af:be:c4:17:55:ac:f8:3c:8f:
                    2b:80:22:19:56:8e:9a:ca:98:51:e2:c0:00:ed:de:
                    87:40:2c:23:30:d8:14:af:dd:f5:f5:10:e5:cc:5c:
                    15:e1:bf:ec:08:6e:aa:52:86:16:d4:04:b9:51:80:
                    7f:c5:cf:49:37:ec:93:da:d5:c1:05:17:5c:08:9b:
                    6b:5a:5a:f2:0e:d5:aa:47:07:27:9f:1e:23:83:0d:
                    7a:8f:75:5b:da:9d:eb:af:f3:e3:2f:21:5e:51:29:
                    22:bd:a4:7b:99:82:06:a3:e0:a8:de:53:5c:0d:d8:
                    01:33:19:9e:b3:20:f9:6a:39:cb:03:17:9b:e8:76:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A5:EC:5A:91:A5:2E:BE:FA:FD:F0:CD:C3:F2:4C:28:B7:DB:10:90
            X509v3 Authority Key Identifier:
                keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:5d:eb:c0:da:77:fb:85:b0:74:7e:19:f9:2a:38:4a:ab:
         7c:47:b8:6d:34:86:c4:ab:a8:0c:3d:35:28:7d:a4:81:cb:40:
         e6:15:81:56:db:f4:48:59:82:ff:7e:7d:c6:90:a1:16:cd:e5:
         2b:5b:d0:70:09:de:a9:da:61:b1:d7:57:07:fd:b7:f1:69:16:
         ee:97:3c:25:6b:02:87:a2:b4:d0:1a:0c:aa:56:9e:d5:d9:a5:
         d3:7c:45:41:2a:9b:16:cb:72:60:df:e6:12:ba:a3:12:35:99:
         5d:77:bb:dc:e0:75:96:e2:2c:01:7b:7a:39:d4:e3:4a:ca:11:
         9d:d8:76:1b:06:41:10:20:28:0f:5a:dc:55:53:d2:e8:23:31:
         99:f7:67:f6:88:6a:4d:38:6d:6e:17:50:93:a9:c9:2d:cd:08:
         42:0a:59:c0:8f:a8:e3:8b:86:9d:af:f9:cd:80:63:e6:15:c8:
         74:4a:85:54:f4:e2:62:dc:cd:91:81:fe:68:16:6b:17:c6:65:
         2c:a2:af:88:da:b5:08:be:a7:64:d3:7a:ce:35:5c:09:fa:e1:
         29:ad:04:23:c4:c2:a6:ff:a1:b6:61:1b:ad:f6:87:57:60:ea:
         79:0c:73:df:f1:01:58:19:c5:4a:ff:ea:cf:44:c5:43:ca:ad:
         cd:d3:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:51:00 2024 by rpki-client on console-ams.rpki-client.org