Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File:                     JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier:          Fc1M//UYVENNv6MbGVzLeVcmpHE3zAdSaW0aR6iCYT4=
Subject key identifier:   22:A4:BC:B6:87:80:43:41:DD:59:99:38:DD:60:D4:C3:FA:F8:94:22
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer:       /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial:       01901DEB0A49CD8091C59AC355B6395D99B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:01 +0000
Files and hashes:         1: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: ShzPaGt20hpDecDftG0a2ckqKncOupyfDYP5OAmu91Y=)
                          2: app9dYK1ZGEJ9e73T-JpZ6NMDck.roa (hash: VfL7YJolchtbcDI6r6N53U2cJgs64kLFTP/tFdop/VY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:0a:49:cd:80:91:c5:9a:c3:55:b6:39:5d:99:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
        Validity
            Not Before: Jun 15 22:01:01 2024 GMT
            Not After : Jun 16 22:01:01 2024 GMT
        Subject: CN=22a4bcb687804341dd599938dd60d4c3faf89422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:9d:4d:f7:fd:fa:ff:2c:8b:97:d5:a3:ea:
                    e2:8d:89:7b:00:54:ef:46:a4:16:6a:42:94:8a:17:
                    44:13:61:47:89:75:ff:b9:bd:74:a6:3b:01:0e:c4:
                    c3:e1:00:a3:55:40:2a:7b:e8:19:14:d8:45:87:ed:
                    2d:8d:55:27:f8:71:93:83:f9:af:af:43:6c:71:1a:
                    7e:f4:5a:e9:0d:84:ce:87:34:3d:2a:33:b9:88:7b:
                    78:9c:16:a1:1f:9a:6a:ad:42:57:5e:b8:92:a6:a3:
                    5e:d9:96:3e:b0:83:ff:7c:ee:3c:53:6e:3b:01:6c:
                    c3:52:f6:fd:f8:44:ac:c5:c1:a3:71:79:50:bf:f3:
                    ad:00:09:81:bb:f1:80:5b:af:2d:25:b1:c4:23:84:
                    79:fe:ce:9b:58:91:ef:77:1e:2e:27:bd:1d:27:b9:
                    22:25:80:2e:b0:cb:82:e6:da:a6:2b:5d:c1:7d:e9:
                    de:68:e6:01:36:5a:03:24:f2:05:ac:8b:71:eb:16:
                    63:e6:40:16:55:f3:aa:ca:27:4d:40:48:4a:95:3c:
                    42:32:0e:c4:e0:3b:18:31:9f:a8:63:b2:99:bf:fb:
                    1f:fb:3f:f9:8c:52:58:55:c9:ce:38:7b:cf:82:67:
                    da:27:aa:36:be:60:e0:c8:45:e8:09:aa:8b:10:e1:
                    b6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A4:BC:B6:87:80:43:41:DD:59:99:38:DD:60:D4:C3:FA:F8:94:22
            X509v3 Authority Key Identifier:
                keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:aa:dc:d3:44:5c:74:e9:e3:21:e2:87:61:ea:9d:df:27:9c:
         f7:92:80:d5:49:5c:30:cb:57:96:83:da:0b:f3:04:29:67:eb:
         69:41:ec:af:04:d8:7d:34:5a:b0:e0:29:88:18:f2:3b:8e:8f:
         7a:00:f8:b3:aa:78:e4:03:cc:7d:af:80:50:43:3e:78:30:e1:
         47:39:4e:72:6d:68:e1:b7:1f:02:ee:04:5f:02:d6:0d:40:f9:
         5d:1e:6f:75:df:a8:62:58:76:1b:b0:71:b0:17:e7:90:21:ae:
         20:64:09:fc:46:8d:56:70:4c:91:9b:20:9b:7d:73:0c:d8:7c:
         db:8d:1b:49:45:9d:5c:d3:3a:84:26:03:58:72:86:78:f0:d3:
         f1:34:68:ae:3d:45:15:ba:0a:37:ad:ac:3b:52:95:e9:fa:71:
         d2:d1:23:0f:11:76:ec:c2:5c:f0:2a:10:61:77:08:77:a1:10:
         1b:e8:e0:c8:94:76:92:1f:6a:15:2f:a7:6b:25:69:74:f5:11:
         6d:6e:38:19:ab:d5:30:c4:e4:c0:1f:8b:ed:97:d4:bc:2d:1f:
         ae:34:4d:67:36:59:14:af:05:eb:3a:97:68:1f:bd:63:6c:e7:
         a9:34:65:eb:12:d4:ef:58:fa:56:44:88:a8:f9:11:e1:2b:af:
         58:31:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:02:57 2024 by rpki-client on console-ams.rpki-client.org