Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File:                     jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier:          Gs6qqlAhBttpj6O4JCbZbHamhgdu+NTQlPnvq3XJRF4=
Subject key identifier:   85:D2:19:37:6A:B2:6B:0B:26:D9:CC:8D:82:45:22:A1:B3:71:B5:67
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer:       /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial:       01901CD83A9E55F0336ECCDA95147E8B10E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 17:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:51 +0000
Files and hashes:         1: WBRlW3gVon5hNp_vNYdQK7qAiM8.roa (hash: KTOWpm1y/o+TPzv3zp9mu4GdeQoupZu+Fl6LcqNiEes=)
                          2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: UgUNVxSZqTBX3HKCQETCWWhpxEIK0KXghrEYVDZey84=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:3a:9e:55:f0:33:6e:cc:da:95:14:7e:8b:10:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
        Validity
            Not Before: Jun 15 17:00:51 2024 GMT
            Not After : Jun 16 17:00:51 2024 GMT
        Subject: CN=85d219376ab26b0b26d9cc8d824522a1b371b567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:b4:17:01:56:c4:13:ca:e4:03:a6:65:8f:
                    28:3d:b9:46:fb:b2:01:05:7a:80:13:b6:2f:4e:4e:
                    aa:b9:49:3c:fd:2e:ef:6d:5f:f3:76:fb:3d:51:51:
                    26:dc:a7:3a:0b:67:03:31:25:f7:bc:8a:09:e7:20:
                    4f:79:1f:86:d8:a1:c1:6d:22:5d:f1:f1:36:1e:11:
                    6b:5a:ab:03:17:51:a0:c7:56:5c:e7:a3:b9:18:8b:
                    6c:8a:95:30:31:65:c1:4d:90:a8:21:d2:93:f6:43:
                    08:03:f6:71:c4:4a:91:9b:e7:7c:e9:ed:81:9e:13:
                    38:9a:be:a3:51:bf:99:74:ea:ec:1d:40:43:85:c8:
                    33:2f:b5:b2:ee:ad:81:77:03:ea:02:44:fe:4d:7f:
                    e2:ed:0c:6d:12:da:27:2e:4a:9d:79:63:4b:9f:48:
                    c4:88:81:d3:a1:57:7d:57:63:d0:6b:7c:5c:28:b5:
                    e1:03:cb:d2:f2:f5:9a:2f:4e:69:c7:2e:66:a5:3f:
                    4c:ff:89:6f:c5:59:0a:0d:99:17:cb:24:4b:5f:5e:
                    cd:ae:64:11:58:c9:46:b0:c3:b6:3b:71:f6:54:b6:
                    3d:db:fb:ca:ce:4b:74:bc:ea:0c:e3:49:dd:64:e1:
                    82:12:b2:8e:eb:e0:2c:93:de:0e:fa:27:4f:7a:b6:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D2:19:37:6A:B2:6B:0B:26:D9:CC:8D:82:45:22:A1:B3:71:B5:67
            X509v3 Authority Key Identifier:
                keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:26:1a:2d:2b:89:dc:a1:3b:db:af:2b:9c:64:79:a9:7c:
         56:3d:79:d6:b6:14:ad:cf:d4:88:18:a7:84:f9:54:b2:09:9c:
         b9:02:6f:8a:08:f8:06:8a:6a:be:7c:40:f9:2b:1d:ab:b6:d9:
         d0:1b:c0:07:b3:34:88:2e:c6:0b:f7:f6:5b:a2:ad:00:49:8c:
         f2:6b:24:66:c2:d7:cc:9c:9f:ed:11:22:8e:bd:7d:0c:e2:f5:
         b2:3a:07:c5:71:ce:b9:5d:22:f3:48:03:40:5b:4d:93:d6:7d:
         d4:18:c4:12:20:f1:0b:f6:f8:6b:f7:df:65:00:3b:f7:de:fa:
         87:3a:c8:1d:8d:a3:5e:7d:8b:78:c2:33:9e:a2:4c:44:91:76:
         4c:b9:c0:99:a1:5a:4e:73:39:36:c1:5b:7a:23:50:f5:4b:98:
         fa:5b:73:be:80:69:63:c6:65:15:16:3e:1a:a2:6b:53:ed:79:
         59:36:67:2e:54:ea:0a:3d:fc:d6:91:d1:a9:8c:a8:9a:6d:66:
         05:2f:38:73:ed:91:ea:45:bd:49:0f:5b:e5:be:35:72:ab:38:
         49:73:20:a3:b2:8e:af:bc:b2:3c:84:12:cf:27:9e:4f:6a:32:
         50:ec:2b:c0:1a:9d:71:8b:7a:b4:1b:94:63:2d:db:64:0f:0b:
         2f:f7:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:11:41 2024 by rpki-client on console-ams.rpki-client.org