Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File:                     jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier:          hSpjghSQzrp1y280Q0sadcbZAhMMjK48AzjQ1ARXU28=
Subject key identifier:   C0:D3:B1:A7:63:9F:D4:9B:1C:9B:A6:01:A5:7A:92:13:D3:32:31:A7
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer:       /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial:       019048699148327A069C05B79BE374F41B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number:          1168
Signing time:             Mon 24 Jun 2024 04:03:16 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:16 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:16 +0000
Files and hashes:         1: iavlR0ji5CDa3HjSK7kXcs7OL2E.roa (hash: x9dGSNHMSLWnAH4RxQhpl4DchrsMvls3HpdKMcvLMkQ=)
                          2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: 3KHuINPtvNGI5/k/jyP/9I2d72Kk/72rEzpR1Q+Ej0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:91:48:32:7a:06:9c:05:b7:9b:e3:74:f4:1b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
        Validity
            Not Before: Jun 24 04:03:16 2024 GMT
            Not After : Jun 25 04:03:16 2024 GMT
        Subject: CN=c0d3b1a7639fd49b1c9ba601a57a9213d33231a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:6e:8e:66:71:ef:7e:26:bc:80:4e:84:64:
                    42:5d:ba:2d:50:d0:c5:66:dd:a4:b5:45:f1:00:6c:
                    be:f5:bc:90:85:d9:b2:2c:a3:18:c5:50:d7:27:38:
                    f8:1e:64:74:c5:d9:72:7f:e4:35:40:ef:4f:bc:74:
                    9b:a6:87:f9:d1:ac:a1:93:aa:7e:f6:81:1b:41:bc:
                    fd:90:fa:3a:67:bc:2e:64:22:bc:6c:f6:fe:43:2c:
                    e1:ed:94:28:b0:e1:a5:e2:98:a8:4f:4a:18:07:e5:
                    63:8e:cb:df:55:86:c9:b9:a7:de:e7:1d:c6:55:bb:
                    7d:1b:6a:43:05:9d:12:d7:77:18:3f:9a:f7:74:03:
                    e1:cc:9c:bd:1f:f8:44:17:44:39:48:7d:0b:36:5f:
                    86:ca:78:71:7a:7b:f5:04:dd:95:c8:1a:42:ce:e3:
                    bd:91:1a:7c:6f:d2:de:2d:4d:96:c8:5e:4a:db:f2:
                    7a:60:9d:bb:8d:18:2f:9e:ee:72:21:fe:33:4f:6f:
                    59:36:ce:08:40:d3:a3:4f:9d:8d:47:fc:71:d9:11:
                    56:88:b0:3a:25:b8:82:db:0f:c2:3a:48:b7:20:8e:
                    2a:4a:29:3a:98:ac:d5:84:66:1f:d5:9c:ae:f0:bd:
                    26:95:53:5e:5a:4a:16:b9:0b:f1:b7:46:14:d5:a6:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D3:B1:A7:63:9F:D4:9B:1C:9B:A6:01:A5:7A:92:13:D3:32:31:A7
            X509v3 Authority Key Identifier:
                keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:35:d2:dd:78:c6:ec:cb:2d:7b:2d:dd:f3:0e:13:be:2c:
         ca:c3:52:b2:c0:f0:c8:6c:b1:6f:80:f4:7e:0a:c0:14:7c:56:
         b4:7d:45:48:e7:37:22:a0:b4:cf:36:ef:8a:2d:00:86:b5:cc:
         89:76:8d:3f:34:e3:54:c2:8d:3d:9f:b7:83:93:75:0d:fe:92:
         df:4a:a3:b6:aa:ba:5b:13:c3:aa:48:e0:25:d6:3f:b4:11:be:
         18:e2:a4:29:3f:e0:6c:1e:8c:a3:7b:c2:39:17:9f:81:b1:0e:
         9e:15:3b:4f:95:7d:af:fb:0b:eb:8d:f9:28:f4:c3:2f:44:85:
         56:5c:19:0a:25:e0:79:9c:4d:ac:ff:87:2f:4e:85:6c:9f:b0:
         16:72:6d:43:b0:45:ce:91:f0:8e:cb:39:52:bc:5d:b0:7d:0a:
         8f:5b:2d:81:5f:bd:5a:e2:7a:83:90:fc:d7:2b:ac:bb:3b:ce:
         53:44:3e:4c:15:fa:f8:16:a3:d2:12:6e:84:28:15:e3:fc:7f:
         63:f0:2d:6c:14:36:81:4c:d8:52:f4:28:0e:d6:a1:2c:fd:37:
         1a:05:8a:27:b0:e6:16:33:f2:46:14:34:13:10:e1:c4:9b:fe:
         3b:a3:6d:e2:f7:59:3c:d4:03:df:6b:05:84:14:17:5e:b4:8e:
         52:45:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:24:44 2024 by rpki-client on console-ams.rpki-client.org