Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft
File:                     gjBe4me-aOgrPV1pxO0GWy4jn-U.mft (raw, json)
Hash identifier:          BnzkStUxduuaIik6YNfp2R5ejyP78ixo6a1ZNm66HcY=
Subject key identifier:   10:9A:EC:0C:F2:E0:98:AC:6C:13:6F:00:64:C1:A7:D3:F9:91:D9:6B
Authority key identifier: 82:30:5E:E2:67:BE:68:E8:2B:3D:5D:69:C4:ED:06:5B:2E:23:9F:E5
Certificate issuer:       /CN=82305ee267be68e82b3d5d69c4ed065b2e239fe5
Certificate serial:       019040AE5F103193BFBC305F21781C338F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft
Manifest number:          0B99
Signing time:             Sat 22 Jun 2024 16:01:27 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:27 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:27 +0000
Files and hashes:         1: gDpmTZgnC2hLDNoK7ph1U51IevA.roa (hash: l0JQzTY+8s3yyR341nZe/QxXlGKm+RwhTEkA6sek5zw=)
                          2: gjBe4me-aOgrPV1pxO0GWy4jn-U.crl (hash: 6vvwGfE9lX7xeMIHVKVBnF0tN4e5ubE+CMG5T8fSQwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:5f:10:31:93:bf:bc:30:5f:21:78:1c:33:8f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82305ee267be68e82b3d5d69c4ed065b2e239fe5
        Validity
            Not Before: Jun 22 16:01:27 2024 GMT
            Not After : Jun 23 16:01:27 2024 GMT
        Subject: CN=109aec0cf2e098ac6c136f0064c1a7d3f991d96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:dc:d8:6a:cf:b1:ad:2c:4e:06:6c:0d:5c:
                    d1:44:85:be:d9:19:61:13:62:84:10:46:e5:9c:8e:
                    bd:f5:6b:3a:66:8c:64:bb:cc:e9:6b:33:e9:87:9a:
                    a4:ea:56:2a:66:d1:a3:c4:ba:e9:45:a8:9f:e5:88:
                    1a:99:bf:1a:74:e6:ac:fe:c4:43:ce:70:87:bd:b9:
                    30:8b:47:d5:8a:ba:69:55:84:1c:34:2a:56:45:f3:
                    00:66:9c:bf:75:cd:58:a9:bb:0f:c2:ad:fa:68:b1:
                    de:1b:35:da:40:f9:e1:60:2d:be:27:f7:b3:37:23:
                    24:7a:b1:be:c7:13:21:50:27:85:4a:ef:60:68:84:
                    4f:8e:f9:f9:85:d6:03:e5:76:27:12:fb:2c:70:c6:
                    98:1d:f4:a0:bd:d2:11:36:28:22:7e:6b:59:bc:aa:
                    5c:91:ce:b1:66:b1:73:e2:42:e4:3e:fa:04:21:70:
                    b8:6f:2f:a8:f2:a5:d5:13:56:48:3a:e5:a7:05:27:
                    d0:bc:36:76:2e:fd:38:fe:9e:d5:2c:df:1a:e7:58:
                    38:2a:59:2c:c2:27:c9:24:4b:d7:1f:58:f4:46:b1:
                    62:60:8a:7d:67:95:07:c0:47:30:2d:f5:c2:7d:a8:
                    31:98:a7:47:df:60:d1:55:e0:40:98:e1:b5:8a:df:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9A:EC:0C:F2:E0:98:AC:6C:13:6F:00:64:C1:A7:D3:F9:91:D9:6B
            X509v3 Authority Key Identifier:
                keyid:82:30:5E:E2:67:BE:68:E8:2B:3D:5D:69:C4:ED:06:5B:2E:23:9F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:f3:94:76:ab:64:96:0a:9f:59:b9:92:05:7b:9f:4b:4d:
         ec:f4:aa:db:ae:7b:7c:35:13:30:2d:e2:1a:31:a8:8e:e7:5c:
         93:6a:8e:aa:65:5f:7d:f8:9a:b1:be:56:4d:86:68:eb:64:4d:
         4a:8f:8d:54:c0:78:b4:f6:19:7a:10:55:70:53:f2:ad:c1:fd:
         b6:1a:f9:de:2e:be:e0:5a:20:b1:73:c9:c3:d7:84:96:d5:22:
         e1:6d:51:26:12:89:74:20:a0:23:da:7d:10:6c:d5:48:93:e1:
         9d:2b:8c:38:6b:20:3d:22:99:6c:2c:06:63:6d:4c:72:0d:f3:
         9d:33:32:c0:bc:6f:08:2b:00:d5:0b:46:8f:f0:b9:57:24:9f:
         5e:2b:b8:7b:09:f5:af:09:83:d0:d8:3c:d3:f7:19:65:7f:e5:
         68:10:0a:77:27:c8:78:25:54:e4:ae:f5:5e:1a:6b:c2:89:11:
         a3:2d:13:b6:93:b0:40:33:0e:5d:80:38:f2:b5:6a:f3:53:0c:
         98:6a:c4:b1:fe:d1:e6:f3:98:a9:c4:de:44:84:e6:c7:4d:ea:
         b1:5c:0a:2d:2f:f0:26:91:25:ab:8a:5b:d9:d8:7c:e8:b8:a1:
         cf:22:7f:00:3b:f0:f6:87:27:8c:0b:ab:a9:5e:f7:49:86:6b:
         c0:cc:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:35:43 2024 by rpki-client on console-ams.rpki-client.org