Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          7AnQk+kiGYRuqKdlEiPSX9T8F8ZmmWTmEJY93l0Q9eE=
Subject key identifier:   0E:43:42:26:25:08:83:4B:8C:6B:D0:4D:57:43:BF:F1:43:67:21:99
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       01901CA1AEC977F3E44922D7E4A1ED0F8249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 16:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:16 +0000
Files and hashes:         1: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: UbLmxkHkEvpuTG6tgl/ACV196N/PvowMa92Id02Hv3I=)
                          2: WO507J67-aU82VhM3sLjDkJtvLU.roa (hash: jRMaMmgy5m+dOxSUWFnKgAUMGwq17J/+5cc2aj23jVE=)
                          3: XCzrHO8aglqCfJYlZgPzvOIJ31E.roa (hash: IffHfSnoW3m0Q0onEzvMmYE4D5MS4aSDXIvBmJFOBnU=)
                          4: Zj82kWNz4fk_k8EkLATaV0od58I.roa (hash: I8BOa0dCUhlsYddLbV0i9SV0MibtFjlKKVH1zxuVw1o=)
                          5: d7KDzD0QjyzlowpKd39DE-cU8OQ.roa (hash: dlpE9YlDg/nLOQvxYu005lyh6h1sbx29iHsQEjIkXQo=)
                          6: jsLKF-RcC5I4Ji3q3FPuwpySogY.roa (hash: Qjz83MrOCMNBhpm4HJ0CGqzOhPkIhzetTQGLW7dC/Kg=)
                          7: yxDoT1wwezQtoqUldfywGSmz5JE.roa (hash: BZF8fCGDFANSR5ARS9aUPGHRmlhDhWRgvcs3Nf2jpMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:ae:c9:77:f3:e4:49:22:d7:e4:a1:ed:0f:82:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Jun 15 16:01:16 2024 GMT
            Not After : Jun 16 16:01:16 2024 GMT
        Subject: CN=0e4342262508834b8c6bd04d5743bff143672199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:79:17:20:5d:bc:f9:ae:ea:a2:12:50:91:
                    3d:22:e5:f0:e8:ad:e2:51:73:a3:85:b7:ee:f0:4d:
                    e2:8b:f6:c1:c6:a3:84:d2:7f:0a:c8:41:ff:95:e5:
                    78:34:d8:a1:42:16:21:53:e2:87:c0:7b:bd:17:e6:
                    5a:df:19:81:d3:a6:8d:d1:b2:59:b2:32:d0:f1:f2:
                    a8:50:49:fa:65:ad:d9:34:e4:b1:56:53:57:c7:bf:
                    20:cb:1a:6e:d0:16:c9:06:7a:33:01:70:83:d0:14:
                    4a:38:3f:11:53:ac:59:0c:08:5f:67:47:97:40:f2:
                    41:aa:7c:f9:0d:57:64:67:b6:3e:0c:49:73:bb:6e:
                    f6:a5:7f:4a:7e:0c:83:16:e5:66:ea:a4:b7:cd:04:
                    ff:ea:bb:e0:c8:02:c5:01:05:66:47:69:f7:92:5d:
                    de:e5:11:10:5f:a1:cd:85:88:06:56:33:e0:6f:5d:
                    c4:92:26:5b:a2:08:ce:fd:86:2f:0e:a0:38:bc:65:
                    eb:3c:f8:0c:0f:8b:c3:95:e6:f8:29:c5:ee:3b:2c:
                    13:ae:42:81:b4:ed:fb:32:61:06:4c:98:9c:2a:68:
                    6a:04:12:20:e0:88:a3:9f:e7:b1:89:07:90:6e:0a:
                    bb:7d:af:47:12:9d:7a:a6:28:6d:b1:6f:6d:a8:96:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:43:42:26:25:08:83:4B:8C:6B:D0:4D:57:43:BF:F1:43:67:21:99
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:23:24:93:2c:cb:cd:e6:86:5d:cd:c8:2c:fd:b7:4f:13:4a:
         5f:8c:36:2a:f4:70:e9:64:aa:66:03:6b:30:5c:3e:76:06:40:
         c7:0b:26:f2:78:4d:8e:8e:1e:eb:64:32:03:ab:e9:b9:e2:2b:
         e4:2a:bc:c1:d4:7b:18:6b:93:c2:34:3b:9d:97:56:db:00:08:
         94:ec:70:93:b0:45:12:ac:db:d3:6e:98:a3:34:e1:11:68:41:
         37:85:66:d1:9b:f8:15:36:42:17:59:59:cc:52:a6:02:36:2c:
         0d:54:59:b0:d3:96:25:b3:db:67:f6:a6:0f:ba:bc:ab:c2:db:
         8a:f9:ba:e3:7b:a4:00:e0:f8:81:c8:86:fc:82:8d:88:81:3a:
         05:dd:2d:1b:3f:da:3c:dd:05:2f:7e:b9:69:65:99:1a:33:52:
         c8:bf:3f:91:f7:bb:e4:3c:1c:ef:64:6f:91:ba:f8:67:cd:32:
         ba:6a:b9:67:41:aa:da:95:a5:5c:05:4a:1c:44:47:bb:2a:cc:
         e7:3a:b8:70:0f:7e:40:a5:73:b1:e7:a0:ec:0a:1d:47:e4:95:
         27:c0:f3:f6:8f:23:ab:92:f7:2f:ac:45:b4:a5:ce:73:38:e4:
         ff:aa:f1:22:29:4e:6f:30:69:d3:cd:0e:fb:48:e9:81:45:49:
         94:51:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:54:48 2024 by rpki-client on console-ams.rpki-client.org