Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File:                     jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier:          OM3oU665atg34yzqixTuSsPPNYhUHCeBnuGbO14dhvs=
Subject key identifier:   FD:DF:4C:17:06:A4:8A:25:21:24:15:E3:DB:11:A3:FC:EE:01:FE:20
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer:       /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial:       01901D4672587F0A322F8DBA1B776FBC5F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 19:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:14 +0000
Files and hashes:         1: E0NDxn0fDvbKkJNO0xtBHNwAESM.roa (hash: PcI/At8aUJfi5q7bEJkaBAwB7b+SdmBkULfiuU8guSk=)
                          2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: qwzh+AB0NLsXc1XGk0wLC7K8oydESpQUWHg+gl1T+Nw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:72:58:7f:0a:32:2f:8d:ba:1b:77:6f:bc:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
        Validity
            Not Before: Jun 15 19:01:14 2024 GMT
            Not After : Jun 16 19:01:14 2024 GMT
        Subject: CN=fddf4c1706a48a25212415e3db11a3fcee01fe20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:b8:08:ac:3a:23:c9:83:7d:97:b9:c3:39:
                    c9:f8:4a:96:e1:1a:b8:ab:13:5b:72:85:88:d0:b2:
                    22:05:65:ea:ed:2a:1a:2e:2f:69:f2:35:c9:61:70:
                    89:e3:c6:a4:d3:b3:d9:66:e8:0a:6b:4d:34:fd:45:
                    6b:74:db:01:fe:e0:46:b0:d9:94:22:63:ff:0d:34:
                    76:c7:9e:73:db:d9:8e:df:10:8f:58:59:ad:73:61:
                    26:75:0e:11:59:de:6f:4d:f4:e1:4e:10:c7:09:c8:
                    14:56:ad:d9:bf:b0:bf:e4:fe:dd:ca:00:24:92:32:
                    76:79:a0:73:56:d2:8d:b1:c0:b3:80:99:5e:1d:0e:
                    80:7a:37:eb:dc:a8:92:5c:65:7c:09:75:fd:cd:1a:
                    bc:0e:46:21:22:e1:33:52:10:e5:0b:d4:19:c4:28:
                    df:cc:f3:c0:4c:f7:a0:67:c8:72:e7:51:cb:27:35:
                    8a:b5:ef:cb:18:9a:85:57:98:6e:96:62:e9:3e:e0:
                    ba:45:1b:0d:e9:d2:93:e9:1b:47:b2:40:3c:00:19:
                    f6:db:92:83:e9:84:9a:84:8b:6d:85:9c:ff:05:93:
                    05:77:1a:38:50:3f:22:b4:da:30:bc:96:35:e6:44:
                    fa:95:19:ce:1f:a0:50:cc:13:47:64:24:46:ff:8a:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DF:4C:17:06:A4:8A:25:21:24:15:E3:DB:11:A3:FC:EE:01:FE:20
            X509v3 Authority Key Identifier:
                keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d8:f1:7f:3a:87:ff:4a:20:27:49:2a:ed:af:33:54:41:8d:
         96:97:44:9f:a2:69:be:53:bf:68:fe:34:40:67:7b:ae:a1:b2:
         8c:70:94:81:30:b6:05:26:cd:49:c9:e5:7d:25:57:fb:69:0f:
         52:5b:63:86:cc:86:e1:87:58:33:88:2d:60:6a:14:d9:68:a6:
         7e:04:cf:da:31:07:d1:a2:6a:7e:58:0b:08:ba:bf:e7:ba:f6:
         33:92:d2:8c:42:ba:88:11:d9:01:43:dd:a9:96:37:ce:90:52:
         72:ba:f2:66:2a:77:ac:54:8e:56:b2:ff:66:ab:a3:bb:8f:02:
         bf:38:84:81:7d:a6:38:7b:3e:04:dc:26:43:9b:67:0f:27:c7:
         17:0c:9f:e2:59:85:49:9e:76:17:5e:7f:09:2f:25:55:b4:90:
         03:70:90:70:99:ab:d8:53:70:86:68:07:ca:a6:bb:57:76:44:
         23:c4:10:13:d5:1b:4b:98:0d:28:bb:4f:94:a6:d6:02:b9:ed:
         2b:3b:c1:a8:be:a7:3c:37:b2:68:7c:bf:5c:21:fc:74:2d:ef:
         d2:91:cc:34:9e:67:e8:4c:2a:de:f9:b0:c3:4f:45:fa:b8:ed:
         0c:3e:d8:77:10:a9:13:b6:73:1a:1c:96:bc:e7:36:53:85:0e:
         8b:96:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:40:31 2024 by rpki-client on console-fra.rpki-client.org