Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File:                     jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier:          cHlg1OzCRrTFBg6CitPuJBanykw08c3tUt+ZuTYaJgk=
Subject key identifier:   D3:4E:6B:81:F1:55:1F:CA:3D:E9:B6:4E:4F:86:30:E4:88:AE:BF:59
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer:       /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial:       01904453A46BE467736F3F25FE12F41B0336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number:          0EE8
Signing time:             Sun 23 Jun 2024 09:00:50 +0000
Manifest this update:     Sun 23 Jun 2024 09:00:50 +0000
Manifest next update:     Mon 24 Jun 2024 09:00:50 +0000
Files and hashes:         1: HqFhg1sEiN9LS26OfJHpBiW2NWc.roa (hash: 3kRZssYnhcEhih9PVP4lIDbN04tEZVXvLBfvP092D38=)
                          2: Uq1ok9LYmA4NnElZMshQiuKoyws.roa (hash: VngKxDpG8U+e5Kj2jV3S6RjmGvGG9Ael7AsI/zgum14=)
                          3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: MZfHVYd5YRZBanoGnXrBC/cLICfjKy5zzJun9Ek5T5g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:53:a4:6b:e4:67:73:6f:3f:25:fe:12:f4:1b:03:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
        Validity
            Not Before: Jun 23 09:00:50 2024 GMT
            Not After : Jun 24 09:00:50 2024 GMT
        Subject: CN=d34e6b81f1551fca3de9b64e4f8630e488aebf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:b8:5f:a0:f0:d2:b3:25:a6:cc:2b:15:90:
                    66:22:c0:d7:54:e6:d6:60:b3:ea:fc:52:ee:3e:f5:
                    df:e5:c3:5a:f2:32:3a:af:2b:12:dc:35:77:2b:d3:
                    46:96:25:e5:54:1e:d3:81:fc:b9:dd:8f:01:8c:76:
                    fd:9a:85:a4:df:0a:eb:fa:f9:65:e4:72:2e:4a:46:
                    e8:f9:a1:f1:e1:81:28:10:eb:be:bc:a6:3f:ea:62:
                    b2:96:ec:73:78:07:b1:01:43:78:91:2e:5a:e9:3a:
                    2c:f2:44:43:7b:e1:8b:b5:94:8b:c8:6e:f1:0d:a8:
                    e6:54:aa:69:c1:4c:1c:bd:a1:fa:9f:d7:0f:ab:37:
                    28:db:e7:e1:bc:02:78:d0:fb:96:79:40:2b:ee:06:
                    b6:d7:58:44:58:d9:a5:91:a6:b5:22:8c:4f:8b:dc:
                    36:49:8b:a9:ec:4e:e4:42:43:b5:db:9e:75:82:bd:
                    f2:91:01:dd:c5:fe:e8:40:6f:34:c8:fe:fb:2d:be:
                    5a:68:de:e5:5d:92:95:d2:a6:59:b9:e8:4f:ba:77:
                    7a:de:e2:a1:5c:52:df:a6:46:60:bb:9a:92:a4:66:
                    b2:c0:8d:41:a1:cc:cf:b7:53:6c:03:7a:e8:28:ea:
                    b5:2c:12:ea:27:fd:57:9a:94:05:b4:d4:75:e9:1a:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4E:6B:81:F1:55:1F:CA:3D:E9:B6:4E:4F:86:30:E4:88:AE:BF:59
            X509v3 Authority Key Identifier:
                keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:4a:0a:84:3f:a8:0a:5c:e7:7e:9f:48:c2:a3:58:35:b5:17:
         aa:f4:7e:be:87:60:70:62:2f:c5:d1:16:ea:d2:b2:14:9c:a6:
         68:9f:2b:a6:8c:cc:1f:f4:37:b5:ef:7c:21:6b:9f:aa:00:d9:
         3a:ba:5f:16:ca:28:96:1b:54:b3:86:15:5d:dc:32:fd:9b:bf:
         d6:6e:b6:78:ca:45:1b:27:7d:8b:a3:bb:79:b9:d0:10:0a:5e:
         fe:cf:ef:a1:7a:7f:44:42:e3:86:53:eb:28:21:0e:c8:8c:69:
         25:52:a4:bd:5e:a6:44:b6:f6:e6:93:5c:34:58:7b:bf:18:45:
         63:8f:38:81:cd:c6:b4:2e:0e:e2:12:be:41:af:46:e5:0e:64:
         a1:1f:b0:4b:4d:21:f6:d4:81:b5:8c:61:1e:69:92:13:8a:9d:
         bb:39:bd:82:f7:f4:a5:4c:3b:f4:00:d4:32:c7:5c:de:eb:a8:
         09:53:4b:e0:31:0b:de:2a:5c:de:04:05:05:57:e4:e5:a1:e7:
         a9:d9:93:e8:f4:35:99:f8:e1:8f:81:16:94:5e:cd:2d:f3:a9:
         2b:0c:04:be:b7:7c:20:16:d8:99:aa:59:48:0d:4e:c4:b1:04:
         f9:38:d9:d8:85:ed:61:4b:e6:cb:7a:fd:07:c8:4e:5f:2f:1d:
         a6:cd:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:28 2024 by rpki-client on console-ams.rpki-client.org