Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File:                     jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier:          iFaajTrKN0/OXEto7D9kGybj4uWsFkwp4x2YF/3g5IA=
Subject key identifier:   C9:48:F0:1C:7C:E8:EA:95:36:93:85:29:13:F0:40:90:AE:96:42:88
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer:       /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial:       019356F706D731C11013BC714AAF315F31A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 03:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:49 +0000
Files and hashes:         1: WY_MWcpyMeByMoY3rkatVfrUP00.roa (hash: QwA8zuji5U1gwA0L5TMbXzv+PpNAvuZeSeBT7YHz5Rw=)
                          2: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: tH/0ZowOKDBKVUlaAZueADO8aPL3VTpxFYu8a8VQaG4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:06:d7:31:c1:10:13:bc:71:4a:af:31:5f:31:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
        Validity
            Not Before: Nov 23 03:00:49 2024 GMT
            Not After : Nov 24 03:00:49 2024 GMT
        Subject: CN=c948f01c7ce8ea953693852913f04090ae964288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:33:54:99:ee:eb:f3:14:a2:34:6b:4a:8f:
                    33:7a:55:cd:e3:e7:da:91:a4:59:50:f2:18:5f:b6:
                    bd:a8:35:02:96:74:1e:d3:89:c9:b8:3f:95:5e:16:
                    8a:2b:9e:30:49:b5:6d:df:d1:8d:eb:55:93:e7:81:
                    97:b6:cf:46:10:49:09:99:b4:ff:53:01:01:5f:d7:
                    ff:56:43:a2:f7:a0:fc:47:58:a8:4c:43:a9:e5:76:
                    8c:eb:6b:57:ad:d0:2e:66:3a:7d:c7:8d:9a:08:0a:
                    f4:86:f6:68:c0:7d:a7:d2:43:83:de:15:22:a2:6c:
                    b4:8b:57:c2:8a:b5:30:3b:07:3f:76:6a:4d:38:6b:
                    37:5d:71:41:77:d3:8f:37:f3:76:0d:c6:b3:7b:da:
                    f8:01:a4:ba:8f:59:8c:75:33:bd:00:5d:ed:78:f2:
                    ed:3e:92:4b:01:45:4e:e1:43:ab:32:2d:7b:03:96:
                    16:ba:34:87:9f:32:01:23:e3:1a:60:63:4b:b9:87:
                    81:20:dd:6a:c7:19:bb:4c:ad:f3:2c:32:0e:c6:5d:
                    f2:a5:7c:cd:f7:c1:53:e5:9c:dc:fb:88:5f:06:33:
                    63:9a:6e:52:b2:cd:70:ad:2f:a5:1a:19:b2:dc:f3:
                    27:45:f0:25:39:78:cb:ee:34:76:fe:2e:2f:51:14:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:48:F0:1C:7C:E8:EA:95:36:93:85:29:13:F0:40:90:AE:96:42:88
            X509v3 Authority Key Identifier:
                keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a5:29:59:de:fe:96:82:e3:ab:ec:15:5a:29:fc:d8:79:66:
         4b:f1:0b:10:e1:46:10:fa:eb:60:9c:b9:ff:4d:1f:fe:22:f1:
         ca:69:af:49:73:e8:93:3a:a5:cd:c5:e4:3c:cd:52:49:a1:75:
         e5:94:da:0a:53:32:e0:6b:f7:63:87:6e:61:c8:17:fd:be:93:
         f6:a5:66:c9:b5:0f:62:64:eb:95:8a:fc:9f:c1:00:80:cb:b6:
         12:4f:a5:30:26:0a:83:dc:96:58:fb:ae:15:b7:a5:1f:32:78:
         ec:c6:19:c4:3e:7a:7f:9d:7f:15:bc:6b:31:4f:b0:87:87:61:
         2f:e8:ad:f9:20:ab:95:57:0b:77:4f:94:02:0c:bf:79:1b:80:
         fd:09:c1:32:73:4f:f5:11:9e:23:3f:5e:b0:41:98:7b:04:9b:
         f7:bf:e7:c3:68:e9:d9:b2:ed:f9:ff:19:54:bc:6d:5b:1b:13:
         d0:1a:be:1d:0e:ba:7f:96:24:d8:0f:b0:13:2b:78:8d:8b:45:
         dd:47:5e:55:63:33:6d:69:5a:40:e3:ee:2c:08:5f:41:ee:a8:
         bc:e8:53:0f:1a:b4:bd:20:5b:81:fa:45:50:1f:6a:a4:ad:ec:
         1a:4f:93:9d:4d:15:6f:74:21:79:34:08:0e:a7:55:e2:0e:b0:
         af:55:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:36 2024 by rpki-client on console-ams.rpki-client.org