Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
File:                     jxy5c3UkxDf2-nUhF2uwq3H77mM.mft (raw, json)
Hash identifier:          3vcBgA8Ch9otUZSDXqJvgBmTodfV8l5hT4w6qKpFPOQ=
Subject key identifier:   9E:67:BF:48:98:21:52:AE:25:96:4F:E1:25:A6:C2:C5:BC:8F:85:E8
Authority key identifier: 8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
Certificate issuer:       /CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Certificate serial:       019369D9035742DB6D8710F21D5C7C62DB27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
Manifest number:          04FA
Signing time:             Tue 26 Nov 2024 19:00:50 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:50 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:50 +0000
Files and hashes:         1: 4TLGiRKRAWmZsvWhVdIK7lZ_KQo.roa (hash: o/7HkR/4TcBOBNgU8fnTyekebm3MkdHLsrLzAEPnzvQ=)
                          2: jxy5c3UkxDf2-nUhF2uwq3H77mM.crl (hash: Kcp1PXwwjYVGrYSpbdoURtyxX2G1mVC04QMX7Wqt87o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:03:57:42:db:6d:87:10:f2:1d:5c:7c:62:db:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
        Validity
            Not Before: Nov 26 19:00:50 2024 GMT
            Not After : Nov 27 19:00:50 2024 GMT
        Subject: CN=9e67bf48982152ae25964fe125a6c2c5bc8f85e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:3d:38:a6:b8:3e:c0:b3:70:b8:5e:1c:3e:
                    9f:a5:bd:ca:ae:67:19:6a:e7:0a:fa:3f:30:ab:83:
                    e6:f3:ac:f0:99:c6:e6:19:2e:6a:5a:ce:32:1b:b2:
                    c4:45:16:e7:cc:a7:fd:d2:c0:09:06:0e:af:e7:e0:
                    2c:61:ba:f7:e8:f4:9d:e5:60:ab:39:50:31:a9:ea:
                    f0:8a:b8:39:f5:a8:3a:d3:fe:cd:fa:b2:3e:cc:b9:
                    22:35:50:78:ec:55:65:ec:34:a2:e7:41:05:bf:72:
                    e9:d2:58:53:96:6a:1e:8a:89:9a:ee:1d:ad:a5:77:
                    08:27:9c:ce:7b:d4:77:c3:7b:5b:bb:44:64:d2:e8:
                    30:af:ea:2e:78:b5:97:6b:98:0a:68:7a:e7:14:9d:
                    7b:30:8f:a7:d3:44:a3:4e:e8:a9:97:34:9e:b3:47:
                    c0:00:80:09:da:9e:12:2e:48:c1:52:59:13:34:e5:
                    75:72:41:11:04:23:e9:92:5b:39:7c:2e:ec:9f:17:
                    f5:1c:a0:fc:da:d1:33:73:ac:10:be:f4:96:ea:e1:
                    67:8b:38:27:87:1e:fb:06:05:de:85:28:de:a1:27:
                    48:69:95:d0:80:64:fc:98:ad:d2:78:08:25:48:bf:
                    a6:1e:18:8c:11:ec:aa:0d:ae:f3:c3:4a:3c:79:d7:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:BF:48:98:21:52:AE:25:96:4F:E1:25:A6:C2:C5:BC:8F:85:E8
            X509v3 Authority Key Identifier:
                keyid:8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:98:7b:8b:2a:e1:3f:40:03:39:d9:a9:8f:60:58:54:01:
         3f:cb:3a:12:7c:24:3c:21:44:48:13:f2:f7:6b:0b:f2:7c:5e:
         df:e8:4c:8c:c8:9e:d2:b2:d1:17:19:b7:ea:a7:59:65:a8:1a:
         bb:51:e0:10:8d:0d:00:e7:85:ff:7e:18:fb:47:06:87:d3:43:
         39:f4:8c:5c:42:d8:86:0e:f0:16:1e:11:3f:b9:3e:28:3a:20:
         56:4d:ff:78:42:ed:ba:63:3f:3a:db:87:fe:f4:a0:f6:ba:87:
         b5:a6:4c:4a:9d:2f:f2:dd:c8:d4:cd:63:9d:00:8b:72:84:6d:
         22:7e:d9:60:3b:cf:1a:72:00:12:c3:58:3e:a6:29:df:8c:39:
         c8:0a:96:da:06:05:ff:b1:e5:b1:0f:a6:29:49:85:9e:4f:c2:
         cf:2d:2c:c4:c8:ee:a3:7a:11:3e:04:f5:1c:01:64:8f:9b:04:
         58:7c:94:32:ed:72:c2:f1:12:4b:35:0d:5b:3e:e3:eb:5c:34:
         02:a7:bd:ed:a2:de:0b:12:96:12:3b:a9:19:c9:29:5d:69:8e:
         e4:f6:12:96:22:ef:b7:3f:32:c8:87:ce:e5:d7:1c:5d:3b:50:
         14:c9:11:4c:57:c4:31:3e:d3:5b:07:14:4b:15:5e:1b:da:b0:
         40:8a:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:37 2024 by rpki-client on console-ams.rpki-client.org