Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File:                     JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier:          Sgn3PG2NSC910cYNRL75wJQtUzAL07NKBoVaUrm/U4Y=
Subject key identifier:   35:29:ED:8C:1F:D8:C5:4C:23:66:CD:55:21:60:FD:6D:F9:F9:B6:10
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer:       /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial:       018F88927FB3EE1A17172F338CE710C229A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number:          0516
Signing time:             Fri 17 May 2024 22:00:53 +0000
Manifest this update:     Fri 17 May 2024 22:00:53 +0000
Manifest next update:     Sat 18 May 2024 22:00:53 +0000
Files and hashes:         1: 8qYa-Z-aNUrcKmau5jtgqbT6o4Q.roa (hash: pUEOYuo4PxgrZIuCDsxzOiIzkOwBgBOTMPqvLoOuWFA=)
                          2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: HVA89qzV1CBKcaj/ZZOQNLJaiwwycKexD0WCDy50Lm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:7f:b3:ee:1a:17:17:2f:33:8c:e7:10:c2:29:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
        Validity
            Not Before: May 17 22:00:53 2024 GMT
            Not After : May 18 22:00:53 2024 GMT
        Subject: CN=3529ed8c1fd8c54c2366cd552160fd6df9f9b610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:47:4f:52:a6:4b:ed:6c:0f:f0:82:b0:75:
                    f4:53:2f:ea:90:07:ee:bc:a7:5f:58:2b:f0:d8:a7:
                    dd:87:bb:ef:30:07:1e:69:cb:d0:c0:27:ae:d6:78:
                    2f:a2:7c:0e:b8:c1:8c:ab:75:e4:d4:a5:6a:58:de:
                    e0:10:7b:bb:c8:f8:34:72:2a:ee:ab:54:dc:60:29:
                    ee:c6:42:6b:6b:0d:65:67:e8:2c:af:c9:ca:36:e5:
                    a7:7a:d2:f6:bc:3c:05:1f:e2:98:5b:c1:d0:4b:16:
                    52:3e:7f:65:e2:a3:b2:70:69:c7:6e:c7:a5:ab:a0:
                    fb:45:42:91:90:62:96:7f:d1:5c:ca:8c:62:e7:05:
                    9f:f8:93:5e:de:7d:e8:52:b3:c1:37:ee:72:76:0f:
                    4e:12:cc:40:99:c1:d1:b4:15:b8:87:8b:ae:22:24:
                    f0:03:0b:36:d0:d3:20:08:8c:cc:58:07:ab:70:ae:
                    4a:aa:0f:2b:20:da:df:5f:d0:98:c1:6c:34:00:58:
                    a2:4d:1b:e8:f6:e8:54:11:d0:96:79:85:02:3a:ef:
                    24:44:1f:4b:be:ff:0a:7e:62:16:0c:ff:a6:6f:c6:
                    47:f6:c1:a5:76:35:45:17:02:69:fa:44:9d:45:27:
                    e8:f0:e4:73:16:e1:03:c1:c5:2d:18:c6:ac:2f:42:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:29:ED:8C:1F:D8:C5:4C:23:66:CD:55:21:60:FD:6D:F9:F9:B6:10
            X509v3 Authority Key Identifier:
                keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:11:2c:b3:83:68:9e:a1:29:4a:79:57:8e:6d:39:30:fb:f4:
         cc:aa:9f:15:64:95:4e:49:bb:a6:5e:c4:e9:5e:49:e2:a7:73:
         b6:12:cc:41:c4:2f:20:46:ee:dc:4d:0e:18:2e:ec:61:ad:29:
         25:7e:79:cc:64:b1:82:a8:28:94:58:ce:42:68:ca:57:77:50:
         35:91:f9:c0:8b:dc:c5:12:76:4c:56:9f:ac:38:4b:cf:25:d0:
         b2:0f:5e:23:29:27:fa:33:9e:40:ec:64:e8:b0:82:6c:fd:2d:
         e9:d7:81:82:ed:13:45:ec:ea:cf:48:58:c1:af:f6:d4:70:19:
         0e:22:b8:18:1f:03:91:a4:03:e5:38:73:a8:1d:f5:5e:62:64:
         3e:5f:0e:72:53:a8:3b:29:30:31:31:31:cf:46:42:dd:ac:9c:
         52:4d:b9:0f:12:55:b2:33:68:f8:06:c1:89:35:d1:41:a9:85:
         2a:17:5a:e9:d7:b6:a6:b0:28:16:fe:92:20:f5:78:cd:25:80:
         24:e2:f4:04:89:4e:af:9c:de:64:04:1b:1b:70:7f:cc:77:6d:
         a5:50:99:05:1b:25:6f:2b:73:21:b2:49:6c:e5:0c:f4:0c:7b:
         72:13:05:5a:0e:cd:8b:8a:17:e9:7b:e1:38:2a:57:a6:1e:78:
         bd:38:0f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:19 2024 by rpki-client on console-ams.rpki-client.org