Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
File:                     jsGCA8JVodC_FYdULHYm8mc41sE.mft (raw, json)
Hash identifier:          k2btQuXHB9oSDEQOO9oTewzJB5BrhkkdkcaU+jmI4qE=
Subject key identifier:   63:96:A5:3B:49:1A:85:41:01:E3:D9:18:9C:F2:53:C6:C4:EA:DD:86
Authority key identifier: 8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1
Certificate issuer:       /CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
Certificate serial:       0193572DA6D9038137B5269B78BC64D3FCD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
Manifest number:          1302
Signing time:             Sat 23 Nov 2024 04:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:29 +0000
Files and hashes:         1: 30oF6ac0nuk8eYt3Ke3RVo4H2fo.roa (hash: U0wIIBSF2NNtVo34y+7lHW59C3gidtpckIT1dAIivKc=)
                          2: jsGCA8JVodC_FYdULHYm8mc41sE.crl (hash: 2TKp13pSF5faPto/aF8DXUQ8lE2qitnrlDzvzdN4Wlo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a6:d9:03:81:37:b5:26:9b:78:bc:64:d3:fc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
        Validity
            Not Before: Nov 23 04:00:29 2024 GMT
            Not After : Nov 24 04:00:29 2024 GMT
        Subject: CN=6396a53b491a854101e3d9189cf253c6c4eadd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:2a:11:85:bb:1f:1b:be:cc:87:35:88:57:
                    3d:54:54:18:f3:98:d5:2a:8b:fe:da:aa:9d:95:a4:
                    ca:36:ab:68:7b:ca:c1:cd:ea:11:29:92:50:01:81:
                    1c:f3:33:e1:b3:f7:ea:27:ba:72:8b:ed:bf:b1:f1:
                    bf:8b:31:14:2b:ac:e6:c8:78:2c:b3:ef:40:da:0a:
                    27:ec:72:13:c6:3c:30:0b:64:3b:df:dc:28:55:8c:
                    e2:e6:30:c1:2e:b6:e1:07:27:4d:71:8b:51:bc:bf:
                    e2:35:86:65:4a:74:2f:df:2d:61:ec:5c:54:6a:68:
                    25:ce:16:91:d9:f3:b4:e3:76:66:0d:47:e1:58:1e:
                    69:22:87:8e:b8:73:c3:71:4b:e6:ee:7c:cd:e5:29:
                    d9:42:eb:05:58:5f:49:00:74:d3:72:a7:b1:59:f7:
                    84:93:31:d2:7f:c8:db:43:16:bf:ad:44:ff:19:0a:
                    3a:fc:35:e8:44:eb:b4:33:ee:3d:51:ee:f5:aa:14:
                    34:3c:a9:85:9b:9b:9c:95:da:f4:61:8d:ef:87:ab:
                    31:5f:61:a8:c0:85:51:fa:97:6f:97:40:43:95:b2:
                    ea:c8:e4:68:4d:2b:65:38:00:d3:b3:f5:f6:75:d1:
                    28:52:f7:bd:c9:6c:85:7c:ed:41:f7:2f:1f:08:a2:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:96:A5:3B:49:1A:85:41:01:E3:D9:18:9C:F2:53:C6:C4:EA:DD:86
            X509v3 Authority Key Identifier:
                keyid:8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:dd:a6:aa:39:e0:cf:64:53:29:39:d7:8f:84:4d:8e:d5:
         2b:86:e2:0f:e4:e9:36:3b:dd:63:23:ce:c0:e8:3f:43:aa:f9:
         4d:49:6b:00:93:d5:02:06:57:08:f3:4a:3b:e9:b6:f1:c1:48:
         9a:6d:97:2b:34:8f:57:20:62:a5:1c:a3:c2:b4:9e:85:9c:77:
         57:9b:bf:e0:d2:c2:8d:1b:6d:32:52:13:9f:7c:89:69:69:58:
         32:a9:a9:e2:74:d4:79:b6:fe:f9:12:8e:0a:3c:64:d3:b6:0b:
         e6:4f:16:f4:cb:e6:cc:50:54:29:14:9c:7b:a0:cd:73:4d:d7:
         ca:01:c7:ee:d3:36:cc:ea:c7:a4:86:2e:ed:4d:b1:07:99:8b:
         5a:bc:da:7a:ff:56:9a:a1:5f:cf:64:06:30:86:ff:e3:83:d7:
         c3:f8:ca:b1:2e:13:0c:c9:ea:a9:2c:b5:be:ef:2c:e9:60:33:
         9b:e5:73:fa:d6:2f:47:40:08:14:42:09:f8:c1:d7:a5:59:e0:
         92:45:e1:b4:ef:c5:f7:b1:65:c8:04:19:2a:3c:ba:5b:7c:1a:
         52:4a:27:77:71:a0:86:5b:4f:88:44:cb:a1:b2:08:b4:aa:2d:
         9a:8f:0f:17:aa:a4:0a:dd:6b:75:f3:61:8b:f2:f2:30:53:c7:
         0b:87:40:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLabZA4E3tSabeLxk0/zXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzE4MjAzYzI1NWExZDBiZjE1ODc1NDJjNzYyNmYyNjcz
OGQ2YzEwHhcNMjQxMTIzMDQwMDI5WhcNMjQxMTI0MDQwMDI5WjAzMTEwLwYDVQQD
Eyg2Mzk2YTUzYjQ5MWE4NTQxMDFlM2Q5MTg5Y2YyNTNjNmM0ZWFkZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8oqEYW7Hxu+zIc1iFc9VFQY85jV
Kov+2qqdlaTKNqtoe8rBzeoRKZJQAYEc8zPhs/fqJ7pyi+2/sfG/izEUK6zmyHgs
s+9A2gon7HITxjwwC2Q739woVYzi5jDBLrbhBydNcYtRvL/iNYZlSnQv3y1h7FxU
amglzhaR2fO043ZmDUfhWB5pIoeOuHPDcUvm7nzN5SnZQusFWF9JAHTTcqexWfeE
kzHSf8jbQxa/rUT/GQo6/DXoROu0M+49Ue71qhQ0PKmFm5ucldr0YY3vh6sxX2Go
wIVR+pdvl0BDlbLqyORoTStlOADTs/X2ddEoUve9yWyFfO1B9y8fCKJxlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOWpTtJGoVBAePZGJzyU8bE6t2GMB8GA1UdIwQY
MBaAFI7BggPCVaHQvxWHVCx2JvJnONbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNHQ0E4SlZvZENfRllkVUxIWW04bWM0MXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82NTE5ZTAtYjMyNy00NTRlLWJiN2Et
MWEzYmUyNGI3NmRiLzEvanNHQ0E4SlZvZENfRllkVUxIWW04bWM0MXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82NTE5ZTAtYjMyNy00NTRlLWJiN2EtMWEzYmUyNGI3NmRi
LzEvanNHQ0E4SlZvZENfRllkVUxIWW04bWM0MXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYC7dpqo5
4M9kUyk514+ETY7VK4biD+TpNjvdYyPOwOg/Q6r5TUlrAJPVAgZXCPNKO+m28cFI
mm2XKzSPVyBipRyjwrSehZx3V5u/4NLCjRttMlITn3yJaWlYMqmp4nTUebb++RKO
Cjxk07YL5k8W9MvmzFBUKRSce6DNc03XygHH7tM2zOrHpIYu7U2xB5mLWrzaev9W
mqFfz2QGMIb/44PXw/jKsS4TDMnqqSy1vu8s6WAzm+Vz+tYvR0AIFEIJ+MHXpVng
kkXhtO/F97FlyAQZKjy6W3waUkond3GghltPiETLobIItKotmo8PF6qkCt1rdfNh
i/LyMFPHC4dAIA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:23 2024 by rpki-client on console-ams.rpki-client.org