Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File:                     jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier:          4J9bMW77qG1SUzJa+DjezPhkznrvBFyGQSaxYgTJ/gg=
Subject key identifier:   CD:ED:F0:3A:01:36:BA:ED:3B:1A:F9:2B:F6:EE:0E:60:50:67:CF:07
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer:       /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial:       01903EC23834D793BE33B8EE7A5209BCA22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number:          11D4
Signing time:             Sat 22 Jun 2024 07:03:53 +0000
Manifest this update:     Sat 22 Jun 2024 07:03:53 +0000
Manifest next update:     Sun 23 Jun 2024 07:03:53 +0000
Files and hashes:         1: BijPqNvcIcXsBxtPVZchlJ_xZ6U.roa (hash: Ik27LFIzykeKQioSKlKVbp6xIv3YWJHaSut7T5i52Uo=)
                          2: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: /hTWswQT3c8rA/oJq8HoF58WYU3sX8aYg8OXlN6o8JE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c2:38:34:d7:93:be:33:b8:ee:7a:52:09:bc:a2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
        Validity
            Not Before: Jun 22 07:03:53 2024 GMT
            Not After : Jun 23 07:03:53 2024 GMT
        Subject: CN=cdedf03a0136baed3b1af92bf6ee0e605067cf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:8a:13:04:11:6c:c5:b7:61:e6:6e:10:a2:
                    f7:54:95:00:55:7b:52:4b:b8:9e:0d:c2:15:66:e9:
                    62:d6:66:73:ec:6f:2e:40:32:98:f9:d2:b2:6f:21:
                    b5:eb:86:82:39:bf:d4:c1:8f:90:f7:94:7d:b5:61:
                    af:7c:a7:a9:4f:91:09:25:28:8f:1b:ba:ec:ad:63:
                    80:d1:53:0f:ce:df:a5:3e:77:3b:bd:e7:69:80:39:
                    7c:6b:58:05:ff:bd:f2:2d:67:ed:5c:89:b7:e2:d2:
                    a7:bd:f4:06:a9:e5:77:69:9c:8d:d8:27:81:50:66:
                    4c:b6:80:56:ff:cb:ea:ee:11:df:07:23:1c:81:c7:
                    d3:17:16:95:86:1d:06:21:65:8c:da:45:cf:46:07:
                    cb:68:5f:b1:ce:bf:98:68:87:49:3a:20:8f:72:9b:
                    26:ea:d8:59:3f:f1:36:97:90:52:4e:c7:ff:4b:ed:
                    8d:ed:8c:de:e1:96:ce:51:13:18:18:73:95:a3:5f:
                    de:dd:d6:f3:bc:7c:2f:43:02:ec:7e:f1:4e:95:81:
                    38:fc:29:c6:e0:d0:a7:b8:45:f0:28:95:1b:49:8e:
                    ca:9d:73:cb:63:5f:bd:5c:aa:b1:a4:7b:63:0c:a8:
                    bb:bc:b9:9e:42:90:15:a4:51:10:9e:fc:d5:05:12:
                    a7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:F0:3A:01:36:BA:ED:3B:1A:F9:2B:F6:EE:0E:60:50:67:CF:07
            X509v3 Authority Key Identifier:
                keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:18:8f:9e:dc:9e:a5:eb:0c:ca:2f:be:07:80:a8:ed:98:fb:
         9f:04:f4:ad:0f:86:27:09:ad:03:01:c0:12:30:06:d2:2f:68:
         8d:ef:49:48:81:fc:06:92:ea:ed:53:2b:d8:d0:58:b8:f4:9e:
         c8:3c:57:7d:83:f4:14:ba:5f:fb:c7:f4:7c:ad:c9:c8:f5:e1:
         b0:76:c2:ea:f7:e1:83:99:00:40:52:8d:ea:46:f8:50:bf:a8:
         6f:ed:67:45:96:88:8b:9d:cf:38:ae:4b:cf:b2:7b:ea:62:0d:
         7f:0b:f3:ce:d0:e7:90:d3:dc:35:14:45:f1:02:ec:c2:33:a5:
         70:65:90:ee:c8:f0:78:e4:3d:6e:f5:71:5e:7e:16:6f:5e:23:
         be:e4:81:b9:1e:74:06:37:49:37:51:b5:f7:19:c9:c6:60:68:
         67:0d:d2:41:df:ac:6d:3b:61:26:cf:17:8d:fd:7a:a8:68:05:
         af:bc:eb:a5:07:65:94:9a:5e:a8:36:94:d1:09:c5:b3:6e:63:
         51:81:8e:37:81:66:82:81:53:84:ef:69:1f:3a:41:d3:95:07:
         ff:26:88:5f:46:9a:66:5a:39:99:be:7a:e4:e9:3b:4d:18:a4:
         ed:b6:4d:d0:80:33:43:2d:61:74:9d:05:24:5a:3f:c2:d1:ad:
         0b:5d:cf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:10:10 2024 by rpki-client on console-fra.rpki-client.org