Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
File:                     KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft (raw, json)
Hash identifier:          pbBMRsP8H630ItVoO0lWiAO8RO0NoO2iiXmOkn5x8I0=
Subject key identifier:   2C:4A:DC:84:A9:0D:CF:BD:0A:C6:C7:18:F1:69:07:B2:5D:F4:DF:CF
Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
Certificate issuer:       /CN=28c2202a443537fb8fb280567a17485f1230c411
Certificate serial:       01901DECBC10B4CD9B55C4E5CA1321232759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:02:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:51 +0000
Files and hashes:         1: 9S-RmcUjSEJdeX-arq9R1M4Eqs0.roa (hash: bMj7HCcav5zZeIEbfKV8Khn3XvfjKI0s3SRyPkFvpIg=)
                          2: KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl (hash: 2LQOqQAVjeOIX7AYgLvb/UW02jhQiLtZ1kIMXMjUV1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:bc:10:b4:cd:9b:55:c4:e5:ca:13:21:23:27:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411
        Validity
            Not Before: Jun 15 22:02:51 2024 GMT
            Not After : Jun 16 22:02:51 2024 GMT
        Subject: CN=2c4adc84a90dcfbd0ac6c718f16907b25df4dfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:50:ae:34:ca:19:55:92:0d:c7:32:fc:84:
                    97:69:12:bc:39:00:8c:64:b1:1f:14:0b:80:db:d8:
                    31:a7:25:bd:e4:dd:c1:53:3b:2d:fd:60:38:a5:e0:
                    25:c1:f9:1a:84:86:33:8c:2e:0f:b3:41:f2:08:bb:
                    c6:be:e1:29:d9:03:5c:6f:40:03:a5:27:fd:50:2e:
                    5d:af:9a:49:4d:39:b0:91:40:64:1f:05:2e:cd:d6:
                    ea:b6:f6:66:3b:df:f1:3e:0c:0e:a4:b1:74:74:28:
                    c5:3e:e1:0d:7a:be:09:4c:e1:fb:80:05:f8:14:ce:
                    54:c2:c9:fd:51:ef:54:9e:eb:40:70:60:80:f7:ae:
                    aa:d8:cd:c3:52:98:6d:4e:3a:2c:73:6d:82:7e:fd:
                    11:31:ab:06:38:f8:7a:71:d8:14:71:d6:cf:a3:2a:
                    4c:29:8d:4f:f0:93:0b:81:c6:7c:66:82:8b:b3:83:
                    58:91:2f:88:dc:cc:ea:d0:21:f9:51:f7:25:68:62:
                    12:f5:27:0d:9e:82:0a:71:76:cc:34:b5:b8:4f:08:
                    08:8b:30:82:06:8a:52:d5:a7:67:3a:74:6f:bf:c4:
                    ee:39:4a:e1:72:71:ca:6d:c5:79:2d:23:5d:8c:ac:
                    c8:6b:80:13:b3:15:c4:d1:16:c8:fa:a0:b6:90:ce:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:DC:84:A9:0D:CF:BD:0A:C6:C7:18:F1:69:07:B2:5D:F4:DF:CF
            X509v3 Authority Key Identifier:
                keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d8:f0:70:c7:54:c4:fe:e8:bc:52:55:d5:b8:8a:c2:d1:bf:
         3e:c9:30:ee:6f:d2:fe:25:f8:c8:d8:37:fc:e2:2f:be:88:23:
         1e:38:67:46:a5:9c:56:e1:73:d9:ab:87:76:cb:33:93:7a:30:
         a3:af:08:23:38:4d:4e:ed:d5:89:c8:89:08:15:71:b6:ab:b5:
         ac:b3:e8:ad:44:33:dd:02:f3:bd:a7:23:8f:a9:32:c8:4c:4a:
         a7:ba:fb:8d:23:c3:79:82:c6:04:87:51:c4:20:f0:3b:d9:2d:
         a3:13:4b:12:bc:9e:3c:b4:39:d6:10:90:e6:df:0c:e0:95:d7:
         d2:97:2f:17:5a:8d:88:f5:9a:66:c9:be:ae:ef:fd:2e:f2:65:
         b5:43:7f:38:da:4f:d7:aa:f4:7e:cf:27:4d:b7:ed:2d:05:ef:
         a0:3a:f2:4e:20:d8:f3:74:d5:5a:e2:49:04:48:84:7c:90:49:
         34:6b:71:97:92:22:b8:fc:92:ed:7e:31:29:c1:9f:64:e0:16:
         50:53:39:54:67:55:df:20:6a:36:fa:2c:3b:a9:3c:c6:1c:dd:
         7c:52:20:26:c2:c2:ec:cc:5c:1f:bb:4d:94:78:dd:43:60:b9:
         74:6d:fd:31:cc:9c:3d:5f:14:7a:7d:43:4a:c0:d1:d9:00:c5:
         56:48:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:09 2024 by rpki-client on console-ams.rpki-client.org