Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File:                     KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier:          unQ7nhfzhTg2aRVD+ud06v1EwlzZmOCMBr5/24ca9ik=
Subject key identifier:   D2:65:9D:8D:A5:F6:88:55:5B:02:D4:A9:D8:FF:2C:AE:A8:2B:33:76
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer:       /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial:       01901D7CD35EB6A454D2C372E1FAF92C5E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number:          05CD
Signing time:             Sat 15 Jun 2024 20:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:38 +0000
Files and hashes:         1: HUy1d5ZjGFmCv9h4hYfBJaWPXVQ.roa (hash: 4gMZdGydCQFkoi7SUGmusmQIjxkKElsX6Vh2pKcWjso=)
                          2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: WGptOsVJimehkAnnOQvu0BF7v7n7KECjlDlFgJuoSPw=)
                          3: igpWWFPXsnjwYog_sHX06y5zNG8.roa (hash: McZvGf7iYw82D8NLye+j+so3k8fdjrn+ygHzCluhcKM=)
                          4: jaQPjkY_0OsrXXy3JzkCs4d3LvQ.roa (hash: BOLjbbAdP9O66rLKYrdVzs7LHgM+l0DseCsQZZH9Jcw=)
                          5: uoyPNFET3pgUDmA62gzrtfzDDxE.roa (hash: CzryAxoLSu4WuXWgagG7XUUU5fm0A1dOtkKD/x40+iQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:d3:5e:b6:a4:54:d2:c3:72:e1:fa:f9:2c:5e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
        Validity
            Not Before: Jun 15 20:00:38 2024 GMT
            Not After : Jun 16 20:00:38 2024 GMT
        Subject: CN=d2659d8da5f688555b02d4a9d8ff2caea82b3376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:b5:20:c5:01:69:6e:ee:ab:2d:5b:5f:c6:
                    63:cd:d9:fe:ab:9b:87:d5:9f:15:9a:ec:c2:3c:5c:
                    75:b1:c2:64:0c:cd:fc:48:84:0a:8f:cb:bf:5a:b1:
                    43:d1:33:d7:f4:52:ac:76:2b:87:e7:2f:ee:29:0c:
                    8d:b2:78:4a:8c:9b:d4:b9:78:3e:a0:70:a5:63:cd:
                    77:c9:2e:e3:c6:5c:4d:21:7a:0e:67:88:1f:63:60:
                    35:d0:0b:ac:9b:0c:c1:88:39:92:4a:36:91:d5:65:
                    19:94:d4:4c:f9:19:50:5c:72:f8:74:fa:b7:16:b8:
                    ec:6b:82:fa:bd:7b:5a:73:5d:27:71:26:f3:86:80:
                    26:08:c6:85:0e:a1:87:a6:c6:1d:a2:59:80:ce:41:
                    e3:73:19:b3:a5:c6:2b:ab:0f:3a:d9:fe:e5:67:85:
                    36:d4:05:29:19:7b:cd:ce:c3:d9:e7:96:dc:37:a7:
                    c4:98:56:8d:8f:4b:69:70:a9:d7:06:6e:a7:91:43:
                    f9:b6:fb:95:20:fc:a8:8c:fd:25:ec:90:13:52:36:
                    c1:1b:99:9c:26:e7:4c:24:32:d9:a1:83:b8:d5:59:
                    eb:43:4c:96:d0:27:92:8b:6a:5f:b6:1f:9c:86:ee:
                    2d:6e:a7:8a:82:23:17:3d:60:e1:19:d9:cd:a4:9c:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:65:9D:8D:A5:F6:88:55:5B:02:D4:A9:D8:FF:2C:AE:A8:2B:33:76
            X509v3 Authority Key Identifier:
                keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:83:2f:70:d5:64:62:2f:77:6a:29:a3:1c:50:c5:1f:10:4d:
         d7:ad:06:01:88:ce:bf:d8:70:cc:b9:29:b6:89:a4:c9:86:4d:
         72:15:67:70:63:73:bc:bf:7c:6b:e1:49:9c:65:05:25:de:f9:
         8d:0c:fa:ae:2f:2d:7b:af:53:c1:46:ec:92:cc:33:7e:4b:79:
         73:7d:10:6a:88:b8:80:cc:1e:c2:67:25:90:d4:24:0c:97:24:
         27:7d:40:ae:a6:a7:41:ae:0b:a7:52:66:01:c0:27:83:f1:4c:
         d7:b7:9b:3d:2a:89:49:68:d0:71:e8:0a:66:4d:f3:4a:fa:3d:
         0e:9c:43:a0:7b:32:4b:18:11:f8:00:01:34:68:d9:e9:ed:a5:
         f4:a6:de:db:6a:4b:f5:b7:38:8f:1e:de:1d:b2:d6:af:00:36:
         26:27:14:f0:62:db:19:ea:d9:1a:93:8f:ec:3d:0c:90:3f:00:
         33:67:d4:30:c7:ac:43:be:8b:64:39:5f:dd:5c:55:44:4e:12:
         95:f8:c6:4e:a0:dc:04:fe:e0:ca:30:35:21:20:4d:4f:ff:47:
         ff:c8:e0:21:4d:4b:ff:ba:10:59:28:48:7e:d8:c6:0a:9c:cb:
         04:24:6f:91:ca:79:46:44:03:b0:43:71:f7:ca:78:6e:7b:c2:
         63:8f:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:00 2024 by rpki-client on console-ams.rpki-client.org