Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File:                     kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier:          qwWCy53RLR35Fizr0W5Q4rvN2voDm0ZEBrZVBqIFQAM=
Subject key identifier:   9A:2E:E7:78:F7:93:3D:3F:EA:BD:3E:8B:05:6A:DF:28:9B:90:AF:90
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer:       /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial:       01901E8FF76FCEB75A1B168D02FA67734E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 01:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:09 +0000
Files and hashes:         1: OsY5Q2-Kus0VebXYBDvQsrabpik.roa (hash: 1rVzC92B5IemAfyoDc7ccz/c7zy+AWAfRF66ONBRFic=)
                          2: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: bjnGfdSDHXhtOwVwQ4QorvqPnR2C/cAr8xxFlhi8B2o=)
                          3: uFcPnWF9JfzemuHy8aiOX4rZirI.roa (hash: f2iMSlWoLeHdsuCekbeXi0dRiysFjp68wBKgBJq3ECM=)
                          4: uyTZ2uVj9mcPOWGSKs0K9nLAblI.roa (hash: 5fXDCIA6mBRWMCklOHgslXiSKsn6OU6gnmz0ylN8KWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:f7:6f:ce:b7:5a:1b:16:8d:02:fa:67:73:4e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
        Validity
            Not Before: Jun 16 01:01:09 2024 GMT
            Not After : Jun 17 01:01:09 2024 GMT
        Subject: CN=9a2ee778f7933d3feabd3e8b056adf289b90af90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:9e:b0:99:b1:4b:85:59:aa:bb:db:a8:d9:
                    e3:7a:4b:4a:fe:78:68:d8:4c:67:cd:bf:be:24:9e:
                    d1:cf:05:b7:68:54:68:49:d1:61:78:e2:3b:d0:60:
                    66:a4:61:05:d5:b2:6b:7d:a1:b0:1d:88:e7:ec:0c:
                    20:fd:8c:0d:e6:43:0e:7e:14:04:bb:62:fa:1c:55:
                    18:dd:c1:cd:0e:f5:44:5f:9c:66:a9:5e:7b:56:ef:
                    50:e5:83:9f:0a:a4:30:4e:27:7f:e8:43:81:f6:31:
                    c8:1c:c3:50:fb:22:c4:b5:1d:90:49:ac:58:a8:3a:
                    a6:a1:9a:ba:ae:55:be:a9:79:f2:ab:4e:3d:ee:61:
                    0b:7e:e6:5d:30:37:c8:e8:5f:f9:4d:28:6a:01:df:
                    0a:a5:3d:a3:41:79:54:e0:b1:9a:46:13:99:84:e4:
                    d9:8e:01:70:b7:a0:6a:b6:f2:34:b8:96:5c:8b:e4:
                    2f:36:d9:b0:0c:d0:9d:8a:92:aa:e3:b5:fe:15:93:
                    81:1e:08:2f:c8:d3:73:8d:e8:d3:af:ea:c5:b6:e9:
                    a2:11:18:b0:75:f2:a8:d2:5c:a1:bc:54:4a:dc:c2:
                    ef:33:2f:02:34:ac:82:9c:ed:85:17:15:80:1b:e4:
                    81:62:55:0e:2b:31:29:5b:fa:45:17:3b:b6:b7:9f:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2E:E7:78:F7:93:3D:3F:EA:BD:3E:8B:05:6A:DF:28:9B:90:AF:90
            X509v3 Authority Key Identifier:
                keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4c:d0:e2:52:56:fd:19:a9:b3:6d:e1:ee:4c:02:50:27:9e:
         18:31:7c:51:63:0c:0f:97:ca:c2:d1:d2:cc:c1:f6:c2:d7:fd:
         5b:f8:d7:d3:11:de:63:91:d4:72:41:39:98:cb:66:e2:ce:4e:
         fa:dc:47:0f:2d:3f:37:83:7e:98:81:a4:da:d2:d5:c6:80:3d:
         90:59:28:db:d7:2d:30:ec:49:61:0e:bb:17:3b:42:86:f1:f7:
         f4:89:c4:be:8c:e3:3a:da:ac:c0:36:e6:46:f6:db:5c:0c:62:
         49:5e:5b:84:3b:ed:7f:94:08:1e:97:58:e5:06:e0:61:5c:75:
         68:a1:91:d0:2e:dc:4c:da:ca:14:62:67:5f:4d:23:1d:b4:22:
         49:17:4e:2e:b6:6e:a5:ba:62:04:36:6f:cb:2c:3e:ca:34:89:
         6b:db:eb:eb:ea:68:ce:82:8e:87:b8:ec:a6:7d:6a:18:79:44:
         ba:8f:ac:56:d2:43:9f:59:66:81:62:82:0b:43:c2:e6:e8:cd:
         c9:36:33:1e:58:9d:67:58:50:73:2c:26:e6:91:bd:9f:6a:06:
         8d:f5:4f:43:f0:9f:ef:12:06:9a:fc:7b:58:ad:d6:1f:79:1d:
         a6:30:83:60:27:0e:05:f0:af:61:75:60:55:09:d1:bc:c0:21:
         95:02:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:06 2024 by rpki-client on console-fra.rpki-client.org