Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File:                     k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier:          36vmICKc4Evi/XkecQkFsi+2DhBXP0Ebm3iSbF9HZXc=
Subject key identifier:   73:AD:F8:19:8D:B8:54:9A:6D:71:5D:B8:C9:3E:1B:C9:5B:FF:26:A7
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       019049B1134636A1E8D6E5B6CB2BC150A10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number:          0C41
Signing time:             Mon 24 Jun 2024 10:00:59 +0000
Manifest this update:     Mon 24 Jun 2024 10:00:59 +0000
Manifest next update:     Tue 25 Jun 2024 10:00:59 +0000
Files and hashes:         1: 1IL4FQPh0sje1jXpEAbVVjA0BMs.roa (hash: cG17JIXSyEa9z1vyq9CS6QAEkgpJrLPa48WPqp8G4Y4=)
                          2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: 8EW+vAJvOpvn262imlBiDcbF3sJGXcjNFzOn30qOpO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b1:13:46:36:a1:e8:d6:e5:b6:cb:2b:c1:50:a1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Jun 24 10:00:59 2024 GMT
            Not After : Jun 25 10:00:59 2024 GMT
        Subject: CN=73adf8198db8549a6d715db8c93e1bc95bff26a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:20:43:f0:63:6a:44:4b:29:23:90:19:64:
                    6b:0a:ed:7c:d6:89:d2:e1:82:48:46:fc:8e:24:6d:
                    8a:91:6b:52:1e:36:c5:f7:10:5e:40:66:a0:e9:02:
                    fe:c9:dd:6c:db:3d:15:da:20:ee:64:84:f6:89:ef:
                    ea:dd:ba:70:51:da:61:54:8e:79:5a:ad:49:5c:29:
                    bd:a1:af:bf:12:00:68:d7:68:6b:b9:3e:8b:9b:1c:
                    96:c4:2e:13:99:31:e4:8c:c4:e0:8e:2a:00:8a:4c:
                    53:6a:12:2f:05:94:84:4b:6e:27:d4:46:cc:c2:84:
                    37:ec:1d:d7:5b:1f:f6:ee:5a:e5:48:2d:71:d1:56:
                    38:2c:65:36:4d:3d:85:6c:6c:13:e9:3f:4c:a9:97:
                    1a:bb:51:ce:df:1a:f0:64:5a:de:5c:61:78:04:bc:
                    57:70:2b:5a:c9:eb:94:ad:c9:0c:d5:bc:2b:66:6a:
                    10:c2:7b:4a:07:62:0e:eb:49:0c:e3:91:7f:30:50:
                    01:0f:67:64:48:f9:1d:1c:f4:50:f1:4c:fb:a3:04:
                    e5:89:1e:7e:11:5f:7d:87:2c:cb:01:78:b5:44:03:
                    53:49:f6:64:b6:d2:e8:dc:31:96:cf:c0:11:57:54:
                    09:e2:26:72:22:ce:20:53:13:60:9e:9e:0b:26:5c:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AD:F8:19:8D:B8:54:9A:6D:71:5D:B8:C9:3E:1B:C9:5B:FF:26:A7
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b5:e0:93:40:ee:c4:53:29:77:21:76:69:87:ad:c6:9b:5b:
         3f:10:f6:14:d1:1a:c1:82:0e:94:fd:52:50:98:f7:e3:ad:c8:
         b2:fc:2d:bc:e4:1d:16:c6:6d:c6:01:ea:53:f4:2f:af:20:bb:
         17:42:5c:0d:41:db:12:1e:0b:55:24:ee:97:8f:21:02:fb:d6:
         86:96:a8:9d:01:97:a6:45:d8:ac:28:cb:86:fb:69:47:c4:12:
         38:7d:ce:e0:68:1c:2d:e3:56:25:bb:d5:91:e4:d9:23:72:c5:
         90:20:58:45:f7:b4:25:67:b8:9d:31:c7:2c:3c:45:86:c8:f6:
         10:b6:a0:2f:de:58:48:69:26:85:2d:42:61:a9:ad:23:78:05:
         13:bf:2d:62:db:dd:f2:9c:76:c6:75:d0:62:9f:86:f6:59:09:
         c1:5c:19:9c:cc:e6:4c:fc:91:48:54:67:1c:55:6b:38:52:ee:
         44:aa:d9:0b:1f:24:37:a3:f8:76:a1:6e:ed:7e:4c:3f:92:27:
         51:19:73:5e:33:48:64:88:82:bf:46:de:e1:6f:bd:48:77:be:
         4a:3a:0e:d9:c8:88:39:dd:e4:53:c5:0f:f1:4e:18:38:43:39:
         66:0b:0b:0a:a8:c0:8b:71:69:fc:54:17:57:19:a7:6a:f3:5d:
         56:ee:70:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:04:00 2024 by rpki-client on console-ams.rpki-client.org