Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File:                     KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier:          LsXImWj3DYBHZhM9Ny6A8WdhP0aU/ne49a67geDqNsc=
Subject key identifier:   8A:10:B6:A0:F0:FD:1D:9A:A9:17:AF:B1:15:E8:82:FE:BB:D9:56:15
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer:       /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial:       01901CD84A4EA46494F50B08FA139ECB35AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number:          1148
Signing time:             Sat 15 Jun 2024 17:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:55 +0000
Files and hashes:         1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: tY1nN7+k1DAXlTlCxiAmqbFY9fBL76NY7OlI3CVPYG8=)
                          2: zLD88dkW7EI27vIeV67ZT-hY7HU.roa (hash: iorFOG464jgj9SGIcfs8/VAgLLfZzwdeZESehiFEfro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:4a:4e:a4:64:94:f5:0b:08:fa:13:9e:cb:35:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
        Validity
            Not Before: Jun 15 17:00:55 2024 GMT
            Not After : Jun 16 17:00:55 2024 GMT
        Subject: CN=8a10b6a0f0fd1d9aa917afb115e882febbd95615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:1c:e6:3a:54:eb:06:09:2f:bd:02:7a:26:
                    50:ea:c0:2e:92:80:54:0a:55:79:12:06:32:6d:92:
                    3e:04:da:ce:8b:99:ba:35:9b:87:68:68:02:3e:88:
                    a1:6e:5e:bf:28:7f:9a:0d:cb:95:99:f2:d2:34:3e:
                    ca:fc:02:9a:04:f0:94:ab:e1:3c:57:84:79:04:23:
                    32:1f:d3:5f:fe:25:b5:a3:58:d3:19:b3:bb:98:ba:
                    12:12:10:11:5f:41:fc:25:a6:16:71:8e:f6:1a:6c:
                    02:3e:ab:71:68:f9:e7:84:84:76:1c:d4:dc:d6:a4:
                    6f:ae:ed:58:c2:e4:4c:43:ad:7e:c7:d8:cc:cf:03:
                    c3:88:e2:f3:dc:8c:cf:e6:a9:23:7f:f2:55:25:3b:
                    de:20:6d:d9:4d:2f:8f:47:96:a4:8c:3a:51:81:79:
                    42:0e:f9:ad:6e:72:e3:1c:46:16:42:bd:2e:22:d7:
                    7d:b4:a0:33:61:7b:fb:8e:ff:f9:86:b2:bf:bd:09:
                    74:5a:0b:02:3e:78:04:15:1a:61:b6:db:9b:0c:73:
                    26:a5:b3:01:aa:f6:80:42:56:3f:f6:44:9a:61:fd:
                    80:0e:40:b9:0e:52:01:1b:ea:3a:93:34:b9:42:02:
                    47:67:88:4c:4f:6d:63:35:d5:f6:a9:81:4f:d9:9c:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:B6:A0:F0:FD:1D:9A:A9:17:AF:B1:15:E8:82:FE:BB:D9:56:15
            X509v3 Authority Key Identifier:
                keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:1d:2e:e3:e8:1e:34:02:37:73:71:b0:c2:ca:7f:f9:43:
         9e:d1:d0:e7:45:3b:22:2e:3b:fb:bf:39:7b:c8:18:ef:68:c5:
         73:b5:02:98:36:5e:e9:ff:9e:7e:64:99:6c:8f:a6:97:00:fb:
         fe:d3:b4:75:52:0e:e9:18:bd:32:d5:ec:a4:9a:a1:72:c0:9f:
         9b:80:d4:a5:63:26:63:21:a1:ad:d1:74:27:2d:05:e5:24:d9:
         0e:39:bc:70:28:fd:5d:1a:ff:8e:20:04:cf:57:7c:af:c5:d0:
         d4:26:9d:a3:c3:c1:f2:34:e5:7a:93:d0:58:ce:2e:ed:5c:98:
         f1:bf:19:2a:56:0b:e9:c7:2d:f7:6e:1a:ef:54:1c:f4:8b:69:
         0f:96:f7:50:ce:6a:da:aa:d9:db:ca:72:ac:5a:5d:05:d0:da:
         b2:65:8e:38:d7:b2:69:06:35:ea:36:d6:7a:7d:64:63:f3:1e:
         46:2c:53:34:24:bb:bc:63:23:59:99:95:8a:97:4b:0c:0d:b2:
         a1:f5:b4:3a:b5:e5:4f:3b:b2:d3:31:b4:c7:21:24:35:21:ff:
         aa:ca:41:01:cc:3a:9c:55:07:d9:dd:f1:26:8f:55:6e:8a:d4:
         1f:a6:fa:09:93:6a:ab:eb:96:30:36:87:0b:60:9b:bb:79:8f:
         db:63:e2:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2EpOpGSU9QsI+hOeyzWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3
YTdmYzQwHhcNMjQwNjE1MTcwMDU1WhcNMjQwNjE2MTcwMDU1WjAzMTEwLwYDVQQD
Eyg4YTEwYjZhMGYwZmQxZDlhYTkxN2FmYjExNWU4ODJmZWJiZDk1NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDkc5jpU6wYJL70CeiZQ6sAukoBU
ClV5EgYybZI+BNrOi5m6NZuHaGgCPoihbl6/KH+aDcuVmfLSND7K/AKaBPCUq+E8
V4R5BCMyH9Nf/iW1o1jTGbO7mLoSEhARX0H8JaYWcY72GmwCPqtxaPnnhIR2HNTc
1qRvru1YwuRMQ61+x9jMzwPDiOLz3IzP5qkjf/JVJTveIG3ZTS+PR5akjDpRgXlC
DvmtbnLjHEYWQr0uItd9tKAzYXv7jv/5hrK/vQl0WgsCPngEFRphttubDHMmpbMB
qvaAQlY/9kSaYf2ADkC5DlIBG+o6kzS5QgJHZ4hMT21jNdX2qYFP2Zxk2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoQtqDw/R2aqRevsRXogv672VYVMB8GA1UdIwQY
MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt
YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4
LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm30dLuPo
HjQCN3NxsMLKf/lDntHQ50U7Ii47+785e8gY72jFc7UCmDZe6f+efmSZbI+mlwD7
/tO0dVIO6Ri9MtXspJqhcsCfm4DUpWMmYyGhrdF0Jy0F5STZDjm8cCj9XRr/jiAE
z1d8r8XQ1Cado8PB8jTlepPQWM4u7VyY8b8ZKlYL6cct924a71Qc9ItpD5b3UM5q
2qrZ28pyrFpdBdDasmWOONeyaQY16jbWen1kY/MeRixTNCS7vGMjWZmVipdLDA2y
ofW0OrXlTzuy0zG0xyEkNSH/qspBAcw6nFUH2d3xJo9VborUH6b6CZNqq+uWMDaH
C2Cbu3mP22PiJA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:00:11 2024 by rpki-client on console-ams.rpki-client.org