Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft
File:                     kaEXOnDkH0WTVHZpraIvDX9o81Q.mft (raw, json)
Hash identifier:          uZlhhlV4RShLWCzY/+aaXDK4ZPzrB9eeMeToETpSdns=
Subject key identifier:   90:50:B7:DF:3D:13:D3:52:1B:1A:7E:B5:FC:8A:DB:5A:01:D6:0C:D0
Authority key identifier: 91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54
Certificate issuer:       /CN=91a1173a70e41f4593547669ada22f0d7f68f354
Certificate serial:       01901D0F7CBAEB6235E48A30EB9A571B52AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 18:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:12 +0000
Files and hashes:         1: kaEXOnDkH0WTVHZpraIvDX9o81Q.crl (hash: 4oQRByCchOnksR3acNlkcdRw/qeG+zRm/bcGxRT8Los=)
                          2: tiMAzBIztzBTAe0qj84xIYBvQKc.roa (hash: 5d8ZpHPrpO1Q7JddTXn+4CK4BjcqhwkPPgVamwwOCXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:7c:ba:eb:62:35:e4:8a:30:eb:9a:57:1b:52:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a1173a70e41f4593547669ada22f0d7f68f354
        Validity
            Not Before: Jun 15 18:01:12 2024 GMT
            Not After : Jun 16 18:01:12 2024 GMT
        Subject: CN=9050b7df3d13d3521b1a7eb5fc8adb5a01d60cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:04:61:c9:fc:34:d4:8f:46:06:e3:be:44:
                    35:70:0f:10:6d:e6:49:b8:ff:2b:06:43:4e:35:c2:
                    9b:e9:3c:96:be:39:fe:90:d6:2e:0c:71:d5:0f:e6:
                    24:af:44:00:59:48:f5:36:75:ed:59:37:8a:7b:70:
                    54:c1:d7:fb:71:39:12:83:ad:1c:86:2a:52:18:fa:
                    f2:b4:80:7e:0d:59:45:b6:9c:d9:5e:e0:c9:66:0c:
                    c6:9f:e6:20:8f:a2:37:14:8c:3c:be:a5:6a:be:e1:
                    b4:7c:45:36:7d:53:f4:c9:e4:0e:42:e4:d1:55:00:
                    29:83:23:f5:9e:94:a9:bf:70:fd:d0:f9:56:fc:c9:
                    7b:97:74:ee:78:86:d8:e7:f2:ad:f9:b4:b4:bb:a2:
                    93:3d:66:68:d0:21:67:20:e9:4c:0e:e6:16:37:b1:
                    cd:45:32:ea:a7:36:47:0f:45:80:ce:9b:0c:5a:54:
                    25:5f:cd:15:2a:be:56:36:fd:e1:5c:04:12:66:ce:
                    b0:8a:96:2e:79:f6:bd:b1:fe:cd:c2:29:a8:b8:9a:
                    fc:79:0f:21:f2:9a:f5:44:a7:e1:f3:c2:6d:0a:e7:
                    3a:6e:a8:00:60:02:7b:1e:09:2e:04:e7:26:7b:d6:
                    6e:74:42:8b:e5:6c:2a:31:83:e9:68:75:20:c4:82:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:50:B7:DF:3D:13:D3:52:1B:1A:7E:B5:FC:8A:DB:5A:01:D6:0C:D0
            X509v3 Authority Key Identifier:
                keyid:91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:45:f5:b7:dc:bd:7c:9a:88:64:2a:fa:16:2c:85:61:52:
         7f:12:22:80:c9:82:59:b7:37:6b:b8:e3:b2:16:c5:d6:7c:62:
         c4:7f:63:fc:5e:ba:b1:cd:9c:e1:26:4c:9b:17:89:99:7a:d5:
         11:7d:5f:01:c8:3a:11:8b:a2:6a:4d:38:24:c8:80:60:1a:98:
         bc:b9:5f:bf:78:72:e2:05:9a:9c:30:c9:dc:b7:8c:43:32:20:
         91:d3:38:20:8f:c7:40:87:6c:fa:0a:18:6c:e7:36:c0:ac:df:
         a3:71:8d:1c:f4:a2:7d:c7:7e:f5:1a:af:b7:cc:53:14:ee:4c:
         ec:a1:28:6d:40:76:78:03:ed:c1:a7:3d:a9:dc:f1:51:5c:e6:
         4f:1b:a4:df:30:f0:8b:09:2b:59:6d:8c:9f:55:b3:8b:16:4f:
         2e:bd:66:b7:e0:72:f9:06:ed:c8:40:66:f9:06:14:64:60:6a:
         6c:27:44:c3:e4:d8:7a:11:b1:7a:93:52:b7:13:03:95:3b:14:
         98:96:7e:d8:5f:ab:ef:99:8a:f1:97:1a:92:f4:ec:16:bb:9a:
         54:34:fd:9b:05:a1:23:75:02:2b:54:82:0b:2d:bb:e2:18:69:
         75:95:6c:8c:06:17:89:52:52:c1:40:3c:db:d8:da:1e:f4:14:
         43:63:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:22 2024 by rpki-client on console-ams.rpki-client.org