Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File:                     KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier:          apNtvTsiYGqg/FwkAuBazWLJkgxuUZipSnIgXxyiG5Q=
Subject key identifier:   3A:2C:44:DF:8B:28:CB:FD:53:47:1F:5A:5C:FA:80:DE:47:AF:06:82
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer:       /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial:       01901BFE07806D12D2E23767E52019C6CE85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number:          060E
Signing time:             Sat 15 Jun 2024 13:02:31 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:31 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:31 +0000
Files and hashes:         1: IG99uHOulaa8ZLih1Q6jp8tkgSs.roa (hash: 1E/aB1+7daLduykqT14+dJBBqDfLBSeCsNhCCWIPLYk=)
                          2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: CiRSUs3dMr9By7rSWrm0atRAHpjcvP6OtQuSSP1kkVI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:07:80:6d:12:d2:e2:37:67:e5:20:19:c6:ce:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
        Validity
            Not Before: Jun 15 13:02:31 2024 GMT
            Not After : Jun 16 13:02:31 2024 GMT
        Subject: CN=3a2c44df8b28cbfd53471f5a5cfa80de47af0682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:64:19:43:a3:57:9b:a1:77:4b:5a:8d:91:
                    3c:94:9d:a2:b3:2d:b8:a0:c2:02:d2:4f:bf:f4:8b:
                    2e:82:d7:0e:22:d8:a0:d3:df:42:f1:34:27:16:cd:
                    a6:c4:78:75:65:3b:31:65:32:1d:93:84:51:29:3d:
                    8e:da:a7:be:cb:01:f8:38:2d:d5:9c:1b:f9:1f:2f:
                    e3:66:9e:95:bd:8d:ea:e5:a5:32:08:fd:08:59:d3:
                    df:48:8b:21:42:6f:a4:b9:45:44:1f:a1:fb:2e:bd:
                    1e:50:86:31:b2:9f:63:e2:4a:9f:6e:9f:2f:fa:f1:
                    5d:4b:e2:e9:20:3a:45:bb:aa:7b:3f:93:3a:9f:2d:
                    af:4a:53:36:ea:fc:9f:a9:12:40:e5:64:d1:36:b0:
                    96:c3:a4:dc:42:b7:18:2b:63:ec:68:20:9e:e0:38:
                    aa:f2:5c:6a:fd:fb:8d:70:3a:ba:07:5d:1d:a9:e7:
                    72:df:f2:07:70:c0:8c:5e:e6:b7:06:72:f1:77:c3:
                    81:0a:47:46:a3:19:c7:ca:e0:c0:12:6b:62:7b:58:
                    71:3a:03:25:16:26:15:9e:f2:29:b7:c1:5d:2e:86:
                    46:e0:25:cb:53:be:92:d9:86:e9:fc:90:89:77:34:
                    25:6f:00:03:89:ae:45:17:f5:6d:f6:a7:87:37:dd:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2C:44:DF:8B:28:CB:FD:53:47:1F:5A:5C:FA:80:DE:47:AF:06:82
            X509v3 Authority Key Identifier:
                keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:4a:46:43:8b:38:8a:e2:29:cd:0d:6d:24:65:67:b0:52:
         fc:99:5d:93:e4:27:bb:ea:ab:f8:62:68:d2:4a:a4:39:4b:6c:
         59:b9:bc:1c:bb:15:35:62:40:08:e4:8c:28:e1:99:8a:be:ce:
         ea:81:4e:d8:84:00:f6:35:0d:ce:7e:8d:c8:5a:e5:e3:4f:39:
         38:57:27:3f:7a:c5:30:69:e4:b5:2f:ee:ea:a5:99:18:d0:89:
         19:98:49:74:b4:09:bd:ed:08:84:09:69:e4:7e:7f:04:22:db:
         ea:80:eb:cb:6b:9c:c1:6f:0d:b4:92:14:34:b4:49:31:f1:9c:
         1e:9c:ac:6a:29:40:67:3f:20:b5:26:a3:63:81:2b:24:5f:cd:
         9e:5e:a0:48:07:90:96:63:45:0f:23:75:c8:9b:56:24:6a:a7:
         b8:36:4d:f3:a2:c1:eb:3d:03:33:e7:1e:50:75:06:85:81:5a:
         c9:d2:d4:91:cd:86:d2:23:a9:b0:0d:ab:79:8f:cb:55:ae:68:
         4f:71:f0:4c:8d:08:38:39:b8:1f:9e:c3:42:66:03:18:e1:5d:
         0b:9d:3f:e9:e2:12:a5:86:bd:09:51:55:10:b4:23:b5:c0:48:
         f3:94:be:8a:dc:4b:50:c3:aa:c9:5c:88:cf:44:c6:82:5f:79:
         ce:e9:9f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:29:03 2024 by rpki-client on console-ams.rpki-client.org