Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
File:                     ksccIHipHnbA5abTAJaHLJIsnNw.mft (raw, json)
Hash identifier:          YXXCDGhgHPOn0pJRpLD9z7x85tHhaXAv3NZMJOrOVjs=
Subject key identifier:   20:E5:9B:D4:EB:39:F4:A9:C3:41:26:EC:17:60:3F:77:52:D6:BE:F7
Authority key identifier: 92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
Certificate issuer:       /CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Certificate serial:       01901EFDCCC581F241B6ACF7C8C33BD53E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 03:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:07 +0000
Files and hashes:         1: L6k5F-1W4EDImOZGY55GSn-FyG0.roa (hash: kNgjh1Qem2EOpGhM3wCxmgidnzmk+TlCS6QEko1MZHo=)
                          2: Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa (hash: P4s6GLevOrx2CJ0bVX/4CvCtHDVfb2x8hCs8zG8YwEg=)
                          3: ksccIHipHnbA5abTAJaHLJIsnNw.crl (hash: lvB+8BAdpRAtwcFBbTk6OW5oUGSKOCjGU8/DNIBFgjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:cc:c5:81:f2:41:b6:ac:f7:c8:c3:3b:d5:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
        Validity
            Not Before: Jun 16 03:01:07 2024 GMT
            Not After : Jun 17 03:01:07 2024 GMT
        Subject: CN=20e59bd4eb39f4a9c34126ec17603f7752d6bef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:b3:ee:29:98:17:2b:5d:33:a3:33:25:9f:
                    f3:3f:a9:93:ec:d2:2c:bd:91:66:e1:bb:57:f1:cc:
                    a4:dd:4d:28:d5:37:bf:d0:ca:22:35:99:46:9d:ee:
                    0a:d1:9d:28:ff:1f:b2:99:e7:2a:97:98:b9:0b:72:
                    e5:8f:30:00:54:f1:16:80:1f:a3:85:c8:5f:49:ea:
                    20:25:df:2f:35:09:68:f4:88:34:cd:89:ff:73:c0:
                    9a:78:40:ee:28:af:9f:d6:1f:83:91:71:07:6c:fc:
                    75:7c:bf:d6:3a:31:18:d3:36:1c:fd:9f:4f:5b:e7:
                    9a:86:39:e5:af:68:71:8d:57:fd:1c:9e:50:04:8e:
                    5f:5d:b9:d6:8d:ef:b1:e3:23:e4:0f:26:05:ea:9e:
                    c8:b2:d0:c4:ce:46:51:92:9f:6d:da:91:24:b0:5a:
                    6c:95:0c:a0:76:f4:a3:ce:c2:24:0f:29:39:2e:cc:
                    6b:56:c9:7b:df:b9:0f:f2:e6:9b:db:b6:84:95:19:
                    7f:de:f5:6f:ed:da:03:4c:b2:03:fc:08:de:d5:94:
                    0d:8f:56:bb:79:58:0a:a0:7b:23:41:12:d5:87:98:
                    74:96:eb:51:40:44:a3:5c:92:48:8a:46:bc:89:ac:
                    44:a1:23:5d:a2:0d:93:e1:84:2d:29:d0:42:8e:57:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E5:9B:D4:EB:39:F4:A9:C3:41:26:EC:17:60:3F:77:52:D6:BE:F7
            X509v3 Authority Key Identifier:
                keyid:92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d5:69:1c:e3:f6:7c:3a:95:07:76:12:aa:e0:89:06:8e:60:
         44:12:4c:2b:b9:e2:92:5f:54:0e:fa:d0:a3:96:c5:c2:7c:0d:
         1d:0e:7f:72:21:24:8f:5f:0c:47:50:0b:59:db:0b:52:4d:ca:
         04:f5:c7:e2:eb:93:7a:a2:e5:4a:31:5b:13:29:f9:cc:d2:20:
         14:3b:47:3b:57:fa:40:bd:d5:16:09:a6:16:02:9f:77:f4:42:
         cb:ea:e6:cc:a4:5f:94:ad:33:79:93:49:c0:c7:37:a8:b0:52:
         97:9b:6a:ae:17:38:e9:37:4b:b5:be:5a:3e:97:7d:6c:6e:2c:
         72:4a:aa:60:86:6f:7a:9d:16:6b:bd:86:13:a2:e0:0c:8d:1e:
         1c:ad:d3:1b:06:93:60:76:94:de:7d:0a:fd:f9:22:5b:3d:4f:
         66:d0:ba:87:da:c1:a8:5e:62:f0:ad:24:2a:cc:98:3b:07:8e:
         8d:ea:31:c7:e7:27:f2:eb:96:d4:f2:91:0f:ba:9e:fb:d5:20:
         a6:87:3e:47:a8:2f:82:7f:f7:d4:a9:8d:c7:78:9c:72:5d:ea:
         0e:c0:f1:c5:23:d5:ca:af:4b:69:ca:39:06:95:80:ad:b8:32:
         b5:58:d2:9a:1a:e6:e1:30:f9:c0:5a:50:dd:ce:88:d7:2b:0e:
         2c:09:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:39 2024 by rpki-client on console-fra.rpki-client.org