Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File:                     MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier:          IppCFpyeoD7u+DUMnHfEH/y6FFSgz3UZddp9Wn8cDJ0=
Subject key identifier:   CA:F5:A9:2F:F9:4D:86:DF:95:0B:74:97:94:F6:A2:FC:D7:66:45:7C
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer:       /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial:       0190448C1A5968E4A3C35BD6091B8DE8ABB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number:          11D9
Signing time:             Sun 23 Jun 2024 10:02:30 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:30 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:30 +0000
Files and hashes:         1: AuFmPh_llmGkGRpbmYs2kUKz9wA.roa (hash: mXln8YeRbD1ML7yB/gKGb+UnSKPY8GlCnLWln8K/NO4=)
                          2: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: rqBzjLns2/gGhB7k0kloM5/5276B8+hwyDCe9gVixsM=)
                          3: Z_6qcWXafFHeeNM0JcwghYpm_Pc.roa (hash: N/RMTXzzdl30hFRA1+qOUgSZO91LlshPNCMhB213flU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:1a:59:68:e4:a3:c3:5b:d6:09:1b:8d:e8:ab:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
        Validity
            Not Before: Jun 23 10:02:30 2024 GMT
            Not After : Jun 24 10:02:30 2024 GMT
        Subject: CN=caf5a92ff94d86df950b749794f6a2fcd766457c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:c0:1b:38:b2:b0:c3:19:60:9d:1b:1b:ff:
                    61:b2:5a:74:1c:11:84:e0:be:ad:5f:16:2e:d3:26:
                    5f:06:5d:d1:50:02:71:96:b9:0e:35:4f:92:b9:67:
                    17:6b:59:ef:1f:98:a0:24:4e:64:ec:e8:34:95:1e:
                    1a:33:fe:a9:1e:c7:2f:d6:88:a7:68:99:fa:7b:05:
                    74:7f:90:19:ea:43:cc:72:a4:fa:31:47:2a:fa:dd:
                    1e:07:b6:52:33:77:5e:8b:58:98:67:a5:e4:6c:aa:
                    9d:1b:fd:e3:1c:9c:ef:9b:49:ae:00:e8:80:04:2f:
                    5e:75:6a:3c:0d:ed:93:fc:aa:01:a7:d5:3d:0f:ec:
                    9e:28:43:c0:0e:15:1f:8e:0e:72:9e:9a:ca:46:7a:
                    ca:eb:f6:7d:10:ee:f7:60:86:65:aa:99:f1:8c:02:
                    40:f3:93:7e:df:ab:2e:f5:cc:a7:40:17:5e:37:ef:
                    db:38:a2:93:ac:0b:ed:27:30:e9:37:2d:72:07:9f:
                    af:8e:1b:2c:a9:64:81:ab:57:72:be:be:e5:3c:29:
                    7a:29:e9:1a:3b:23:f6:ec:c2:a3:5a:39:4c:8b:ff:
                    b8:e2:4c:f0:80:ec:1a:aa:73:77:66:36:c1:46:82:
                    bd:91:90:0a:8d:74:19:75:ba:ac:46:f0:c4:e5:49:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F5:A9:2F:F9:4D:86:DF:95:0B:74:97:94:F6:A2:FC:D7:66:45:7C
            X509v3 Authority Key Identifier:
                keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:b6:94:26:8c:61:50:f0:2f:8b:bb:c8:17:0e:f1:b8:3e:
         32:08:c0:bd:55:95:fd:04:b4:79:b8:01:e9:47:ca:c4:a2:81:
         eb:20:93:42:ae:5e:44:ff:31:bc:3a:29:34:ea:65:26:60:f7:
         cc:df:7d:31:9b:ba:c3:47:75:39:7f:86:ac:a9:d6:c6:81:70:
         94:d6:bd:6a:d2:bc:39:20:81:2a:26:a6:82:71:2c:c4:ed:18:
         88:b3:80:14:6e:13:35:0f:e1:e5:3f:d5:46:98:de:79:51:91:
         68:2d:4e:85:c7:b9:8d:81:fc:e9:73:8a:6a:43:7d:57:70:e1:
         a9:54:99:93:23:07:dc:58:ee:c6:49:84:7f:e9:38:b3:be:73:
         5c:7b:d9:05:6b:99:61:8b:2b:78:bd:11:ba:bd:ac:dd:c5:b1:
         94:6a:f3:c0:13:2f:f6:21:c0:64:6c:68:a5:2b:f7:17:f7:db:
         ca:da:7b:d7:18:34:c0:ec:4a:6d:47:33:24:45:f8:7d:33:c2:
         17:f6:3d:df:92:1b:6d:f2:2d:2a:6e:4c:0c:27:11:fd:cb:c8:
         58:c9:d7:05:3d:be:e1:21:44:f5:da:c3:d3:42:c0:b3:75:15:
         a2:82:61:5d:43:6a:bd:f0:75:2f:e9:aa:0d:3e:b4:17:42:98:
         5a:3e:2d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:42:38 2024 by rpki-client on console-ams.rpki-client.org