Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File:                     kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier:          S7pxT3L+LgmXpuwGvAXGRwC3voPXNIzyL1KtkME081U=
Subject key identifier:   53:0B:DF:49:26:46:AE:C2:9B:E3:FD:FD:DE:8B:BF:62:39:56:00:F2
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer:       /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial:       01901E8F845B357EBD5A1BC136260A62D355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number:          0892
Signing time:             Sun 16 Jun 2024 01:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:40 +0000
Files and hashes:         1: eu0OEDjalVHa6HOUVBEL6uSqL88.roa (hash: FNItrku+LgAIr2au0NZFdAsR1B4fsj9/6iF9ntWCuMk=)
                          2: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: N0X3SSCtADfH684KYEQklzhVQUGoRkM9JYIAevb5S1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:84:5b:35:7e:bd:5a:1b:c1:36:26:0a:62:d3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
        Validity
            Not Before: Jun 16 01:00:40 2024 GMT
            Not After : Jun 17 01:00:40 2024 GMT
        Subject: CN=530bdf492646aec29be3fdfdde8bbf62395600f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:23:55:7f:58:15:7b:a0:c3:32:63:86:10:
                    8e:3a:a4:16:2a:da:0a:89:fb:cf:d5:82:9e:62:05:
                    69:c7:28:29:94:39:74:f9:70:3d:c5:e8:9a:83:f8:
                    17:78:7c:c1:37:32:3d:a6:5b:33:27:0b:63:b4:e6:
                    42:0a:1b:17:ad:57:3a:1d:a2:a0:eb:78:07:9f:46:
                    7a:cb:d3:27:21:af:44:c3:2c:a5:8a:2d:d1:10:9f:
                    d1:14:1b:fb:e6:71:36:c8:d2:d2:c6:5e:8a:1d:f2:
                    78:8a:3c:2f:89:7f:f2:66:21:4e:60:22:1c:46:6e:
                    88:25:39:77:18:e6:d2:86:ea:68:99:5e:a0:56:e5:
                    82:b5:1a:b0:9e:61:e7:04:81:1c:ce:72:45:50:a1:
                    5d:45:b4:32:c6:01:c6:4f:15:bb:d4:9a:35:c0:74:
                    bb:8a:b5:75:9e:cd:b0:30:34:b7:3c:e6:11:49:3c:
                    7c:28:01:7c:25:c8:fa:b3:6c:b2:9f:c5:9b:39:c2:
                    b4:b1:21:a2:07:1d:32:07:21:14:16:ac:c3:26:65:
                    35:49:6c:70:72:c0:08:72:26:43:48:1b:e4:ec:e3:
                    b3:5a:c9:54:01:78:10:02:02:7b:47:e4:b5:a9:15:
                    6a:57:e9:3a:90:60:ee:ee:0b:ba:ad:86:7b:92:e3:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:DF:49:26:46:AE:C2:9B:E3:FD:FD:DE:8B:BF:62:39:56:00:F2
            X509v3 Authority Key Identifier:
                keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:a7:9d:8a:c7:5d:a7:50:1d:42:9e:88:17:40:e1:2a:31:
         ca:16:67:f5:bf:0f:2d:a3:6c:97:e0:88:ee:28:37:c8:1e:20:
         e2:13:9d:76:6d:bb:f6:a0:1d:4a:24:bd:d3:55:a6:52:f9:4a:
         a7:3c:9f:f1:80:8e:c8:b6:d8:a0:f9:c5:92:a2:f4:e3:c5:e3:
         d2:d2:e6:ad:f4:d0:1a:95:d0:51:9a:bc:9c:3c:fb:44:1b:38:
         0a:14:f6:2f:97:0e:c4:df:70:a3:01:96:39:80:fc:d8:66:26:
         be:f7:b1:f4:8f:2f:f9:45:84:17:ed:c0:d3:f6:20:5e:af:0e:
         82:9a:d8:67:c9:a5:f8:c8:0a:ba:bc:6a:34:9a:5f:0a:3c:b4:
         24:62:ac:c6:c2:50:40:a9:ea:b7:57:ac:ef:50:a2:6b:5d:e7:
         fc:6c:00:6a:3c:f0:aa:ae:53:f8:35:5b:ae:82:df:95:bc:62:
         23:2a:0a:b2:3e:15:ce:80:7d:d2:0a:3c:ce:8b:1d:c4:e3:72:
         ef:75:ec:09:a3:ef:66:ff:1d:40:54:b5:db:a0:67:f0:35:ac:
         d2:04:49:4a:e2:cd:b4:29:3a:5d:09:ae:fc:cc:2e:c1:7a:80:
         4f:56:d0:91:9f:1e:58:27:c2:cf:a6:48:e7:b2:7c:45:a3:7f:
         0d:1b:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:46 2024 by rpki-client on console-fra.rpki-client.org