Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File:                     KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier:          LwqtD/Gj1RGqXzOk2Akw3VoxnGZ+ID0SgZLWUf350AU=
Subject key identifier:   0B:E4:EE:05:AF:33:B8:68:D4:44:79:04:FB:89:22:65:9D:33:60:E6
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer:       /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial:       01901DEDACB0C6195E0E0FD5D793D78BDA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:53 +0000
Files and hashes:         1: FdsqYsTnB9omMqSoel8NPQkEZEg.roa (hash: 817fpn+5vI5kc3P8iu5s6OSbsS7jsU0+dWJ28XlX80U=)
                          2: KKLvJZjW6AP3iT_q47j-V8H7Eak.roa (hash: /WXBXX5NT+nD+FMqD1gZJwRZQ+REkejP8oXVvLFHtOA=)
                          3: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: tlLKURN1VtPUuAhLpTL4ZuD+mV31DCAvsmfn3+/tF5U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:ac:b0:c6:19:5e:0e:0f:d5:d7:93:d7:8b:da:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
        Validity
            Not Before: Jun 15 22:03:53 2024 GMT
            Not After : Jun 16 22:03:53 2024 GMT
        Subject: CN=0be4ee05af33b868d4447904fb8922659d3360e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:13:d8:cf:ee:82:10:b0:3f:8d:ee:51:40:
                    93:58:11:9f:5a:9b:14:2d:c1:0c:cb:af:e6:18:7f:
                    5c:57:10:cd:90:1a:82:46:79:82:91:0c:f6:09:97:
                    0f:ee:1b:d8:ec:9f:5b:0c:a1:24:c2:ee:d5:ad:1e:
                    fb:8e:4c:7a:87:90:f5:55:8a:51:34:7e:92:a4:86:
                    b5:7c:2a:77:1f:80:c7:f0:27:3f:b7:2f:8e:b3:5a:
                    f6:f0:ad:31:45:7f:a9:b7:f3:f4:d2:42:78:03:30:
                    6d:11:84:eb:c1:1a:02:34:ca:66:b9:ea:9a:35:c1:
                    05:f6:6b:f0:da:99:93:7b:5b:a0:67:4a:4d:e9:b6:
                    23:ed:be:37:c8:c3:a3:63:18:02:c0:07:b5:b5:6f:
                    58:d9:60:a9:1d:39:19:59:b3:75:f1:65:88:41:02:
                    44:52:c3:d2:79:bb:56:fb:d5:39:ec:74:04:0d:2d:
                    e9:0c:7b:31:5c:23:b4:c7:d6:07:bf:f4:c7:ea:62:
                    46:e7:59:5d:dd:32:28:3e:bb:57:52:64:e3:98:e1:
                    c9:42:cf:fa:26:25:11:af:95:a5:23:59:25:7e:61:
                    4f:10:e3:f5:f4:52:3a:19:6e:15:10:0c:60:02:54:
                    9c:3e:63:fb:00:9e:51:9c:6e:07:9f:7e:50:66:8b:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E4:EE:05:AF:33:B8:68:D4:44:79:04:FB:89:22:65:9D:33:60:E6
            X509v3 Authority Key Identifier:
                keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:b1:57:3b:4c:32:96:cd:82:f5:c4:c7:d3:ec:01:13:5b:
         57:f8:fb:a3:49:c9:b2:f4:a2:10:10:e4:ef:b2:ea:20:c9:7e:
         1c:04:c4:e3:ff:74:88:75:25:9e:91:ef:55:b2:32:7b:eb:25:
         1c:6a:d9:86:33:96:98:11:20:db:22:98:27:3b:58:80:e1:e6:
         03:6b:a0:99:1b:af:1e:ce:12:d3:cf:1e:91:eb:ad:4c:c4:c9:
         78:c1:11:32:e8:df:71:13:be:d9:1b:4b:6d:8c:d5:f0:b1:41:
         23:e3:0e:b0:c4:50:7e:5d:9f:c1:0d:99:d3:a8:66:2f:18:c0:
         3b:4c:cf:bf:ca:d1:a7:03:e8:24:ab:f4:35:f9:c1:6f:bd:d6:
         f2:99:35:ef:e1:1e:c8:5f:da:2b:19:92:fc:e2:8d:a7:fe:c0:
         c5:50:8a:a8:77:a9:e0:05:53:00:d1:64:49:fe:f0:3f:cd:91:
         2d:74:f5:62:53:a6:4f:44:19:8f:d8:d3:c0:e5:0e:02:8c:17:
         b6:09:30:38:0e:dd:3b:fb:3b:30:a1:92:19:ca:7d:bd:eb:9f:
         c5:2a:71:e7:77:5c:e1:d3:17:d7:3b:f2:2a:92:25:cb:60:9a:
         73:1e:d2:de:66:cf:ec:74:9c:13:d2:18:45:7b:d7:d6:4a:57:
         33:df:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:58:55 2024 by rpki-client on console-ams.rpki-client.org