Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File:                     sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier:          YxFLEasnpPnDd0iQSHmR/Fs/UvAgxFCVfj/3lr0F7N4=
Subject key identifier:   6A:85:09:4F:3C:3C:70:F0:C5:BF:65:E9:21:D5:78:21:D6:47:8B:79
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer:       /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial:       01901E21A174F1C3960EC27AFFD4BB2FEE9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number:          1095
Signing time:             Sat 15 Jun 2024 23:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:38 +0000
Files and hashes:         1: CKYxHGe_r5qermXLJrW3PthgQIU.roa (hash: GuGNkGiCWUw/H93B23xCWyZe23gkcac/lftUsf3VH1s=)
                          2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: sQje5hJ9fM2HZ0u06WDJpkEgvCeEgYVMNN8ORdXyM7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:a1:74:f1:c3:96:0e:c2:7a:ff:d4:bb:2f:ee:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
        Validity
            Not Before: Jun 15 23:00:38 2024 GMT
            Not After : Jun 16 23:00:38 2024 GMT
        Subject: CN=6a85094f3c3c70f0c5bf65e921d57821d6478b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:8a:38:95:df:ff:e5:0d:cd:66:fb:f6:9f:
                    8a:25:ba:2e:82:94:c1:81:5b:dc:f7:e4:c2:4b:21:
                    c9:39:07:e0:dd:86:35:47:db:13:a2:60:8b:69:aa:
                    78:91:95:7a:26:e3:70:95:17:8d:c3:e4:7e:a9:32:
                    de:22:8b:f7:68:a3:20:2f:c0:d7:3b:93:35:52:b1:
                    08:93:72:ba:a3:53:0f:16:71:96:eb:ed:b4:e8:74:
                    92:79:e3:a9:19:e7:c6:a4:aa:e6:33:cf:99:77:f4:
                    7d:04:56:0c:df:da:12:86:15:c7:54:40:79:25:7c:
                    cc:a2:dd:c1:9a:cf:6f:cf:97:ca:15:45:75:b9:35:
                    f0:ff:b2:2c:a2:2d:c8:d0:bf:b4:85:94:b0:5c:1d:
                    8c:62:cd:dc:3b:44:49:e7:3e:01:f4:74:ec:92:51:
                    28:97:3f:37:82:7a:90:a5:56:b4:5b:24:f4:3e:da:
                    af:db:54:8d:f4:ce:e9:ab:8e:e9:8d:b1:54:6a:81:
                    52:2b:a5:e2:a0:93:3b:93:01:b7:c0:07:60:dd:c0:
                    79:68:6c:37:44:7b:c7:e8:a2:61:7a:ec:6e:ba:82:
                    a6:ed:17:19:33:da:d6:a0:9b:b6:be:16:b7:b8:1b:
                    55:77:b7:64:9d:89:ea:85:a0:0b:23:b8:7b:b2:57:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:09:4F:3C:3C:70:F0:C5:BF:65:E9:21:D5:78:21:D6:47:8B:79
            X509v3 Authority Key Identifier:
                keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:60:a3:76:9c:20:16:52:a2:2d:6b:a3:73:b5:a8:31:15:99:
         41:27:a4:91:8c:d3:1f:99:d0:cf:bf:70:cc:33:92:d4:e1:09:
         a3:9b:9f:25:82:63:72:59:17:b7:25:ba:54:3e:b0:c6:8f:1c:
         f4:0f:de:c7:50:f4:da:c0:06:25:aa:3f:0c:cd:6e:ef:f6:ca:
         a9:62:9e:77:47:08:5f:b9:f5:0d:4e:10:bb:7e:2e:38:ee:77:
         8d:36:14:6b:3b:0b:d3:d9:20:e5:16:bf:1a:49:36:0c:9c:73:
         a3:f6:9f:fc:42:07:e3:f7:cf:11:f1:6d:97:6d:c5:a0:d6:c9:
         8c:4e:3e:bc:d8:72:0c:c0:a2:bf:17:d0:ca:1f:e7:be:b2:cb:
         bd:33:32:bc:a2:c7:57:bf:73:dc:c2:40:24:b2:1d:66:1d:20:
         7e:ab:db:56:aa:cb:ba:4d:33:9a:f0:13:7b:56:d7:4c:05:c0:
         93:85:e3:ec:d3:c2:62:56:58:c9:6e:8d:3c:d2:e7:cd:38:ab:
         64:01:08:71:66:c8:76:ea:51:53:19:37:ff:84:db:d4:e1:7f:
         4f:ac:02:d3:9f:30:91:c4:b3:19:11:d2:71:ac:dc:6a:30:ec:
         ba:95:f5:d3:d8:95:43:ad:86:0c:d1:e6:e8:d4:d4:f3:b4:7f:
         e1:39:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:37 2024 by rpki-client on console-fra.rpki-client.org