Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File:                     kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier:          zGjitK1Y4EtBL3fjb93vV5qPsAeVzoGkm8D1flUGnsI=
Subject key identifier:   E5:3B:39:C7:15:88:A2:4D:27:CC:C6:22:31:E1:05:EE:40:F7:97:45
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer:       /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial:       019040B0404340A9CAEBAA6E9D09398D4186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number:          10B5
Signing time:             Sat 22 Jun 2024 16:03:30 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:30 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:30 +0000
Files and hashes:         1: 1e9iE_BypV8i3m6c6VbWLsJHPJ8.roa (hash: k44LnDN+kgWxcKkrbIKmZGisWerf+J3Scq3jDchaSIE=)
                          2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: Nhbycb45z5Jt7/eEqr7V/bq2PMXCwKRszhirwY4iAuU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:40:43:40:a9:ca:eb:aa:6e:9d:09:39:8d:41:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929f0769c63883573f2703d766462570af5590f3
        Validity
            Not Before: Jun 22 16:03:30 2024 GMT
            Not After : Jun 23 16:03:30 2024 GMT
        Subject: CN=e53b39c71588a24d27ccc62231e105ee40f79745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:1f:87:52:96:c0:2b:4b:ed:b9:9a:9b:52:
                    df:68:55:ac:ab:93:cb:c7:eb:ad:de:a3:45:02:5b:
                    00:89:2f:39:23:27:3c:4f:26:fb:4a:45:c0:3f:53:
                    f3:b7:2e:87:5a:9d:a5:0b:36:d2:ba:8e:dc:5b:56:
                    e6:d7:a0:2c:04:b6:c4:87:9e:0e:f4:1d:34:70:c6:
                    e7:e4:ca:c3:91:4a:11:52:64:8d:53:8c:db:e3:44:
                    f4:db:8a:3e:8b:ca:b3:2d:1f:e0:4f:e3:b1:cf:5c:
                    fb:7a:84:ca:36:50:36:35:bd:5b:ba:53:d9:69:08:
                    27:b3:da:f6:4b:51:f9:92:5d:ec:0e:42:ee:f5:43:
                    9f:07:99:09:db:0a:41:d4:86:d2:75:9a:23:8f:b3:
                    46:25:3b:d4:ab:be:a4:14:67:7e:68:bd:24:61:28:
                    fd:c6:ec:12:c4:87:c3:e3:3f:52:e1:75:31:63:68:
                    53:e7:d0:5d:e9:93:b3:b4:6a:88:59:07:6d:a6:71:
                    d7:c4:39:aa:c0:5b:90:1f:5a:f6:68:26:a2:09:ec:
                    60:c4:de:8e:60:b7:f7:b3:1d:82:1c:d9:46:84:20:
                    19:15:1f:d9:de:7f:da:cd:b5:5e:70:6e:45:14:fa:
                    39:fb:1c:c5:16:59:67:08:27:f9:a5:33:d9:9e:f1:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3B:39:C7:15:88:A2:4D:27:CC:C6:22:31:E1:05:EE:40:F7:97:45
            X509v3 Authority Key Identifier:
                keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b5:34:4d:ab:d6:ee:28:14:a7:db:3f:d3:88:14:81:cb:c2:
         d2:f8:a5:03:59:7f:06:2d:eb:1a:b8:bf:52:44:37:98:58:98:
         00:02:c3:e6:84:ed:1c:bd:43:4a:95:b1:ed:f3:c7:07:4d:40:
         a5:fa:a0:54:31:63:7c:cc:6e:4e:51:13:22:4d:e6:a2:66:ff:
         b4:7b:63:81:88:76:c9:cb:ec:9d:47:84:50:90:80:77:b9:20:
         c9:f8:9f:0f:ed:74:e6:42:67:5f:8c:c3:af:82:b2:12:b9:17:
         f8:2e:4b:5c:5e:ce:7d:df:38:51:89:fc:f1:12:84:60:dc:c3:
         e6:fb:87:90:c2:34:ba:ea:ca:3c:ed:55:a5:2b:b4:e3:ff:9c:
         74:9b:64:1c:35:bc:66:f8:93:e2:d7:48:75:68:72:29:8f:57:
         59:46:35:e5:6d:5b:be:79:18:7e:8f:d5:f1:4b:28:61:36:9f:
         03:d0:f7:e6:53:0a:2b:43:21:0b:aa:8e:f3:5a:02:28:18:e1:
         2f:ab:8c:2b:06:f9:0e:c4:f8:d2:4d:a1:96:e0:8c:21:e6:c2:
         25:53:e1:d7:24:47:c1:6d:63:71:77:f8:94:02:b2:a9:5b:75:
         b6:ef:a5:c4:7b:24:ff:ee:b2:50:a1:e1:b2:e8:c9:a2:ca:d3:
         48:5f:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:37:29 2024 by rpki-client on console-ams.rpki-client.org