Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File:                     kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier:          5P1elcewUWOgOa5boOataE+2P2wuuz9B1418UVPIYnI=
Subject key identifier:   A0:67:19:DD:83:7A:DF:12:F5:FA:17:92:F4:FE:32:90:EE:83:63:DB
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer:       /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial:       01901CD82025E532B6E8362FB34F76A6F626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number:          0E82
Signing time:             Sat 15 Jun 2024 17:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:44 +0000
Files and hashes:         1: 7qc0Hlc62z5Fv4N4LQuJefLhjFA.roa (hash: /N00yeSECcMe8P8ZcFEYULrS/A7POeUoWR0cJz47glU=)
                          2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: NPORH4G9EtiaRkTp7DP4imb7hTkVjC+mt7dy0ESXScc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:20:25:e5:32:b6:e8:36:2f:b3:4f:76:a6:f6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
        Validity
            Not Before: Jun 15 17:00:44 2024 GMT
            Not After : Jun 16 17:00:44 2024 GMT
        Subject: CN=a06719dd837adf12f5fa1792f4fe3290ee8363db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:d0:70:d3:28:ae:a0:5b:e3:28:0b:e6:0e:
                    0f:06:b8:47:f9:f8:1a:32:ee:d6:a3:07:ad:83:fa:
                    d9:8d:5b:60:38:c3:17:c5:2e:3d:80:e4:32:6b:f0:
                    93:7e:f4:56:4c:2c:c4:ca:4b:7e:85:45:28:28:3d:
                    c2:77:95:66:7b:b9:fe:0b:12:41:b6:97:45:86:67:
                    79:b4:6e:b3:b7:30:a9:7a:5c:7c:d0:6b:70:1f:d4:
                    7f:83:3e:95:45:72:a1:d7:ac:5f:dc:a1:80:52:25:
                    3c:5a:5a:f8:93:66:32:7c:f2:b0:3a:e4:dc:ab:a1:
                    26:eb:00:e8:f2:8d:ad:bb:c8:dd:81:26:78:6b:c5:
                    43:af:0c:6b:ed:2a:a4:7a:2b:ce:80:1b:35:99:44:
                    50:50:d4:c0:c6:29:05:0e:b5:c1:33:d6:20:56:1e:
                    f1:0f:ad:da:c4:fc:9a:a4:6f:cc:d4:5d:1b:d7:fb:
                    aa:98:3d:a3:b3:0c:f5:22:ff:c9:52:d0:97:75:46:
                    1d:8e:66:2c:8a:f1:02:a4:2a:01:6a:82:53:0d:d0:
                    fb:08:75:55:aa:99:a6:b4:39:06:a3:80:ec:3e:60:
                    b9:9a:f8:7a:ac:5e:ba:41:bd:34:76:4b:a8:08:34:
                    e2:76:65:ac:55:0c:53:31:77:e5:f1:1d:7f:1e:af:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:67:19:DD:83:7A:DF:12:F5:FA:17:92:F4:FE:32:90:EE:83:63:DB
            X509v3 Authority Key Identifier:
                keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:83:d8:73:2e:f8:92:bd:dd:a5:44:4a:bb:a0:09:1e:ce:
         41:31:ab:6d:96:5f:97:df:5c:c4:9e:6f:08:27:b6:65:8e:92:
         a1:ca:3c:ab:5e:b5:44:19:28:5c:55:d0:e3:dc:2f:2d:58:86:
         cf:88:9e:2c:e6:2d:21:a5:3a:89:34:64:28:5c:a2:3c:54:9c:
         fb:65:d3:42:b5:8a:33:99:e4:8c:b8:5c:39:b5:40:99:47:6a:
         f4:ac:87:61:35:d6:c8:36:b6:7f:f2:e4:76:0b:4f:34:2e:e4:
         05:87:a7:6d:ca:91:9d:16:d4:f7:db:5e:7d:33:c7:80:b8:f2:
         db:eb:d1:f3:d8:04:84:fb:12:af:0a:b6:99:52:4a:5d:a4:79:
         00:78:ce:7e:e2:02:c2:85:8e:f7:64:de:a2:ae:a6:30:15:c8:
         05:0b:a8:b1:03:93:54:28:14:35:46:bd:23:9d:55:c9:31:17:
         71:08:bd:4c:e3:55:cb:0d:f8:08:c9:6a:44:51:b8:8b:10:ed:
         a2:92:4a:33:a8:0d:c9:14:fb:24:a2:e3:ce:96:83:d1:52:3d:
         21:05:5d:af:ff:cf:d3:ae:cb:61:8b:16:f3:0b:7e:ac:c4:17:
         d0:77:c9:eb:c2:7c:53:42:8a:89:59:c3:a8:de:93:fa:9a:0a:
         3d:30:11:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:58:08 2024 by rpki-client on console-fra.rpki-client.org