Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File:                     kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier:          zle/T0+HRV4HzP5UYMjbBSRirwTDObGsxgG7JqdBgX8=
Subject key identifier:   16:F0:B3:D1:9B:57:7D:22:9E:48:12:57:5B:F6:52:E6:81:64:94:06
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer:       /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial:       01901DEC0E1785BFF04E0FD8948BA4D4559B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number:          0571
Signing time:             Sat 15 Jun 2024 22:02:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:07 +0000
Files and hashes:         1: OXc9-GPICPHYkiZ6YfUEUoh8Gyc.roa (hash: 4Q20yAW3aQwpp0sKebBvUHq7SxkLy6HIgWH86XdJlgg=)
                          2: WdLrv5IRWT9YezljkHAn4stql9M.roa (hash: wj8Ay+HLrziPcq+Rzq6Zxy0Oa8M8R5GhONJd4OJn0W4=)
                          3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: d5bXDPeihGRWxETZpNWN4cZI4Qy/XYJcDVUQc6XaR48=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:0e:17:85:bf:f0:4e:0f:d8:94:8b:a4:d4:55:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
        Validity
            Not Before: Jun 15 22:02:07 2024 GMT
            Not After : Jun 16 22:02:07 2024 GMT
        Subject: CN=16f0b3d19b577d229e4812575bf652e681649406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:08:66:d1:f1:c8:a4:c1:5a:bb:fc:23:35:
                    70:b4:7f:b4:f4:8f:47:0a:95:32:ee:3a:ee:bc:f4:
                    11:22:63:23:dc:82:0b:74:2c:39:7d:4f:58:dc:75:
                    a1:54:39:8f:31:02:60:35:a5:87:b2:3e:35:c7:3d:
                    53:d2:cd:6a:0e:68:46:45:42:bc:ad:91:0e:d2:82:
                    7f:d1:25:01:b5:c4:71:56:76:b4:28:87:c8:d6:7c:
                    04:ed:fc:f5:05:1c:55:c6:19:2e:0d:21:3c:b0:49:
                    87:41:46:21:de:f1:f7:2f:8b:8b:67:3c:74:52:b5:
                    7a:4f:1c:17:e9:ee:52:bb:db:90:9b:32:55:aa:39:
                    46:8d:b4:b7:6e:7f:60:55:f9:17:74:09:80:3a:0e:
                    50:54:94:62:d4:c4:3a:5c:0d:eb:4b:7d:a5:99:8e:
                    80:1d:7a:20:d9:98:6f:5b:f8:4c:5d:36:15:6f:f9:
                    9b:b0:df:fd:fc:39:9a:7b:65:03:f7:73:a6:31:3b:
                    ec:81:71:2d:07:c2:bf:7e:34:c4:55:16:b2:76:47:
                    ed:8e:cb:fa:22:b5:1f:fb:15:56:4b:10:46:d3:b7:
                    ce:44:bb:1a:b4:d6:fd:34:4f:4f:8a:f5:b3:4b:6d:
                    9f:82:71:cf:3e:7f:63:ec:01:dd:94:cb:0f:d5:e6:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F0:B3:D1:9B:57:7D:22:9E:48:12:57:5B:F6:52:E6:81:64:94:06
            X509v3 Authority Key Identifier:
                keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:f0:22:24:f1:ff:e2:34:74:9f:d1:9f:90:18:07:4c:ec:
         aa:8d:cf:e2:7c:36:97:32:54:dc:02:61:12:68:7f:1f:41:ef:
         95:a7:27:4b:86:0d:af:5d:22:3c:e8:26:2a:32:31:e9:6c:c7:
         f7:a1:2c:bf:67:d4:37:f6:fe:c0:2d:1c:7d:ea:dd:0e:be:e3:
         18:47:8c:ac:a1:27:36:73:17:ef:83:8e:dc:d4:8b:93:fb:52:
         30:49:5e:50:c0:26:a3:81:8a:71:96:16:7e:d9:fa:72:c0:37:
         c8:cc:76:5f:19:7d:30:9b:48:70:9a:93:f8:aa:38:16:85:96:
         a3:8c:38:77:28:a1:1d:23:0d:1d:fe:f9:1d:11:99:ba:65:dd:
         b4:3f:b0:a3:17:a4:c7:b2:dd:ca:be:5c:fa:d4:1b:2d:4b:b7:
         da:08:7c:47:47:b0:3b:29:90:77:cd:53:43:fb:74:72:bf:ec:
         ff:aa:a6:6e:4c:1d:dc:01:22:5e:6d:6b:da:ff:38:e9:67:8b:
         26:a7:03:cc:e4:ee:17:ed:48:b2:27:cf:d9:85:8c:b6:9e:b6:
         cc:20:85:22:68:c3:4d:59:44:d5:02:83:b2:f1:19:e7:c2:ff:
         e3:86:1e:0b:94:9f:2b:4b:78:13:3e:bc:76:7a:8d:01:73:c5:
         44:11:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:09:34 2024 by rpki-client on console-fra.rpki-client.org