Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File:                     kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier:          iK7HVRnU28ucVgIBHUBcWqmDSW/hz8tkLdg6xIt8xGk=
Subject key identifier:   5F:50:0C:28:71:FD:36:2F:85:29:10:B8:71:F5:E1:4D:B2:10:3C:A8
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer:       /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial:       01901CD88257E09B62BF1FBE31E3C9FA1FE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 17:01:09 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:09 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:09 +0000
Files and hashes:         1: 3NgpQxADw7YPbSj03cvzQJtb5vY.roa (hash: tvSTsqQ2PBM0W4YWStwz9lT8EPHRSa6WQ74IoQsDIbk=)
                          2: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: PveXTLKzVrVIiO9AEZS0g6CHWoAy6kM5Pif+r+uMItA=)
                          3: sk1wKorW-QTwALnxzuSvjCOLJjU.roa (hash: eLtYHCDqJWJMIZ52wvy/2kr3kUnXZX7vWe1REf8+RO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:82:57:e0:9b:62:bf:1f:be:31:e3:c9:fa:1f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
        Validity
            Not Before: Jun 15 17:01:09 2024 GMT
            Not After : Jun 16 17:01:09 2024 GMT
        Subject: CN=5f500c2871fd362f852910b871f5e14db2103ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:c4:5b:36:55:9d:88:58:ee:f7:5b:e3:5a:
                    ce:f6:03:29:bb:82:22:7c:82:64:70:77:c4:43:7a:
                    ea:f1:63:82:95:ac:3f:04:bf:cb:3e:70:43:55:ea:
                    8b:43:6b:6e:a0:7c:c4:ce:fd:e6:a1:8a:8b:64:49:
                    d7:2a:63:fb:e2:50:8a:2c:db:dc:ce:bc:99:99:41:
                    9d:5c:13:87:bf:d0:01:9e:75:8d:ba:30:d9:d8:e0:
                    d2:cc:cd:07:10:dd:2a:82:f5:a9:bb:01:eb:9e:b1:
                    86:e7:28:5d:2c:56:e5:8e:89:17:b2:79:ac:df:69:
                    45:63:6d:d9:9c:ec:cf:16:7c:51:9b:d7:de:67:6e:
                    ea:42:ef:14:df:b9:da:5b:80:ab:af:d0:45:15:a3:
                    46:4b:e4:85:d9:04:b1:67:61:59:f4:c5:f7:f9:1f:
                    05:7e:b2:0d:67:ab:c7:7b:4c:b0:51:b9:c4:c3:bf:
                    7e:aa:0f:ef:06:f9:69:fb:a4:53:26:c2:13:d4:c6:
                    85:12:aa:c0:4d:97:f1:b7:57:56:94:1c:71:38:89:
                    d5:0b:3f:ad:ff:8f:4b:55:5a:de:7d:5b:a5:fe:a8:
                    b5:2f:a7:e7:fd:9f:c7:1f:3b:d4:1b:14:a4:ca:24:
                    21:b4:54:09:de:82:16:81:6e:10:1d:58:13:5f:70:
                    47:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:50:0C:28:71:FD:36:2F:85:29:10:B8:71:F5:E1:4D:B2:10:3C:A8
            X509v3 Authority Key Identifier:
                keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:39:c7:01:f3:b3:5d:a9:d7:b7:31:31:b1:8d:6e:cc:f4:cf:
         2e:d6:a4:2d:ef:99:ac:ca:f0:e7:c8:f8:63:81:cf:45:a1:27:
         fd:ca:42:e8:be:bf:d8:7b:4e:e3:d8:c5:40:55:7b:35:c4:a9:
         0b:67:51:cc:61:2e:62:07:79:bc:a4:b9:06:01:a9:3c:a8:13:
         db:cf:e9:2f:0b:34:d8:11:7e:4b:44:dd:2c:2a:e7:24:dd:97:
         56:81:3a:0d:0e:e6:ab:bd:f4:0d:33:ff:9e:06:38:0a:51:ac:
         b7:cc:45:ed:69:2d:21:d7:18:61:4d:fb:76:04:cc:bb:0e:df:
         87:fd:93:7a:01:a4:1e:c3:2a:51:1b:8c:cc:48:85:ac:1c:9e:
         25:b4:4c:ee:2a:9f:00:0a:2f:aa:16:e3:9e:af:c0:95:29:d8:
         0b:03:35:b8:05:43:39:fc:c6:6f:7f:3b:46:f6:5b:e9:97:66:
         24:8e:4e:6c:36:3b:be:83:fc:47:37:42:fe:6d:e2:ee:a4:12:
         47:19:06:f3:f9:41:32:0f:1e:3f:ff:0a:0d:92:c9:f8:0b:dd:
         0e:bf:d0:30:f4:f0:30:4b:53:75:e3:9e:38:1e:d0:5f:76:0f:
         db:5b:2b:f3:04:3e:bd:ac:de:52:fd:f9:42:b4:14:54:de:f2:
         81:dd:7f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:00:04 2024 by rpki-client on console-fra.rpki-client.org