Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File:                     kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier:          rN7XLeDk5mkh3Rw/LIkG7lA34h+ZIepxDqmLmw0GvKE=
Subject key identifier:   EA:50:24:83:0F:2D:29:D2:0F:62:D8:7B:70:AD:E3:C3:3A:D3:DA:E2
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer:       /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial:       01903DACF51A291013A9D57F276E8CF5B6AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 02:01:03 +0000
Manifest this update:     Sat 22 Jun 2024 02:01:03 +0000
Manifest next update:     Sun 23 Jun 2024 02:01:03 +0000
Files and hashes:         1: 3NgpQxADw7YPbSj03cvzQJtb5vY.roa (hash: tvSTsqQ2PBM0W4YWStwz9lT8EPHRSa6WQ74IoQsDIbk=)
                          2: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: E5qyy5pvIVj+YKMJnRypqJl8XRrKvMxRaBF2dkD5wAw=)
                          3: sk1wKorW-QTwALnxzuSvjCOLJjU.roa (hash: eLtYHCDqJWJMIZ52wvy/2kr3kUnXZX7vWe1REf8+RO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:ac:f5:1a:29:10:13:a9:d5:7f:27:6e:8c:f5:b6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
        Validity
            Not Before: Jun 22 02:01:03 2024 GMT
            Not After : Jun 23 02:01:03 2024 GMT
        Subject: CN=ea5024830f2d29d20f62d87b70ade3c33ad3dae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:36:63:3c:cb:72:76:f1:12:8f:8d:10:8f:
                    ae:07:f0:cd:49:8d:f2:3c:bb:6d:34:74:a9:28:72:
                    54:e1:15:aa:96:ee:4f:68:98:6f:7d:9d:2f:13:ff:
                    4b:c0:56:6e:4d:5c:1f:c7:de:70:d7:48:b0:3d:32:
                    26:2b:2b:52:b8:1e:a2:b6:24:14:f9:96:41:eb:81:
                    9d:82:2a:d3:96:ea:fd:b8:77:18:18:18:df:07:4c:
                    ac:e3:55:ab:20:e4:91:43:66:f0:cf:b5:2d:2b:69:
                    4b:9b:d1:d9:ff:7a:02:ec:99:e1:d4:38:b4:6c:00:
                    2d:3a:95:5e:cc:90:da:d8:dd:1c:d7:d4:ba:62:7f:
                    d7:8e:06:02:cc:6a:e6:ee:8e:e2:c4:20:23:a5:00:
                    51:62:8c:ed:90:5f:ad:d2:e0:0c:fd:14:76:9e:ab:
                    18:c5:5e:60:36:be:45:96:75:58:8c:f6:f3:63:ae:
                    c2:f8:8f:8c:ba:1c:02:35:f7:0d:a1:c9:1a:52:f0:
                    1d:f4:4c:56:45:6f:44:9e:52:91:35:da:75:45:f7:
                    da:55:53:2b:2b:3e:fb:5c:77:e3:e7:73:4a:3c:ce:
                    a6:20:3e:17:22:26:a9:6b:49:b1:e6:9f:1d:20:c9:
                    b0:ca:46:07:2e:3f:bf:1f:b8:21:59:35:3e:74:47:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:50:24:83:0F:2D:29:D2:0F:62:D8:7B:70:AD:E3:C3:3A:D3:DA:E2
            X509v3 Authority Key Identifier:
                keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:17:4a:5e:d8:3a:8c:51:27:a0:f0:be:19:a7:14:c6:03:41:
         1a:03:0c:40:8c:78:9a:60:b0:bd:ea:1c:75:25:be:f0:f5:0b:
         58:21:38:f4:37:d9:7c:93:63:a9:81:08:50:30:7f:5c:6b:9b:
         07:98:28:ce:73:0c:ef:ca:42:8f:40:9c:03:82:5f:49:67:8d:
         cc:cf:84:79:be:4b:6b:e7:53:84:ce:ee:14:f5:2d:56:73:2f:
         30:6a:e9:77:ee:bc:df:64:75:81:5d:0a:b1:a4:99:56:1b:28:
         51:e7:36:3b:13:05:0f:5c:f1:64:99:28:61:63:74:31:ca:ac:
         6f:84:71:60:72:12:e9:19:d4:3a:a8:69:58:c5:00:4d:fb:09:
         1d:31:e7:42:bc:0c:ff:9d:ac:2d:65:4a:c0:6c:c1:ac:48:2e:
         7d:6f:c9:bd:ca:a1:77:ca:60:4d:0b:a3:85:1f:68:26:61:ca:
         3f:c1:1c:ac:5d:c1:88:79:13:74:4d:29:50:9e:5f:53:91:3e:
         48:5b:55:a9:ee:25:93:63:82:af:b4:53:35:df:45:c9:3d:b8:
         2f:97:f4:8b:5b:0d:d3:95:60:47:da:c5:c1:a6:89:6b:f7:48:
         01:b4:67:66:30:80:4b:10:a5:ae:4b:48:61:1e:79:9c:28:c5:
         e6:4b:2f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:01:25 2024 by rpki-client on console-ams.rpki-client.org