Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File:                     KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier:          dPifDuMQ9IkBPJB0OFjQZ2HBbQ3gRvSzbtgh2IH5XF0=
Subject key identifier:   2C:A6:46:43:68:44:50:65:A6:44:4F:3A:42:62:91:48:29:12:53:90
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer:       /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial:       01903BBED8B63E3D9BAE1609AC7405503420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number:          11D4
Signing time:             Fri 21 Jun 2024 17:01:21 +0000
Manifest this update:     Fri 21 Jun 2024 17:01:21 +0000
Manifest next update:     Sat 22 Jun 2024 17:01:21 +0000
Files and hashes:         1: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: dwFMXuLwIGUefD1TkvqthZjlZ0vKwSj+WefXiq3rdrI=)
                          2: _CnS8TidaQfD3Q3UknobRPSGM0Q.roa (hash: gUUk2u3qQVDdcWd90rFvwbgTMbeHBKKZRJw7E4R1gDg=)
                          3: xMXDFpTIimi84uVN0qhOEh11a_Y.roa (hash: ytcFNyEHOotq2mRX/hFxxO4wEbkzIluJt/js4fgl2aU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:be:d8:b6:3e:3d:9b:ae:16:09:ac:74:05:50:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
        Validity
            Not Before: Jun 21 17:01:21 2024 GMT
            Not After : Jun 22 17:01:21 2024 GMT
        Subject: CN=2ca6464368445065a6444f3a4262914829125390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:e1:ca:ae:6f:d6:45:fe:75:c9:eb:31:67:
                    72:82:0b:77:36:58:25:ce:20:aa:4d:f8:21:e7:5e:
                    2f:89:b8:49:b4:8e:ca:55:5f:80:8e:02:2f:9b:80:
                    00:9f:f2:1e:33:7a:17:4d:58:22:36:3d:30:82:f6:
                    3b:23:10:c4:6b:cd:46:00:81:86:85:ee:76:df:92:
                    91:9a:d2:ae:22:c6:d4:30:05:5e:fd:f9:33:a3:9e:
                    93:1f:8c:4f:1c:80:6d:d5:76:63:a0:25:65:3d:2d:
                    67:8a:a4:bb:ec:4c:be:20:6e:9a:9f:0a:a7:bf:ca:
                    a8:a7:09:0c:9b:06:d0:1c:76:42:d7:c4:47:83:c5:
                    ac:8e:22:1a:68:80:b7:90:de:30:4f:28:a5:2b:f3:
                    e0:80:2f:ac:28:f1:fe:5a:4b:0a:35:f0:1a:17:e3:
                    ef:0f:2d:0b:d3:3f:d5:2b:26:81:8a:e9:a1:89:6f:
                    9c:b0:82:10:24:db:09:0d:94:9c:25:c9:4f:73:57:
                    6c:9d:fe:43:5e:23:23:ea:ca:7e:85:3c:77:69:01:
                    ae:dd:c7:3b:87:ea:97:30:68:85:dc:46:7d:ca:2c:
                    4e:2d:88:8d:24:75:16:6d:60:86:48:66:22:84:75:
                    09:de:a8:17:fd:b1:11:cf:5a:81:5a:57:68:05:e0:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A6:46:43:68:44:50:65:A6:44:4F:3A:42:62:91:48:29:12:53:90
            X509v3 Authority Key Identifier:
                keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0d:5b:d1:83:b9:75:d5:d8:0a:60:6d:d5:98:71:fa:64:b5:
         03:77:3f:8b:c5:e3:51:49:0e:66:1d:34:ca:a5:5f:23:8e:4d:
         c2:ef:18:90:a1:83:f6:54:e4:3a:a5:02:c4:16:0c:59:93:03:
         16:20:67:59:e8:e0:d2:5a:ca:1d:11:e2:9d:84:21:b2:b2:be:
         6b:d1:92:35:de:4a:d7:2c:e8:72:58:f3:bc:ea:a5:da:b8:38:
         29:43:6c:2a:8a:6a:9a:91:a9:62:29:02:81:01:81:29:a0:96:
         f0:06:b2:92:6c:c3:30:a8:ca:ab:6e:2a:34:63:15:50:51:79:
         b9:54:34:0f:e4:d6:57:16:3d:0e:1d:60:46:a6:70:13:b2:0c:
         9f:bf:ae:77:6f:4a:75:df:77:98:d8:36:18:be:95:ab:a0:9b:
         2d:2e:e3:d1:fd:b9:41:64:33:20:10:70:75:eb:d8:16:a6:67:
         5d:a4:42:5b:0e:ef:a1:15:69:e5:6f:02:01:e9:f6:50:ce:c7:
         8b:c9:a4:f5:f3:52:db:97:65:5a:c2:e3:3c:41:be:8e:91:7a:
         aa:ec:34:c3:09:c6:85:4d:7f:bb:9b:52:67:fd:62:04:30:c6:
         f4:9e:1e:4a:5b:da:cc:28:3b:f3:f2:9e:cc:9b:96:7f:be:7a:
         e0:c9:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:06:46 2024 by rpki-client on console-fra.rpki-client.org