Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
File:                     kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft (raw, json)
Hash identifier:          ddCU8KkckEF8GrkGjHbjSo/Pga8sWnNvaNCeM8ntvZc=
Subject key identifier:   F5:F9:71:29:1C:91:40:C2:E4:81:D9:01:A1:BA:CE:05:8E:FD:FD:24
Authority key identifier: 90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
Certificate issuer:       /CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Certificate serial:       01903707579027FA3059DFED5CC8B37958C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
Manifest number:          11D0
Signing time:             Thu 20 Jun 2024 19:02:26 +0000
Manifest this update:     Thu 20 Jun 2024 19:02:26 +0000
Manifest next update:     Fri 21 Jun 2024 19:02:26 +0000
Files and hashes:         1: IBTc6GXdqQbntX4m4q4nt0ttzH0.roa (hash: d0Uj2GDx1a/xis2dLeH0HlJRwaRTS71FvuPIESEoPPU=)
                          2: kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl (hash: dJBcQq1/F+pP8oJNMEsnkAPrfwUsscjTyNPNTfCLxlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:07:57:90:27:fa:30:59:df:ed:5c:c8:b3:79:58:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b3a3a0d662d14da8404bd21dc489e63945624e
        Validity
            Not Before: Jun 20 19:02:26 2024 GMT
            Not After : Jun 21 19:02:26 2024 GMT
        Subject: CN=f5f971291c9140c2e481d901a1bace058efdfd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:a8:c1:dc:c6:e3:55:d3:99:cf:ce:bc:11:
                    25:b8:44:fa:11:40:ab:e3:cc:33:cd:30:5f:28:67:
                    fd:a0:18:50:d4:42:42:a3:90:3a:11:a4:b3:fc:73:
                    fb:68:bd:a8:d6:84:c3:27:01:4c:3d:2b:7b:bb:d0:
                    b9:1e:d4:c6:b5:7c:8e:77:1d:1e:5b:b5:4f:2e:76:
                    fa:db:ac:c2:58:95:ab:f6:de:79:e8:6b:03:7b:20:
                    d6:c6:48:83:91:2f:0c:8a:19:37:3f:8e:6e:62:a1:
                    a1:0a:3c:24:2b:78:3d:6e:9a:11:13:ed:a6:53:ea:
                    70:6e:fc:81:48:6d:1c:6d:42:16:f4:b1:bb:fc:ba:
                    a6:9f:a4:4d:e4:29:7d:77:26:85:47:6b:31:65:8e:
                    9d:a5:02:18:09:cd:65:a6:86:7a:5a:b6:87:42:f1:
                    59:68:b1:d0:cb:95:2f:9f:22:bb:81:73:f4:2e:9f:
                    93:25:59:ab:3e:c7:ce:3f:d6:fa:d6:06:aa:5a:4e:
                    14:2b:78:98:1d:ba:02:4c:ed:fa:8f:3e:ae:fd:94:
                    50:5c:c1:3d:e3:01:9c:c2:f4:29:94:92:e2:55:68:
                    ea:94:45:8c:90:a8:2e:6d:d7:e0:ef:ed:16:97:60:
                    e2:44:80:d4:a6:53:e7:77:60:59:46:44:20:ff:a6:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F9:71:29:1C:91:40:C2:E4:81:D9:01:A1:BA:CE:05:8E:FD:FD:24
            X509v3 Authority Key Identifier:
                keyid:90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:b0:03:72:15:6e:11:df:13:ec:91:4e:32:6a:0a:af:76:
         93:a2:bd:e1:ef:07:f6:41:d8:aa:42:83:69:0f:c3:14:8d:b8:
         98:d3:42:28:10:e5:13:7e:1c:1f:a0:34:87:14:e7:1d:e1:1d:
         ff:86:1f:10:b8:06:25:cf:11:7a:72:28:dd:97:cc:8d:6e:22:
         fa:b3:c2:ed:1a:12:db:ae:5d:7e:4f:b8:26:89:fa:6f:c3:87:
         3a:fd:60:a9:a4:27:d6:6b:34:4f:ef:2b:55:ab:64:79:69:ef:
         69:4b:f7:a6:ae:14:75:0c:a3:92:85:d7:29:d8:65:59:77:cb:
         7b:89:c4:d7:4e:ec:dd:bc:9a:ab:bf:12:64:b3:26:87:00:00:
         90:23:7c:01:44:1c:64:d7:2a:cf:f9:50:f2:ed:96:69:44:9a:
         e1:a6:1b:1c:fe:b2:ff:25:67:8c:95:ad:d8:b4:44:cb:51:b2:
         d1:e8:af:8b:95:ac:df:2e:12:c1:53:e9:f4:3d:18:15:77:6a:
         e4:dc:c6:a1:50:08:e8:86:42:55:f7:45:ee:5a:0f:1a:bc:cd:
         ee:08:ac:e3:c2:6b:c1:d7:fd:c6:f8:68:82:20:8d:cc:26:d8:
         70:b5:2d:8c:43:06:2d:07:86:10:1e:b3:fb:c3:88:d4:e6:56:
         b9:21:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:49:23 2024 by rpki-client on console-ams.rpki-client.org