Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File:                     kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier:          oBne7bIBsvLEdiRChik73d15xIFq+sBDIvmjA29dG7o=
Subject key identifier:   1C:28:5C:03:33:F6:B3:B3:85:1F:5E:52:1B:C6:3E:CD:3D:ED:F6:AE
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer:       /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial:       0190497A2FA7057FF202E65F0B8F6E99A2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number:          11DE
Signing time:             Mon 24 Jun 2024 09:01:02 +0000
Manifest this update:     Mon 24 Jun 2024 09:01:02 +0000
Manifest next update:     Tue 25 Jun 2024 09:01:02 +0000
Files and hashes:         1: 7FbcCSTUohUZkrk8-PnBGbJ_8Hs.roa (hash: sO5C+3foD0pQMBJ7ClDoNlsFfaxLEJJEawMkzg/BgwI=)
                          2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: VMfmZtW6xdKoDgK+AJQjmIdUPYyVxgpmlvoHEbzZufE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:7a:2f:a7:05:7f:f2:02:e6:5f:0b:8f:6e:99:a2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
        Validity
            Not Before: Jun 24 09:01:02 2024 GMT
            Not After : Jun 25 09:01:02 2024 GMT
        Subject: CN=1c285c0333f6b3b3851f5e521bc63ecd3dedf6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:ce:6f:45:66:dd:72:90:b6:eb:aa:af:a9:
                    f2:c4:20:ac:1e:79:05:e0:78:31:5a:c1:83:50:b7:
                    44:b2:22:f7:d8:ab:2f:81:71:15:54:17:db:bf:2e:
                    2c:d0:f0:be:3f:10:82:00:0f:ce:22:27:8d:26:a5:
                    bb:55:39:e5:b6:87:9f:3e:3a:66:66:33:23:c7:d4:
                    9f:f2:d8:42:26:39:26:ad:50:0d:5a:1c:43:cc:95:
                    f9:43:ad:f6:60:f9:1d:ad:37:df:2b:3b:d3:8f:04:
                    cc:0c:19:d2:37:df:d9:30:59:47:7c:9b:34:42:0b:
                    eb:05:8a:49:d7:dd:9a:f6:28:79:20:59:41:72:3a:
                    54:ca:bb:2f:52:15:6e:ef:66:19:af:b7:7f:a5:4f:
                    17:be:6a:d9:8b:df:2a:10:df:b4:b6:5a:a4:f7:c6:
                    9d:b3:bb:c0:c0:fc:c9:95:5a:8f:c4:9c:3e:9d:85:
                    0d:8f:47:f8:cd:0e:c3:62:ab:2c:66:b1:b8:cd:b6:
                    1c:be:0c:16:18:97:21:8a:44:02:d1:36:d7:25:63:
                    21:20:3a:2c:96:fd:aa:1b:d5:1c:00:99:23:9a:2b:
                    d4:b6:4f:fa:81:ec:f9:47:90:6a:1c:1e:26:67:eb:
                    fd:dc:ad:46:2b:51:d4:25:b9:f1:1d:9a:fd:ba:0e:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:28:5C:03:33:F6:B3:B3:85:1F:5E:52:1B:C6:3E:CD:3D:ED:F6:AE
            X509v3 Authority Key Identifier:
                keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:24:d0:5d:a4:90:40:f4:db:b7:df:99:e0:f2:6f:14:46:41:
         52:bc:d9:be:d9:45:23:78:7c:89:e8:52:f2:2f:1e:6d:39:ba:
         8c:5d:4f:9e:79:71:50:f8:d6:18:56:55:f4:1e:07:3d:80:95:
         42:5f:e2:2f:8f:c5:04:e8:4d:38:be:ef:91:36:1e:9f:98:9b:
         74:20:25:c5:1c:7b:8b:38:dc:99:b9:b5:57:ac:05:06:65:ae:
         9e:ca:d5:c0:fe:b6:40:32:85:34:5e:e8:3f:b9:dc:00:50:fa:
         57:46:03:0c:81:8b:f4:67:a2:78:51:e7:80:c3:9b:88:ed:12:
         cc:5e:4e:e5:e3:ba:df:27:6a:ea:ab:d6:86:21:43:ab:ae:38:
         18:e2:e6:96:a1:b5:61:7f:b7:e2:95:5a:1c:cd:f1:94:82:54:
         d6:b8:a2:3d:9a:e7:d4:77:7c:ed:a9:33:88:d5:8f:65:05:2d:
         99:b0:b2:6f:c3:1b:fe:fa:24:17:af:15:04:7e:76:7c:1e:c6:
         36:10:f4:64:9f:23:10:7e:3a:c8:f6:a7:71:a4:f4:fb:87:d2:
         34:89:ac:8c:ac:2c:4a:d2:ab:de:4e:e6:69:a9:f5:5b:29:e4:
         4a:9b:e5:a0:2c:91:8c:7e:37:28:72:25:8e:78:3e:cc:0c:93:
         d2:ea:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:09:24 2024 by rpki-client on console-fra.rpki-client.org