Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
File:                     K3xCZNrN-ss7ejru7VZZdapSQ0w.mft (raw, json)
Hash identifier:          7Za5WEX1DQNWoInmrHKbW4tvanCH99oVjs0Y5o7AeCQ=
Subject key identifier:   85:78:04:9B:E1:80:E2:E0:DF:69:D6:89:61:08:75:87:B1:72:33:D6
Authority key identifier: 2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C
Certificate issuer:       /CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
Certificate serial:       01901EFD6D4878C41ADC8BFD4D4DB389B9E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
Manifest number:          0C93
Signing time:             Sun 16 Jun 2024 03:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:43 +0000
Files and hashes:         1: 1-KvYMWJATPxtEC1Zj6bjDZBBxF4.roa (hash: iMoZy60HRf6GWQ8zG2gcgKS9jslpq/esHb9BexHjLdc=)
                          2: K3xCZNrN-ss7ejru7VZZdapSQ0w.crl (hash: AJHOYmPXpUW7GkURzl6FchCNDKLhEKCReVgqKo4aEQg=)
                          3: TXQojXemHRIp6kQVwbEBJCOfR_s.roa (hash: SSJPkdEn5mLayeY08vDdcLwNHGzsuXeKZLNABrb73Ac=)
                          4: XTUgVvqZkMKvQ_lHF1o75eq2S4c.roa (hash: 4U8tjl6TmCB3cb1s4eT3hx6DVBSTvM8lTtEnDDrYASg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:6d:48:78:c4:1a:dc:8b:fd:4d:4d:b3:89:b9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
        Validity
            Not Before: Jun 16 03:00:43 2024 GMT
            Not After : Jun 17 03:00:43 2024 GMT
        Subject: CN=8578049be180e2e0df69d68961087587b17233d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:8a:cf:1a:55:c9:a0:9c:68:9a:de:33:d1:
                    84:dd:12:21:fc:1e:57:3b:70:ae:fc:f5:df:59:67:
                    2a:bc:65:b7:58:71:5d:a4:0c:17:3b:1c:46:14:86:
                    e2:a5:6a:f2:cc:ac:5a:3d:b0:da:74:cd:20:3b:f2:
                    b4:0b:1f:b9:f0:50:13:39:b4:ab:a4:b8:83:a6:cd:
                    62:e7:56:fd:b4:eb:aa:bd:06:9d:86:33:a6:95:3f:
                    c3:d3:55:14:09:df:8e:29:09:91:40:71:8f:b3:2a:
                    7c:c0:19:24:e9:d8:a6:7d:65:e3:73:83:76:5e:05:
                    5b:e0:e7:a8:87:fe:44:4e:24:5b:f3:00:58:08:55:
                    03:72:3a:fc:fb:2f:3c:45:6a:37:8c:49:b7:b9:68:
                    81:09:9b:41:85:03:0a:e7:be:a8:51:15:a5:4b:08:
                    cb:9c:ef:99:b6:e2:f3:7b:85:49:8f:9c:f3:8f:d3:
                    5d:33:30:46:01:9d:8e:77:fb:2a:35:49:e2:69:fb:
                    bb:c2:53:b0:4b:8a:ff:6b:ef:c3:02:e3:64:72:22:
                    c0:3a:d5:30:33:a4:e0:d3:ce:ac:15:21:34:cc:99:
                    88:85:6a:5f:99:eb:ce:2b:66:c1:08:44:6a:73:ec:
                    0a:49:a7:13:7e:e1:6c:56:9b:45:ec:7c:e4:eb:11:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:78:04:9B:E1:80:E2:E0:DF:69:D6:89:61:08:75:87:B1:72:33:D6
            X509v3 Authority Key Identifier:
                keyid:2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:6b:5c:71:f2:32:a5:58:5b:b4:f2:c1:42:df:3f:13:e0:
         17:38:38:6f:9c:f2:2b:6e:3f:46:05:11:8c:21:67:fb:de:f4:
         71:f5:f8:8b:3e:a2:43:55:eb:8e:09:29:ff:3c:d4:2f:7b:13:
         f5:ee:c1:ac:14:9a:06:49:b3:24:0b:8f:af:a7:74:25:07:56:
         8c:50:d9:26:f0:56:d9:07:c7:40:0c:80:d9:8e:75:ff:90:b8:
         e2:5c:36:83:17:ef:00:cd:b1:91:65:4b:84:4a:2d:7f:ed:4a:
         05:cf:7b:73:0a:31:5b:13:61:3b:8e:9b:c9:b7:65:23:9c:a4:
         1e:cb:93:3d:9d:1d:68:cf:cd:43:d9:3b:4f:d2:ef:5d:c1:7e:
         ff:1b:93:ab:70:47:9b:4a:f5:89:36:a2:d2:7d:c5:d0:a1:10:
         0c:12:ad:a0:ed:59:1d:7a:28:53:d1:e7:ba:1a:dc:d8:d3:5e:
         08:41:33:90:1b:6c:b4:58:3a:48:1b:e3:e5:c6:77:b8:b7:c6:
         10:8c:f6:7e:24:56:da:d5:ab:5b:a4:a8:45:59:48:b6:fb:a2:
         91:34:e6:ba:a1:f9:80:15:a8:77:26:1e:70:a6:45:fa:17:18:
         73:60:86:c8:8f:86:d7:0f:44:76:7b:51:f2:a7:82:6d:7d:c7:
         7a:3c:6d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:52 2024 by rpki-client on console-fra.rpki-client.org