Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          A4O+rZUqhFgipMjRS/J+3nB76nf64tHdDqT1uo7VQfw=
Subject key identifier:   AF:71:CA:45:C5:AD:CB:95:CE:74:AE:D6:48:71:6C:12:82:61:90:EB
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       018F896D92568ED3FF1A78C51D2D788AD3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          1187
Signing time:             Sat 18 May 2024 02:00:10 +0000
Manifest this update:     Sat 18 May 2024 02:00:10 +0000
Manifest next update:     Sun 19 May 2024 02:00:10 +0000
Files and hashes:         1: 7dnCzTxsPRECBdbLH-hVl5yrUK4.roa (hash: cnxhHM+pxtkasSIsZ5aLAd+LIKRNNOyt9IQGVg0QJ/8=)
                          2: GR00k5QmmfS0cOUClVnK6RS66s8.roa (hash: wElYhpa1RlJTgvoyDSQXxyiexohiV/1r6XO0SK8c8es=)
                          3: MpOI5w8DL5opeoCQN4SZ8wjnVts.roa (hash: tlbHRL/hpJq36QXY99yAxnl4FKGJfD0J7XuKeK1WloY=)
                          4: Omc-NzBN2dxYiMi16TuLg7hzefA.roa (hash: bzBYxl8ZCmgzPMyFMfqjqhagIIhX/nzIxcgT7fp00Hs=)
                          5: _DL0HmnT9m_SEQxVLnEWxe4mGd4.roa (hash: 0mvIqpr8dTb2jLMm94cIJZ+qGtjDhS4PvdLfxdW8krU=)
                          6: eo1ldKAOybCByJyYx1I9BpnwkGw.roa (hash: 4TBhc5ntwvM3jtcJYB/UDidgCV6I7Ozi7EUYCIwg31c=)
                          7: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: hKjJSVIGvVJPyny5ORsGrEgrg3Vq0kAiEe7a68ApbLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 23:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:6d:92:56:8e:d3:ff:1a:78:c5:1d:2d:78:8a:d3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: May 18 02:00:10 2024 GMT
            Not After : May 19 02:00:10 2024 GMT
        Subject: CN=af71ca45c5adcb95ce74aed648716c12826190eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:ab:8a:7d:65:72:8e:47:0a:63:69:fb:04:
                    ef:60:f4:50:20:94:fe:c5:24:c7:df:bd:49:78:ef:
                    3a:de:d3:ed:4c:07:5a:55:43:5b:48:4c:37:b5:91:
                    e5:16:93:53:f6:fe:0f:b1:a4:2c:34:da:98:0a:45:
                    c8:50:59:ca:ee:02:fb:81:7b:ad:bc:2a:33:d5:86:
                    e4:75:a9:ea:c9:0b:ad:66:ae:de:61:66:e4:c7:67:
                    0a:50:28:74:5b:a4:5d:79:cc:83:e0:e2:e4:80:5f:
                    13:6e:08:8e:21:df:5f:e0:4a:41:41:68:4d:7c:fc:
                    8f:5e:82:3d:cc:48:de:78:33:da:3c:e2:ba:53:76:
                    6f:0e:13:eb:f6:6a:91:7b:26:be:e7:30:f7:9c:86:
                    d0:dc:b0:56:e4:c3:38:1a:dc:b8:a6:9e:0c:42:f2:
                    78:50:94:07:5d:ea:c4:41:98:af:1e:6f:24:dd:c4:
                    d8:5f:b4:d9:9d:77:2f:df:5c:a3:e3:15:14:ea:dc:
                    bc:ac:e2:3d:18:d6:2e:95:f6:8b:57:58:d6:b2:81:
                    a5:63:73:49:ae:8e:99:18:9e:b9:d1:1a:d7:ca:38:
                    30:b3:53:27:f0:62:f1:7d:94:5d:51:55:bf:22:73:
                    16:5d:f9:28:72:78:d7:55:37:36:ee:9b:da:17:d9:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:71:CA:45:C5:AD:CB:95:CE:74:AE:D6:48:71:6C:12:82:61:90:EB
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:90:84:e1:a6:66:89:36:59:e7:9b:5c:a3:17:b8:9f:37:2e:
         f8:92:f5:72:8d:c5:78:0a:8c:67:66:a1:bc:6e:41:e3:3b:6b:
         45:31:18:4d:44:9c:cb:45:ed:14:53:14:cf:f7:87:af:2d:b3:
         aa:27:6c:6e:53:03:8c:6f:a5:83:f0:d2:ac:30:b4:26:be:75:
         93:72:5e:12:af:6b:66:31:6e:f3:4c:62:b3:0f:1b:8c:04:ef:
         55:d5:9e:26:dd:eb:8a:72:1a:a2:07:f0:13:02:5d:ab:48:7c:
         ae:33:61:59:27:60:60:c0:6d:16:bb:84:51:6e:91:ba:13:a1:
         e5:d4:e6:d4:6b:59:df:71:2a:52:24:b8:d1:cd:e2:e5:9e:50:
         f0:12:7f:05:a8:ed:62:39:df:34:82:4a:59:65:f5:65:55:67:
         bd:96:12:e4:11:bd:bd:ae:97:59:a6:77:59:d0:50:b9:71:49:
         9c:6c:d2:97:a0:ed:c5:43:9f:d9:7b:10:84:c4:c3:b6:da:af:
         71:0d:59:a5:84:7a:e7:b6:20:16:8f:52:34:2a:e9:f0:6e:3e:
         93:70:05:bd:f2:78:3f:9a:82:9e:c8:dd:55:65:37:2c:c1:e2:
         86:7a:52:d1:39:47:fa:c9:fa:2e:44:0e:e8:e7:f7:21:7e:8a:
         05:bb:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:58:20 2024 by rpki-client on console-fra.rpki-client.org