Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File:                     krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier:          JTQVMbSokgMmfdTLBsuuPzlsXgtWGm5R3lNJI1grtSU=
Subject key identifier:   8B:73:CB:23:78:21:AC:45:EB:93:00:2E:14:C1:D5:75:05:94:1E:38
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer:       /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial:       01903AE3BDCE78264714C7BA62ABE86B68B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number:          10FA
Signing time:             Fri 21 Jun 2024 13:02:02 +0000
Manifest this update:     Fri 21 Jun 2024 13:02:02 +0000
Manifest next update:     Sat 22 Jun 2024 13:02:02 +0000
Files and hashes:         1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: IuothJTcK+/yElTpeEQfwcTMQTuGOdKI9py61AlucuA=)
                          2: x1lKQAvVTSFT9Zyej6T8l-x4eSo.roa (hash: lPeOCpE6NstprESc4Xt27oX0w2jCeX9RGYDPWgnLzl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:bd:ce:78:26:47:14:c7:ba:62:ab:e8:6b:68:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
        Validity
            Not Before: Jun 21 13:02:02 2024 GMT
            Not After : Jun 22 13:02:02 2024 GMT
        Subject: CN=8b73cb237821ac45eb93002e14c1d57505941e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:91:0a:03:0f:87:9f:98:c6:b7:4f:e7:75:
                    bb:f1:fa:bc:dd:41:bc:56:ec:b3:4a:92:34:f5:3a:
                    5d:44:b0:d5:59:37:83:70:64:af:9d:3f:fe:f7:15:
                    7b:ee:7d:84:03:c6:11:be:6a:31:c5:db:ae:0e:4b:
                    d5:41:72:e0:91:5f:bb:bb:13:ea:39:88:1e:2d:55:
                    2c:fe:06:7f:cf:4d:2c:7e:a9:c9:1f:ea:50:39:b8:
                    a4:0c:d6:98:c6:f1:57:49:b0:bb:3a:6e:e2:ff:29:
                    fd:26:3a:17:1e:5b:86:8a:a9:78:d0:45:b5:89:fe:
                    39:a8:3f:cf:14:ef:9d:ad:33:54:8c:bf:26:cc:ff:
                    04:5b:92:6f:d4:04:35:b1:c1:b9:57:25:7a:96:0f:
                    60:01:63:60:00:69:e8:68:a5:c0:fa:25:57:e9:d5:
                    01:31:9e:20:56:67:7f:f7:7e:04:9d:8c:86:90:76:
                    72:4a:46:96:59:e0:8e:ba:02:82:30:78:c3:49:da:
                    14:b6:b9:ab:c3:92:0b:5c:8e:f6:c8:23:ab:15:ec:
                    ca:11:05:dd:7b:ce:92:d8:ee:42:69:99:0e:8f:0a:
                    5c:3f:28:11:40:8e:f7:51:3a:b2:92:80:b2:25:92:
                    9f:80:0f:05:60:bd:f6:35:ea:18:68:66:dc:78:ac:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:73:CB:23:78:21:AC:45:EB:93:00:2E:14:C1:D5:75:05:94:1E:38
            X509v3 Authority Key Identifier:
                keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:70:92:75:93:b7:79:16:57:9a:06:ae:88:e6:a1:e1:05:
         bf:8d:06:2a:d5:1b:b9:fb:de:74:ed:13:6f:66:c1:cd:0a:67:
         20:45:7d:c5:a5:4c:5f:36:3f:51:28:3b:89:47:e0:28:a0:04:
         b3:2c:2c:42:93:4e:8a:1a:38:c3:dc:b8:71:71:aa:80:dd:c8:
         f7:2f:b8:ca:41:7c:00:62:cf:43:37:a7:9c:f5:af:b6:39:ba:
         d8:4b:95:b0:ab:46:5c:79:3e:93:0c:39:b0:ed:59:da:43:29:
         36:28:e7:cc:32:4c:4a:ce:59:b7:ff:3c:ec:a6:b0:e0:5a:39:
         d6:08:41:f1:51:77:e1:20:45:6e:2b:a1:cf:2c:73:b1:c6:54:
         3c:d6:00:7d:14:ee:51:1a:b9:36:30:af:22:57:d2:90:96:57:
         61:fe:f9:55:11:13:4f:18:77:62:7e:ed:88:92:be:b0:51:95:
         4a:5f:c3:01:d3:5f:2a:e8:8b:59:6e:36:76:3b:cf:d5:e6:17:
         b0:7a:b2:c7:86:fc:ca:c1:15:f5:0c:e9:8d:cd:34:a5:38:94:
         e9:f5:bc:97:81:0b:97:06:19:35:66:64:6f:00:b4:ee:b7:26:
         01:2f:5b:57:53:d6:13:b6:d1:ff:1b:d2:6c:4c:e1:4e:e7:5f:
         f1:2f:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:27:40 2024 by rpki-client on console-fra.rpki-client.org