Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File:                     KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier:          uAsb5q+giP4A9GMqRj6bCGCgeX539H9u1qBmRqLVrqk=
Subject key identifier:   90:46:33:D5:1E:9C:1F:1A:3C:48:42:FB:2B:7A:7C:82:5C:57:7E:7A
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer:       /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial:       01901CA16DC9FCEA61998F14CD43FFB6C009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number:          8D
Signing time:             Sat 15 Jun 2024 16:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:59 +0000
Files and hashes:         1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: 5hgogiA1d11Vj3OFmWXZPmfdGtmsC0rvg84s9ZBan4M=)
                          2: MIjBE90ywAPiORvASLcuDGc2rno.roa (hash: oPPdapiLvwmcgE15izqVOTT9pq98jD7Di+E+R1gh04k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:6d:c9:fc:ea:61:99:8f:14:cd:43:ff:b6:c0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
        Validity
            Not Before: Jun 15 16:00:59 2024 GMT
            Not After : Jun 16 16:00:59 2024 GMT
        Subject: CN=904633d51e9c1f1a3c4842fb2b7a7c825c577e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:fa:e0:fb:73:57:f8:c4:dd:b6:14:08:aa:
                    84:00:3a:56:e3:00:2e:fc:22:c9:18:b0:46:07:bd:
                    77:0a:58:0b:8d:99:6a:34:29:18:61:cb:d1:48:52:
                    91:d3:ac:05:db:4c:9b:d9:31:f3:09:b8:ca:cb:8a:
                    a5:51:4d:03:ee:fb:c0:32:16:9a:4a:c5:f7:39:d2:
                    67:90:c1:e1:e9:4a:82:fc:c7:89:4a:82:b2:c4:9f:
                    bc:3a:f1:63:09:8f:98:56:04:56:c9:bf:6a:16:ec:
                    aa:7b:51:74:e2:c5:6c:e0:6b:2f:32:71:75:6c:8f:
                    dc:d0:7d:fc:0e:1a:e6:be:77:db:99:10:66:b1:06:
                    6c:cb:ab:da:ba:e5:bd:83:7e:a4:61:ee:ed:8e:2c:
                    c8:2f:42:ff:0f:5b:bc:82:3f:d4:76:6a:ca:59:0f:
                    6d:7f:c7:09:17:ec:1d:e1:ac:78:1f:8e:72:ab:94:
                    86:35:34:99:a6:83:5d:5e:2e:51:cc:da:6d:93:63:
                    9f:ba:ca:b5:85:99:bb:2d:db:64:af:96:a5:85:83:
                    b2:45:77:30:f8:97:a6:0c:55:df:3e:c4:8c:c9:f7:
                    d0:58:0c:df:7b:aa:37:e6:85:be:47:0a:97:13:81:
                    80:6d:4f:d1:3a:08:1b:d2:fd:5e:57:3a:02:a0:f6:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:46:33:D5:1E:9C:1F:1A:3C:48:42:FB:2B:7A:7C:82:5C:57:7E:7A
            X509v3 Authority Key Identifier:
                keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:35:bc:6f:6f:5c:72:72:48:ef:1f:6e:10:4a:1b:5d:33:1a:
         6f:79:0f:07:ee:bd:d1:94:d7:99:bb:4b:e1:c3:20:bd:97:fe:
         2d:67:10:e5:8c:bf:4c:8b:7d:86:3f:94:b5:49:e2:4c:7f:e9:
         88:39:aa:6e:bf:ea:c8:a0:c9:22:39:cb:17:6a:f1:6e:7e:9c:
         77:57:ba:14:3c:7b:5d:8c:20:17:93:6e:bf:a0:a7:c6:07:a5:
         39:40:78:6d:97:f7:21:e2:58:e9:b9:d9:12:a5:4c:45:08:38:
         75:ca:e6:12:b4:34:45:69:6a:e8:36:77:1f:c3:7b:75:24:eb:
         38:5a:d6:2f:4d:a1:ca:41:54:93:d6:8a:f4:6e:14:12:e1:79:
         8a:6f:68:b9:82:b6:ef:75:63:0b:04:2e:b9:0b:26:0d:66:ad:
         91:0c:15:13:2b:e3:6a:66:f9:7c:00:4f:5c:e4:93:2d:8c:72:
         5d:05:58:64:72:5e:ab:2d:93:5f:9b:fc:24:aa:51:45:da:0d:
         64:12:ae:19:f6:f1:c9:6f:ac:59:ee:55:5e:f5:41:6e:14:c2:
         dd:c9:e9:6e:ab:51:a9:ea:a4:81:62:1c:72:96:13:65:20:47:
         6c:20:33:a1:8c:23:58:a5:96:4a:ea:80:1c:1c:e2:ad:a4:f5:
         8d:8b:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:26:20 2024 by rpki-client on console-fra.rpki-client.org