Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File:                     KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier:          riEkwf/zKCYkbVbLIXdye6GG6AH7c7s/meXgMqqVZjA=
Subject key identifier:   5E:19:18:C5:18:A5:BE:93:D6:CF:49:35:EF:AA:AA:65:A0:A8:58:48
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer:       /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial:       01901DEB1C09099A889BC29BE9F054DD9F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:05 +0000
Files and hashes:         1: 6poyfRWmmXabuyxH4nwFaJejX7Q.roa (hash: GcC8kSDV5rfRAwp1ctiPvhF98ozHc+G8Y23UEjT7Nmo=)
                          2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: R0cv5bCrd1nmZCgXJeoz0vERZ9aOZ8B4o5jPCrVMZSQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:1c:09:09:9a:88:9b:c2:9b:e9:f0:54:dd:9f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
        Validity
            Not Before: Jun 15 22:01:05 2024 GMT
            Not After : Jun 16 22:01:05 2024 GMT
        Subject: CN=5e1918c518a5be93d6cf4935efaaaa65a0a85848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:1c:59:2e:0a:69:c3:11:36:2f:2c:17:9f:
                    4e:26:c4:46:34:df:16:cb:d1:37:1f:04:34:ce:10:
                    4a:e6:a2:ec:b7:44:af:e6:ff:f1:55:da:98:84:8a:
                    f0:c1:97:92:3f:04:77:23:4c:76:e4:ab:cb:71:e8:
                    26:33:6f:86:34:00:ae:4c:ff:5b:99:e9:64:d0:83:
                    82:25:03:f2:dc:c3:fb:c6:e6:fe:11:8f:36:29:83:
                    a7:8a:b1:9f:84:80:5e:4e:24:4f:54:b7:55:40:3b:
                    ec:a9:a2:d8:12:4b:c4:14:08:b7:92:c8:01:d3:8f:
                    49:a1:db:3e:66:29:92:96:c4:7e:b8:28:97:88:b5:
                    92:e4:21:ee:36:a2:1e:96:f0:36:20:87:cc:ff:c1:
                    31:35:b1:25:82:21:62:2e:14:64:b8:29:a4:2b:04:
                    8e:a7:5e:75:cd:89:45:2d:36:1c:11:e0:8f:05:d4:
                    11:1b:87:ba:1b:04:3f:b0:69:53:bc:c4:c9:cf:27:
                    87:3f:9f:e8:f7:c4:9b:cd:7d:8f:9e:e2:b7:b1:17:
                    07:74:ef:bd:bc:f5:cf:ce:32:33:ca:15:11:23:05:
                    2a:c2:2e:82:57:a0:18:ad:d9:d4:3c:63:90:b3:75:
                    a4:8a:18:54:2e:19:a2:c1:6c:75:62:4e:27:2d:19:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:18:C5:18:A5:BE:93:D6:CF:49:35:EF:AA:AA:65:A0:A8:58:48
            X509v3 Authority Key Identifier:
                keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8f:35:74:2c:1c:2f:91:d5:76:e4:3f:c0:62:56:aa:82:56:
         8f:bb:55:e7:af:72:c9:8a:87:66:d9:77:60:8f:d3:88:84:f4:
         d6:9a:5f:11:88:b3:ae:a9:f7:80:73:12:8e:34:e1:b8:f5:fd:
         1a:db:8a:4d:54:4a:28:4a:5d:d1:ea:4c:ba:55:65:48:91:5b:
         a4:c9:3e:0c:b4:ef:f8:ba:2f:10:f8:fd:ca:58:91:05:ae:8e:
         00:cc:ab:f5:09:13:2a:ca:00:7c:9c:bc:ef:12:91:97:94:76:
         86:2b:3d:42:9c:ca:07:2c:73:f7:85:29:9b:3a:4d:10:4f:4e:
         bd:2a:37:ce:bc:3d:d2:ea:bc:1e:3b:21:9b:c0:32:4a:ce:a6:
         63:fb:e7:8b:ce:b6:25:d8:88:e0:4c:1a:32:8f:65:cc:51:5e:
         5b:90:3c:bc:97:13:25:e8:39:9f:cd:b5:ff:00:c7:a9:69:2b:
         d9:f4:cb:e3:37:ae:22:9f:11:5f:08:15:90:56:f7:9e:c5:d8:
         f1:59:99:9d:84:60:b5:59:fa:6d:5e:14:19:d7:5d:44:05:7e:
         f5:ea:80:13:4b:0a:6f:88:bb:83:40:e0:2a:71:74:07:99:ab:
         fc:d4:20:52:5d:cd:5e:42:50:10:41:5b:5f:7a:4c:cf:06:60:
         ef:a0:57:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6xwJCZqIm8Kb6fBU3Z8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2
YjFmYWIwHhcNMjQwNjE1MjIwMTA1WhcNMjQwNjE2MjIwMTA1WjAzMTEwLwYDVQQD
Eyg1ZTE5MThjNTE4YTViZTkzZDZjZjQ5MzVlZmFhYWE2NWEwYTg1ODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGIcWS4KacMRNi8sF59OJsRGNN8W
y9E3HwQ0zhBK5qLst0Sv5v/xVdqYhIrwwZeSPwR3I0x25KvLcegmM2+GNACuTP9b
melk0IOCJQPy3MP7xub+EY82KYOnirGfhIBeTiRPVLdVQDvsqaLYEkvEFAi3ksgB
049Jods+ZimSlsR+uCiXiLWS5CHuNqIelvA2IIfM/8ExNbElgiFiLhRkuCmkKwSO
p151zYlFLTYcEeCPBdQRG4e6GwQ/sGlTvMTJzyeHP5/o98SbzX2PnuK3sRcHdO+9
vPXPzjIzyhURIwUqwi6CV6AYrdnUPGOQs3WkihhULhmiwWx1Yk4nLRnc+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4ZGMUYpb6T1s9JNe+qqmWgqFhIMB8GA1UdIwQY
MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct
MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz
LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhY81dCwc
L5HVduQ/wGJWqoJWj7tV569yyYqHZtl3YI/TiIT01ppfEYizrqn3gHMSjjThuPX9
GtuKTVRKKEpd0epMulVlSJFbpMk+DLTv+LovEPj9yliRBa6OAMyr9QkTKsoAfJy8
7xKRl5R2his9QpzKByxz94UpmzpNEE9OvSo3zrw90uq8Hjshm8AySs6mY/vni862
JdiI4EwaMo9lzFFeW5A8vJcTJeg5n821/wDHqWkr2fTL4zeuIp8RXwgVkFb3nsXY
8VmZnYRgtVn6bV4UGdddRAV+9eqAE0sKb4i7g0DgKnF0B5mr/NQgUl3NXkJQEEFb
X3pMzwZg76BXcQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:59 2024 by rpki-client on console-ams.rpki-client.org