Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File:                     KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier:          ufZ5pU5n82pCLKNaedlwIk87hEP8iQyq33MTJy+/1qM=
Subject key identifier:   9D:D3:AF:21:C2:8E:0B:15:56:30:7C:2C:5F:EE:9A:EA:84:43:FF:F1
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer:       /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial:       01901C6ABBE21578BB0359D3CA01D251521A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 15:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:15 +0000
Files and hashes:         1: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: 2EuV24rBYsd9MTUU43y/2NZiWAorMroErttCpSv1/7U=)
                          2: Pdbg2ogjIToKAatDl8eeOS3H9Zc.roa (hash: PjQHnMdnb9+5GxZS9OQI8exJo5flvAI/GlpSNwuLxg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:bb:e2:15:78:bb:03:59:d3:ca:01:d2:51:52:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
        Validity
            Not Before: Jun 15 15:01:15 2024 GMT
            Not After : Jun 16 15:01:15 2024 GMT
        Subject: CN=9dd3af21c28e0b1556307c2c5fee9aea8443fff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:28:d1:54:3e:dc:cc:29:2c:b9:13:b0:4a:
                    65:b0:35:d0:2a:c9:0c:99:56:43:8c:25:e4:7d:af:
                    48:f0:e0:a9:a9:08:3b:85:b0:d4:a8:be:7e:f7:ba:
                    0d:eb:dd:bc:0a:55:e5:1b:cd:f6:9b:df:f5:92:33:
                    33:dc:9e:eb:e4:8c:18:ea:cd:24:1c:87:1e:70:b8:
                    a6:12:e8:5e:6e:9b:9a:4a:f7:44:be:16:9a:cf:7a:
                    26:86:44:c4:e4:05:65:45:4d:1d:a6:31:73:04:5e:
                    3f:30:87:21:06:a2:84:ed:62:ad:e4:db:cd:3d:c7:
                    c5:20:c2:46:79:fe:56:38:6b:70:b5:06:f2:25:37:
                    18:06:5d:fa:10:2c:01:36:bf:f7:2f:93:ac:91:5f:
                    a7:66:50:07:07:2f:da:a7:2e:51:75:ce:4d:b7:78:
                    1a:6e:c1:0b:9c:2a:e1:34:97:f7:c4:a7:20:d3:87:
                    83:a0:9b:a1:59:3c:25:b8:f9:5e:a4:03:02:85:fb:
                    89:5e:53:e7:45:5f:ac:82:48:da:1b:c8:6c:fd:3e:
                    38:23:cc:62:b3:27:1f:1f:3d:94:30:74:dd:e2:9e:
                    31:e5:64:82:37:2d:fb:90:35:ea:44:8f:e6:2e:67:
                    5c:42:79:bb:68:ad:b6:90:a3:46:8c:06:5f:3f:f8:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D3:AF:21:C2:8E:0B:15:56:30:7C:2C:5F:EE:9A:EA:84:43:FF:F1
            X509v3 Authority Key Identifier:
                keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:87:e8:ba:4c:ab:c5:2c:47:04:0e:9a:67:c3:a6:32:c1:e3:
         98:cd:c1:e8:84:0d:cb:9f:cd:a4:b0:36:2b:5e:c0:c0:c6:e5:
         b1:fa:67:58:41:00:66:72:b8:5c:65:4f:45:12:c1:41:f5:7b:
         59:9c:84:71:a4:20:f3:b6:d0:10:c9:20:aa:57:1a:fc:0a:90:
         fa:aa:d9:79:94:a5:8f:de:a1:2b:25:12:b8:14:f3:1f:e1:f8:
         06:25:2b:f5:f6:18:2d:3c:07:e8:cc:3a:8c:57:d4:92:18:0a:
         0a:9e:29:d1:ee:fb:d7:d3:0b:3f:9c:50:7b:40:36:90:cf:7e:
         81:d1:2a:23:62:79:48:be:35:a2:bd:cf:f5:4a:dc:c4:a1:21:
         80:0a:06:0f:cb:8f:7e:d9:f1:7a:7b:6a:01:eb:0e:d7:a3:00:
         ba:64:9d:d3:df:32:4a:0c:68:11:be:e8:e1:30:fe:91:03:2e:
         8a:1e:88:3c:55:e7:48:15:76:50:5d:43:42:ce:74:05:1e:04:
         46:bd:8b:7f:8a:2d:fb:49:58:9a:18:29:8c:08:6d:20:f2:b4:
         4b:8e:fc:b2:ca:2b:d6:60:b8:79:72:4a:d5:85:a8:6f:f4:cb:
         95:ed:b6:1b:10:af:22:1b:33:e5:27:86:ec:e7:5c:76:12:0b:
         36:76:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:04:26 2024 by rpki-client on console-ams.rpki-client.org