Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File:                     KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier:          VgZsLrBTwtkJAtkCSMPz/s9JvWPmearvU4vHHM31ww4=
Subject key identifier:   9C:6B:85:18:6A:2F:F4:9A:65:9A:8E:62:11:5F:D0:29:07:F0:15:5F
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer:       /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial:       01901D0F5D59824DCB884483388AE860D139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number:          0971
Signing time:             Sat 15 Jun 2024 18:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:04 +0000
Files and hashes:         1: 6aHdWIUoGcOLVcv1Xbh7YHINXEc.roa (hash: cYxWrU++XN4BSniFwa+wgO2KitRSjG1PeY+brPyTIeg=)
                          2: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: gxuJxLfxnAzPZSHY743UESLECaJTlNOUyVUj0ep1fH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:5d:59:82:4d:cb:88:44:83:38:8a:e8:60:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
        Validity
            Not Before: Jun 15 18:01:04 2024 GMT
            Not After : Jun 16 18:01:04 2024 GMT
        Subject: CN=9c6b85186a2ff49a659a8e62115fd02907f0155f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:cc:f8:bb:dd:e0:58:7e:55:a7:af:9c:6f:
                    9f:86:62:a4:0a:6d:32:b0:dc:65:70:dc:70:84:8d:
                    45:b9:8e:db:67:dc:29:ca:df:2c:b2:48:bf:0b:73:
                    1f:f6:43:3c:9f:eb:ee:02:46:4e:98:19:81:d0:7e:
                    df:0c:37:11:88:ee:26:24:84:69:97:73:73:0b:e9:
                    cc:ee:c4:2c:2d:a5:c9:cc:ba:f9:a1:23:8e:d1:3b:
                    65:06:66:0e:72:39:3f:a7:4e:9a:af:b5:62:82:4f:
                    e5:32:0d:30:8a:e1:7b:4b:9b:d9:00:a9:4e:a4:09:
                    b8:c8:f4:8b:ad:9c:82:af:7a:a5:27:a9:3e:e3:27:
                    39:a0:14:c5:03:b4:9f:67:c8:ed:4d:d6:4c:ee:23:
                    33:89:c6:55:a2:6c:17:6d:7c:7d:c9:79:cb:7d:b7:
                    7d:94:9c:4d:da:74:01:a2:f5:7e:8a:50:86:fa:4b:
                    84:93:db:83:d1:b7:8a:f5:63:a3:b0:48:79:ef:bb:
                    ed:e6:f3:5d:ec:57:7c:ad:d8:61:35:7f:ad:da:6e:
                    ce:cb:70:29:a9:de:1c:a9:fa:fc:a3:a6:c4:1a:7c:
                    33:1b:5c:40:49:ea:eb:66:71:c0:08:ac:7b:71:72:
                    f6:e3:68:29:b7:c9:34:b2:b0:d0:6f:7c:17:eb:fe:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:85:18:6A:2F:F4:9A:65:9A:8E:62:11:5F:D0:29:07:F0:15:5F
            X509v3 Authority Key Identifier:
                keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:f5:38:30:c3:63:a6:db:e5:19:de:f3:2e:28:f7:e2:7d:
         5c:30:7e:2e:53:a2:5f:89:6e:18:29:97:ef:9e:0b:ec:17:19:
         b2:56:be:40:76:b1:b2:de:47:c5:0c:f8:31:40:f4:d0:a4:dc:
         a5:3d:47:e0:d0:7e:79:a7:8c:3e:87:ae:ea:83:2c:8c:dc:0b:
         4f:15:b6:28:d1:bb:88:a3:1c:d1:29:c6:75:d0:03:5a:6f:0d:
         1d:8b:35:20:e2:c7:47:4a:ff:71:47:3d:99:d0:37:ad:36:ea:
         17:34:b6:24:7f:95:9c:29:b4:7f:41:98:dc:91:71:fd:12:61:
         0e:8d:62:20:b4:f3:d3:db:df:69:4d:53:1a:73:68:49:46:19:
         fa:dc:bb:07:f7:a7:f0:94:c4:89:8a:91:93:29:2e:22:39:c3:
         5a:b0:58:71:f4:54:60:7d:89:e4:13:66:25:42:aa:c7:94:0b:
         c2:a4:6f:67:7a:8c:e5:cc:3f:69:64:e3:24:2b:df:5e:32:f0:
         5c:68:a3:13:d2:a3:c5:68:55:a5:40:01:ee:42:7a:74:a4:85:
         3c:f3:a4:52:21:e3:91:69:dc:fc:fa:7c:3b:94:5e:92:7a:2b:
         8f:1e:bd:12:88:bd:fd:88:69:bb:48:77:5a:dc:6b:b0:b4:a0:
         92:43:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:05:07 2024 by rpki-client on console-ams.rpki-client.org