Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          tmY7emZjH6conE5SvZdvbsL3wMw/gtMkh97Im9fWSjc=
Subject key identifier:   24:34:52:A1:D5:C9:BF:D7:68:AA:B4:52:BC:42:90:A0:3B:18:13:99
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       01901CA166A6A8B9319B7B1EB6B1320FCC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          014D
Signing time:             Sat 15 Jun 2024 16:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:57 +0000
Files and hashes:         1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: IfNk3gN/zeix96zHD6Tx2iG7U1OGSVnBOliFqls7MmQ=)
                          2: NNKajPIF7Scq8J_nMw8GF2r7Aqk.roa (hash: OGADpk8mU4NwJlQEXX1U5nodPECQr7fwPujf31ccqfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:66:a6:a8:b9:31:9b:7b:1e:b6:b1:32:0f:cc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Jun 15 16:00:57 2024 GMT
            Not After : Jun 16 16:00:57 2024 GMT
        Subject: CN=243452a1d5c9bfd768aab452bc4290a03b181399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:c8:b8:31:a1:b4:71:a4:20:f4:01:89:aa:
                    4f:ac:c8:04:e7:4d:31:d3:eb:eb:83:f4:1c:42:f7:
                    a1:06:17:dd:27:84:c5:b7:ac:16:38:a9:24:48:03:
                    8d:59:58:53:34:df:39:ca:a2:98:fe:e3:40:1b:47:
                    55:a2:1b:9e:bb:29:79:06:c0:77:0c:ca:f7:c6:0f:
                    2a:ad:03:5f:3d:0a:15:64:6b:db:3d:c2:e6:d0:bf:
                    8f:7b:46:06:49:02:81:e9:b5:ea:68:bc:4a:6e:08:
                    ec:7f:78:69:18:98:da:3a:81:bc:86:a8:dd:7d:8c:
                    ad:f4:f9:0d:19:8c:6e:56:b5:50:97:94:ca:2e:87:
                    77:17:fc:62:39:ec:cc:6c:cc:29:b4:94:13:bb:0f:
                    87:3e:5a:c5:06:dc:d5:4c:84:63:b7:e4:1a:a4:93:
                    58:22:ff:73:bb:91:67:f5:a7:97:41:c6:67:69:6c:
                    b4:0e:bb:30:f2:76:a2:e1:a0:dc:31:26:84:98:2d:
                    f0:87:6d:4b:39:3f:cb:38:b6:06:5c:37:e8:15:aa:
                    78:04:75:40:d5:1d:94:bf:02:bb:56:ee:00:20:aa:
                    d6:6d:2e:b9:4a:7e:bf:d2:db:cc:b1:5e:97:fe:d3:
                    4a:be:ca:d5:8c:6b:92:52:f7:e6:7d:38:d5:28:7a:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:34:52:A1:D5:C9:BF:D7:68:AA:B4:52:BC:42:90:A0:3B:18:13:99
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:ff:fc:4b:50:b9:b4:38:8b:f3:d6:c1:d6:59:ff:18:be:
         30:c0:10:d8:f4:4b:56:98:0b:5d:e2:ac:f3:d4:2a:6d:de:4c:
         c9:6e:f6:bd:4a:4f:67:bb:c4:1f:4a:cf:43:ac:d7:95:2b:25:
         88:a7:9d:66:7c:ff:5b:06:ce:09:1a:72:94:f8:73:37:72:86:
         dd:f1:6f:f3:13:e8:c0:a0:40:99:85:11:e2:53:43:b8:47:81:
         c1:8f:b5:b0:32:cd:57:7b:e2:b1:d4:76:cc:a6:1c:85:ed:90:
         d0:74:0b:78:ca:ed:13:4a:6d:a6:25:45:62:57:b2:68:31:12:
         fb:7b:3f:80:00:60:64:3a:e8:f4:48:8f:02:c0:26:76:be:61:
         f1:1e:90:a8:ed:72:e1:c8:3d:c0:37:58:a0:18:40:3a:7c:1a:
         0c:fe:1d:74:3f:b7:69:2d:36:31:ac:fa:b9:7f:6b:6c:57:c4:
         ca:e6:1a:26:1f:35:f7:37:6d:57:3d:af:69:09:f3:95:8e:20:
         27:02:de:e7:16:af:16:37:27:3e:60:ec:f4:e9:ba:8d:d9:8c:
         0a:8f:6a:6e:f6:10:eb:70:9e:9e:e6:d1:74:83:d7:2b:3b:a0:
         bd:d9:07:bb:e2:77:e1:10:f9:a7:a4:9a:22:fb:11:70:e9:36:
         26:cc:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:59:23 2024 by rpki-client on console-fra.rpki-client.org