Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File:                     KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier:          XdGGRopjm76yafm4fQpSGiwJ6DxFzcouVsG6P5K+eGo=
Subject key identifier:   1E:5C:E3:40:56:DE:03:61:9D:1C:28:C1:10:36:ED:D8:80:63:4C:AD
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer:       /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial:       01901DEC01014217603F6D264A6AE7BEBC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number:          029C
Signing time:             Sat 15 Jun 2024 22:02:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:04 +0000
Files and hashes:         1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: 1qLBJ5CFRo3okkec2rs3CtjtmgEudnC0IIXnklQEE04=)
                          2: y__nUVcHLbIFOKEDH1O2SMvYy2E.roa (hash: B+5tA5HEK2x9Gqju86J5DnlPE4z1Kj0uZdWbEpdg60Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:01:01:42:17:60:3f:6d:26:4a:6a:e7:be:bc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
        Validity
            Not Before: Jun 15 22:02:04 2024 GMT
            Not After : Jun 16 22:02:04 2024 GMT
        Subject: CN=1e5ce34056de03619d1c28c11036edd880634cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:a5:bd:f6:10:6a:a6:30:6e:87:cc:96:5c:
                    7f:5a:a2:82:e2:dc:ad:4a:e9:45:fb:29:cd:25:93:
                    b5:a5:99:65:5c:65:9c:d4:ae:e8:ac:ee:a1:a4:3f:
                    70:21:3f:c7:5b:f2:b9:31:2b:3a:6f:3a:9f:c3:dd:
                    6f:2e:7b:4d:f5:4a:3b:7e:ed:57:1a:73:07:d3:ba:
                    24:02:12:81:3a:6b:30:1c:14:6a:67:20:8d:a1:c6:
                    e1:97:23:29:72:ff:4d:cd:17:87:1b:ae:ba:05:8a:
                    ab:ed:ad:68:a5:76:5c:62:e6:2f:1c:85:1d:6e:4a:
                    65:fc:b1:89:ad:f4:07:61:05:df:c1:90:9c:a4:98:
                    9d:ec:d4:c4:e3:ce:73:85:b0:b5:c4:68:24:6a:cf:
                    b7:b8:00:25:0c:32:01:8d:50:df:ad:56:d3:a5:ef:
                    bc:ba:36:ce:51:81:42:02:91:78:24:a2:b0:5c:3f:
                    37:f1:38:cd:3a:77:02:f9:91:3f:e8:09:c7:23:31:
                    dc:c3:d7:93:c2:1a:92:70:88:bc:1e:8e:10:98:52:
                    59:17:99:e3:93:94:91:85:7f:58:41:fa:c1:ab:37:
                    27:ee:a5:34:50:87:a0:5d:76:8a:86:5c:d2:e6:24:
                    34:5c:9f:9c:d0:4b:82:84:04:b5:53:2c:3f:b4:ec:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5C:E3:40:56:DE:03:61:9D:1C:28:C1:10:36:ED:D8:80:63:4C:AD
            X509v3 Authority Key Identifier:
                keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:30:a1:e9:a8:9d:2e:b3:95:f8:ec:3e:7e:16:ed:f0:4a:aa:
         de:91:6f:01:bf:67:52:7b:92:15:cb:6e:50:0a:e8:84:84:bc:
         92:e7:cf:b2:23:21:78:93:d4:bb:8f:fc:45:12:d2:57:aa:7f:
         e5:ee:be:7e:e9:b2:c2:c4:6c:d7:bf:11:3f:e3:24:e1:5f:f2:
         9b:d9:ec:26:c5:c8:c5:21:86:a9:b5:de:65:d2:04:16:98:4e:
         ef:35:39:74:7a:0f:00:56:c4:a3:9d:76:14:25:3d:aa:09:c4:
         40:37:b9:dc:77:46:30:a6:80:10:27:1f:50:d3:48:d5:53:7b:
         90:d4:ae:b6:fe:dd:2e:3d:f4:b6:a1:46:69:ce:d1:39:a0:63:
         02:ef:27:b2:77:f9:b7:4c:ee:5b:ee:42:4f:98:3f:63:2f:ff:
         e1:bc:5a:0f:62:23:ca:70:94:28:5b:46:20:54:e0:52:4b:74:
         d5:5f:4d:1f:39:38:04:b3:b6:4f:df:71:38:8a:1f:38:42:76:
         7a:ba:19:16:f1:2b:c1:b2:89:e8:d4:50:11:34:3d:c5:16:4e:
         f2:c0:08:90:ca:a9:7b:0e:48:c2:8a:a6:27:88:bb:27:bf:5d:
         f1:d5:2b:25:1d:bf:95:60:db:6c:6e:b7:76:39:b0:e7:dd:3e:
         5d:75:ed:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7AEBQhdgP20mSmrnvrwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjQwNjE1MjIwMjA0WhcNMjQwNjE2MjIwMjA0WjAzMTEwLwYDVQQD
EygxZTVjZTM0MDU2ZGUwMzYxOWQxYzI4YzExMDM2ZWRkODgwNjM0Y2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX+lvfYQaqYwbofMllx/WqKC4tyt
SulF+ynNJZO1pZllXGWc1K7orO6hpD9wIT/HW/K5MSs6bzqfw91vLntN9Uo7fu1X
GnMH07okAhKBOmswHBRqZyCNocbhlyMpcv9NzReHG666BYqr7a1opXZcYuYvHIUd
bkpl/LGJrfQHYQXfwZCcpJid7NTE485zhbC1xGgkas+3uAAlDDIBjVDfrVbTpe+8
ujbOUYFCApF4JKKwXD838TjNOncC+ZE/6AnHIzHcw9eTwhqScIi8Ho4QmFJZF5nj
k5SRhX9YQfrBqzcn7qU0UIegXXaKhlzS5iQ0XJ+c0EuChAS1Uyw/tOz6bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5c40BW3gNhnRwowRA27diAY0ytMB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzCh6aid
LrOV+Ow+fhbt8Eqq3pFvAb9nUnuSFctuUArohIS8kufPsiMheJPUu4/8RRLSV6p/
5e6+fumywsRs178RP+Mk4V/ym9nsJsXIxSGGqbXeZdIEFphO7zU5dHoPAFbEo512
FCU9qgnEQDe53HdGMKaAECcfUNNI1VN7kNSutv7dLj30tqFGac7ROaBjAu8nsnf5
t0zuW+5CT5g/Yy//4bxaD2IjynCUKFtGIFTgUkt01V9NHzk4BLO2T99xOIofOEJ2
eroZFvErwbKJ6NRQETQ9xRZO8sAIkMqpew5IwoqmJ4i7J79d8dUrJR2/lWDbbG63
djmw590+XXXtjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:49:42 2024 by rpki-client on console-ams.rpki-client.org