Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File:                     KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier:          p0HT/F6x+p4oINnBHftb8NiuptMy8kWTNkzZA2W0JzQ=
Subject key identifier:   6B:7A:6E:D2:BB:27:BD:4B:36:22:27:7A:DC:03:83:98:6C:12:4C:F6
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer:       /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial:       01901CA15E9019B5CC5C66864666663CECF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number:          04FD
Signing time:             Sat 15 Jun 2024 16:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:55 +0000
Files and hashes:         1: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: DtNFt7Sd51rKaB/jIsndo7F+ickW+zoZzf4rrtS/zzM=)
                          2: QZ-_aU3a6vpmf99Pa_FukQrqMsU.roa (hash: WBkqdPylOGOlo1tfXaETFSSNLG2F34gUGhwQYHR23cY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:5e:90:19:b5:cc:5c:66:86:46:66:66:3c:ec:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
        Validity
            Not Before: Jun 15 16:00:55 2024 GMT
            Not After : Jun 16 16:00:55 2024 GMT
        Subject: CN=6b7a6ed2bb27bd4b3622277adc0383986c124cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:d1:fd:08:35:35:a0:24:ea:15:71:96:fa:
                    47:c6:9d:ff:f8:3f:6e:42:86:21:c4:a3:24:c7:fd:
                    74:45:d9:9d:e8:76:c0:e5:75:0e:0e:80:ab:7a:db:
                    92:1e:30:6e:88:54:c3:6c:84:08:38:74:42:47:1c:
                    08:d8:a3:5d:df:83:f5:fb:a3:21:24:fb:ae:52:df:
                    5a:7a:79:97:1a:7e:02:ff:7c:69:e4:ca:94:91:66:
                    e6:8a:1f:8c:9f:71:6e:7f:bc:19:9b:ae:d2:a2:68:
                    f5:1b:fa:01:c0:3d:c4:14:30:62:6d:7e:17:f6:50:
                    44:57:2b:d6:38:a8:75:c5:b4:33:39:63:f1:82:b4:
                    05:94:12:20:95:cd:1f:44:92:f6:4c:49:ec:98:17:
                    97:16:9a:50:c5:d6:bd:41:6d:a3:26:e5:54:97:eb:
                    fa:1b:1c:15:3e:33:09:21:a8:08:d5:08:70:a8:4a:
                    cf:a6:0d:e3:56:7a:a7:67:8a:ad:b8:b9:44:60:d0:
                    69:1b:97:cc:79:e6:a2:b2:f3:85:5a:f1:8d:67:ee:
                    d8:d1:f3:03:e4:0c:79:26:fb:41:85:18:b1:9b:9d:
                    b3:74:79:25:87:76:39:8b:3c:76:04:97:dd:a7:35:
                    2c:d2:3d:c0:41:f6:f9:ca:ff:a2:6e:33:79:8b:07:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:6E:D2:BB:27:BD:4B:36:22:27:7A:DC:03:83:98:6C:12:4C:F6
            X509v3 Authority Key Identifier:
                keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:32:39:27:97:ec:3a:2d:64:dc:d3:44:f7:94:c2:da:4a:7f:
         2f:8a:d9:16:d3:d1:cf:dc:0d:89:89:6f:3f:12:e8:88:32:de:
         1a:2c:4b:c4:d0:18:00:ea:1c:df:88:94:fd:30:ed:92:ec:a0:
         2d:f2:88:d2:60:f9:bb:ac:8f:45:e1:84:9a:d4:a2:a1:d2:44:
         96:71:63:ed:7c:64:c5:54:38:41:db:c7:86:6a:c7:24:41:b0:
         cd:88:e6:aa:f9:f5:3c:29:d5:f9:a7:6c:7d:2d:23:6e:67:86:
         75:53:dd:82:ce:4e:f0:16:f1:41:5f:b4:b3:24:8e:fd:6b:6e:
         0e:38:ef:46:bc:db:6f:4a:14:eb:94:d2:1c:95:41:b7:c1:4c:
         29:a8:6c:79:5f:fb:fb:2e:ea:7e:be:f3:3f:0b:73:23:c7:c6:
         34:f8:6f:11:8c:c8:f4:cb:8a:20:e5:e2:49:35:bc:21:47:9e:
         85:ef:b0:ca:4e:99:a9:d4:59:d7:6a:0c:a9:f3:0a:b0:72:3a:
         4f:7c:f9:75:58:31:a2:9d:dc:a7:ac:94:45:0e:da:12:34:25:
         84:00:75:38:50:f2:98:b0:05:dc:a0:a8:df:13:26:37:0b:76:
         ad:17:7a:34:6d:1b:a8:92:f6:0e:7c:5b:c4:57:ba:6f:c0:81:
         29:8e:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:55:14 2024 by rpki-client on console-ams.rpki-client.org