Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.mft
File:                     kwSWway6d4n9wOBs8hPuwB7QYJg.mft (raw, json)
Hash identifier:          KhE7PA4FLRceS04JmMeBfmOJUuJB9E4p/ZMgU/GThLw=
Subject key identifier:   5F:20:0A:38:97:37:06:2C:7B:C5:E1:C1:00:5D:90:4C:66:FF:A2:E1
Authority key identifier: 93:04:96:C1:AC:BA:77:89:FD:C0:E0:6C:F2:13:EE:C0:1E:D0:60:98
Certificate issuer:       /CN=930496c1acba7789fdc0e06cf213eec01ed06098
Certificate serial:       01901BFDF591A7AF345313AFD5427F80209C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwSWway6d4n9wOBs8hPuwB7QYJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.mft
Manifest number:          07FD
Signing time:             Sat 15 Jun 2024 13:02:26 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:26 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:26 +0000
Files and hashes:         1: LpTdp3zL-imhvr0a6-bW-0VuFr4.roa (hash: YesSMVOGxt2TfDyUesCYLbCZL98GythDW+w361va3dY=)
                          2: kwSWway6d4n9wOBs8hPuwB7QYJg.crl (hash: OQssMbIBN5qBzLLD//2fpLUZPDxZ7ba9epCtFap6EOU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwSWway6d4n9wOBs8hPuwB7QYJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:f5:91:a7:af:34:53:13:af:d5:42:7f:80:20:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930496c1acba7789fdc0e06cf213eec01ed06098
        Validity
            Not Before: Jun 15 13:02:26 2024 GMT
            Not After : Jun 16 13:02:26 2024 GMT
        Subject: CN=5f200a389737062c7bc5e1c1005d904c66ffa2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:11:33:72:8b:3a:d0:24:56:99:c8:d1:9a:
                    7d:55:3b:b3:58:fa:33:f4:a1:bd:da:b6:33:70:b0:
                    3d:b9:2c:02:4e:83:29:9d:36:74:f1:7c:66:15:48:
                    64:f7:fc:7a:1c:e7:4a:ad:d3:42:be:de:e0:77:03:
                    a3:ba:56:68:9a:78:5a:9f:c6:3b:3c:07:33:26:52:
                    a1:85:47:66:79:e6:9c:2b:8d:c5:99:60:89:f0:61:
                    82:a5:2b:00:5b:21:ad:37:34:e0:18:4c:fd:fa:ec:
                    ce:10:7e:b1:d7:7a:af:9b:e7:ca:10:f1:cf:68:31:
                    50:79:fc:5a:51:7a:b7:b5:3c:0e:1a:97:d5:00:85:
                    80:07:f0:8c:b2:76:ca:ef:ef:ba:b4:99:8f:04:a5:
                    80:be:eb:40:b1:86:15:5f:9b:21:f3:ad:04:71:9b:
                    69:dc:ea:cf:bb:7f:72:3b:9c:10:bb:86:d8:56:01:
                    24:75:67:c1:e0:f9:f0:6c:8b:39:68:c2:dc:88:c2:
                    e4:fd:ec:8c:4d:68:af:a1:3d:31:7d:63:0a:43:cd:
                    f9:8b:72:6f:5b:34:f1:0a:f2:ed:c8:ff:5f:fa:43:
                    77:80:b2:dc:5a:d8:7d:58:c2:04:a2:8c:0e:4a:c0:
                    b4:c8:ff:a2:40:9a:0d:01:92:f4:2f:cb:22:8e:8a:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:20:0A:38:97:37:06:2C:7B:C5:E1:C1:00:5D:90:4C:66:FF:A2:E1
            X509v3 Authority Key Identifier:
                keyid:93:04:96:C1:AC:BA:77:89:FD:C0:E0:6C:F2:13:EE:C0:1E:D0:60:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwSWway6d4n9wOBs8hPuwB7QYJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:7d:42:e7:f0:64:db:b2:3e:08:aa:97:61:51:0a:79:a7:
         c0:ed:d4:4a:36:9c:f9:84:2e:93:8f:7c:b7:ec:3a:0d:8c:1e:
         6a:7f:0d:6a:3a:02:f2:00:13:9e:10:79:a7:a9:b5:3f:ea:1d:
         54:af:8a:c7:c2:c4:e3:6f:ce:97:30:21:ec:05:d8:81:c4:40:
         4d:10:38:c6:20:77:35:c7:95:e1:6c:1f:bf:e1:f8:29:e8:0e:
         bb:4e:d9:5c:6a:41:4a:ae:99:f4:d1:d7:f2:5d:7d:46:bf:68:
         a8:fc:af:43:ab:a5:3a:82:db:a5:37:1f:37:67:0d:d6:9b:54:
         4d:7e:d0:c4:5e:91:1c:83:0f:0e:04:0e:0b:08:12:3a:14:cf:
         17:f8:f2:2a:9c:75:13:bf:df:02:dc:c2:01:b0:e6:f9:8a:f0:
         1f:ad:ef:eb:1a:75:cd:61:f5:2f:95:ff:94:91:ef:51:c8:a4:
         b2:ba:01:4a:e5:e4:b4:2a:b7:69:6a:2e:e6:28:a6:bd:a6:df:
         1c:51:63:d7:5e:f4:de:e3:12:48:79:eb:2f:e1:31:61:8a:af:
         eb:89:90:cf:d1:6b:b7:3c:07:43:22:14:08:3b:1d:21:1d:56:
         9b:f0:4a:1f:0c:79:08:7f:ca:5d:ac:69:e9:84:86:07:9b:05:
         45:35:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:41:41 2024 by rpki-client on console-fra.rpki-client.org