Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File:                     KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier:          zvXZal1hvCQHxSta7Q7G/DbqCqnPwjZetJSvwiYK+sw=
Subject key identifier:   35:3F:B2:E3:2C:8D:23:B1:77:24:56:D1:92:9C:57:55:B5:60:0F:8F
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer:       /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial:       018F8F03C474F8217AD782F811DD5822831E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number:          0351
Signing time:             Sun 19 May 2024 04:02:19 +0000
Manifest this update:     Sun 19 May 2024 04:02:19 +0000
Manifest next update:     Mon 20 May 2024 04:02:19 +0000
Files and hashes:         1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: Z6VhM8r9ltkGdfbwvaFLiO8rnPzW6sejvSXsOaksNgI=)
                          2: ME-qP6b4bzDqlAzjXAKVXMcfnkY.roa (hash: uc/0Lc7pma8z/q9hlUYLmv5+Oa7gm1vZQ7zT9drWhB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:03:c4:74:f8:21:7a:d7:82:f8:11:dd:58:22:83:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
        Validity
            Not Before: May 19 04:02:19 2024 GMT
            Not After : May 20 04:02:19 2024 GMT
        Subject: CN=353fb2e32c8d23b1772456d1929c5755b5600f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:48:c6:b3:f0:52:e3:80:59:36:07:e5:7e:
                    06:8d:23:4b:36:fe:50:95:22:06:02:15:cf:fe:cb:
                    47:a2:b1:fe:92:38:8a:1e:d0:e5:82:7d:46:c4:0b:
                    a1:97:6d:17:5b:39:53:3c:6a:22:dd:98:04:0c:55:
                    5e:70:4a:ab:29:d8:c1:0e:54:2b:5f:04:4a:65:65:
                    35:de:71:e7:38:7c:42:10:96:89:1c:4f:a2:3a:90:
                    d3:d4:8c:bc:c2:47:8b:06:07:7b:29:c5:f2:cb:f8:
                    15:fa:47:d2:e6:0a:7f:ef:cd:85:d8:b3:da:d6:a1:
                    45:87:4c:ba:fd:9c:7b:9e:d4:4c:d4:8e:cf:dc:97:
                    af:08:2a:4f:64:dc:c6:c0:d5:91:bd:aa:ed:e5:74:
                    7b:9c:84:dd:55:31:21:12:50:24:17:84:38:b6:de:
                    f3:83:95:b4:4b:f2:1d:b2:92:d3:40:da:49:14:ed:
                    d9:89:8f:ee:5b:e1:df:d4:5d:69:92:28:30:36:05:
                    c0:af:1d:e9:15:4c:68:c3:aa:7a:8e:c1:38:eb:23:
                    f6:0a:1f:8f:fb:f4:29:90:ae:2b:52:f6:50:84:e8:
                    d0:b7:cf:d8:2b:f1:09:11:18:08:1f:c2:01:37:9f:
                    cd:2e:08:0f:39:8e:25:9e:30:7f:f6:af:75:d7:16:
                    61:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:B2:E3:2C:8D:23:B1:77:24:56:D1:92:9C:57:55:B5:60:0F:8F
            X509v3 Authority Key Identifier:
                keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:82:38:8a:04:70:5c:ad:cd:f5:90:31:b4:7e:43:2c:ea:5a:
         e0:29:6c:18:4b:3a:71:57:da:25:be:b5:e4:9a:91:c9:d7:60:
         f2:39:bf:35:20:20:1d:2d:77:20:8c:55:5a:63:ca:73:fc:c3:
         89:75:fb:44:1a:1d:ca:a1:51:34:48:48:98:9a:b9:0b:0b:fc:
         7e:15:d1:67:28:ab:28:bd:35:f5:f7:65:54:ef:e3:72:83:e5:
         c2:63:49:b7:0e:9a:ef:ca:b3:26:d3:a3:45:50:1d:fe:14:58:
         da:0c:26:6a:b1:99:13:aa:bd:97:33:a7:fc:e7:40:a1:69:ca:
         b6:46:0a:07:21:d0:f4:87:1a:22:bc:67:9c:d4:c9:4e:88:21:
         8e:92:76:93:a8:ca:af:c0:cb:45:76:4c:e5:b1:cc:93:3e:bc:
         fd:53:64:b0:d5:c7:d0:ae:25:60:52:7f:91:6b:6b:66:a1:f5:
         ac:92:e6:83:87:39:75:c3:7e:6b:ec:a3:eb:e5:e1:e8:ac:fd:
         e9:5e:c4:cc:99:0a:10:43:d3:bf:a4:78:63:1b:7a:e3:f7:8d:
         5d:d2:72:f1:c0:fa:e4:5f:a9:5a:eb:1a:41:5c:7e:4c:82:9e:
         22:6e:17:d4:a9:b6:86:35:f8:1e:f4:3f:84:c7:cb:1f:85:5d:
         de:47:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:26:09 2024 by rpki-client on console-ams.rpki-client.org