Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
File:                     kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json)
Hash identifier:          4OaMZvzzdlLohiZrEEk+rI7RsVSXCfga6bsZYMpYkYA=
Subject key identifier:   4F:8C:8B:53:B4:C3:EC:9B:F5:5E:5D:1B:E2:2D:73:49:73:7D:9B:57
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Certificate issuer:       /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial:       01901E58A35BFB3255AC1EE4E1E756D5C0B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 00:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:43 +0000
Files and hashes:         1: AjGTryNj-8j4IogwY7E1CLy0Kiw.roa (hash: H3ya6HTHuYjghJlnX1xPZ+T5CkgJlfETNZ7lo/kFAa8=)
                          2: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: 0zkp9Bq8UG4AduADkm/xP/AF27pJMDLbgwChgXoZOO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:a3:5b:fb:32:55:ac:1e:e4:e1:e7:56:d5:c0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
        Validity
            Not Before: Jun 16 00:00:43 2024 GMT
            Not After : Jun 17 00:00:43 2024 GMT
        Subject: CN=4f8c8b53b4c3ec9bf55e5d1be22d7349737d9b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:6d:3f:05:48:10:b4:e2:14:f0:99:26:4d:
                    22:9d:4d:97:44:72:36:93:98:4e:00:a2:05:b8:b0:
                    57:70:e3:97:77:12:52:d6:80:0d:be:7a:79:d0:fe:
                    9f:08:7f:ef:60:c8:d8:45:e2:b8:67:87:94:9d:e1:
                    2a:d7:9b:65:9a:8e:8e:67:6c:7d:8b:19:12:40:78:
                    0d:de:94:4e:d6:e9:c2:d3:40:0e:59:ac:b1:8b:e2:
                    5e:f9:8f:af:0e:8f:89:15:2e:7d:e0:e2:83:d3:33:
                    9a:6b:87:cb:84:9e:77:8e:86:25:bf:78:11:0a:8c:
                    b6:59:e5:37:2b:fd:3f:6b:0d:70:71:89:04:2e:6b:
                    ae:1e:c4:9f:ee:00:03:0c:38:55:71:89:02:7f:2f:
                    6c:c0:4a:7c:71:85:f0:b5:52:27:41:a4:ed:7b:0a:
                    20:3e:35:0e:47:f7:73:e7:87:91:4d:c3:45:f5:26:
                    b2:70:89:ba:40:a9:96:42:b7:8f:4c:e0:a1:d5:5c:
                    b7:6d:28:26:ca:bc:15:92:5b:e0:21:fe:8b:b9:af:
                    4e:a5:b1:04:b5:96:55:74:4f:9a:2c:c6:38:61:a6:
                    c2:81:f0:79:67:7f:72:1d:34:29:1c:60:88:fb:6b:
                    f8:3f:ae:f9:67:e0:65:dc:0e:95:46:b5:c3:28:fb:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:8B:53:B4:C3:EC:9B:F5:5E:5D:1B:E2:2D:73:49:73:7D:9B:57
            X509v3 Authority Key Identifier:
                keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f2:cf:a4:49:be:4a:cd:91:bb:1f:65:88:18:86:2c:13:6f:
         8d:43:0b:c8:74:db:92:ca:b6:b9:2a:1d:79:3f:2f:10:26:82:
         d1:0d:af:17:3e:44:a8:93:72:f5:d7:76:79:46:2c:d7:c8:7a:
         80:94:14:04:79:cf:40:7a:4d:1b:21:7c:9b:1d:54:f2:16:34:
         a9:35:28:71:b0:49:83:30:e2:5f:f0:3d:3f:40:c7:24:23:90:
         f0:35:8f:aa:df:93:a3:1b:35:02:b9:3c:fb:f0:fc:09:b7:44:
         c3:fd:c7:25:da:84:d1:58:6b:99:89:db:7a:7c:70:f6:e8:a7:
         07:f3:3c:f0:26:16:ac:a9:23:6a:83:4a:7b:8c:1b:57:75:f9:
         32:43:03:3d:88:34:6f:06:16:28:35:d7:24:64:78:30:de:4f:
         dd:8b:07:a7:0e:1d:b3:94:34:63:f8:ce:3c:a0:86:40:8b:0a:
         99:70:30:5c:65:1c:39:3c:eb:4e:87:66:4c:7d:84:13:4f:04:
         64:8a:41:2c:5b:40:b7:a8:eb:dc:4c:56:11:a9:af:cc:5b:ba:
         8e:52:3f:a9:de:e3:bc:1b:88:19:f8:d2:06:51:62:4e:d1:12:
         94:2f:1e:30:14:0b:ad:02:73:a9:75:2d:5d:77:05:04:61:0e:
         53:53:da:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWKNb+zJVrB7k4edW1cC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjBhYzI5YjEwOGYzNzIzMTZmYmY0ZWE5M2UxNDg3MzFh
NGM0ZTkwHhcNMjQwNjE2MDAwMDQzWhcNMjQwNjE3MDAwMDQzWjAzMTEwLwYDVQQD
Eyg0ZjhjOGI1M2I0YzNlYzliZjU1ZTVkMWJlMjJkNzM0OTczN2Q5YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoRtPwVIELTiFPCZJk0inU2XRHI2
k5hOAKIFuLBXcOOXdxJS1oANvnp50P6fCH/vYMjYReK4Z4eUneEq15tlmo6OZ2x9
ixkSQHgN3pRO1unC00AOWayxi+Je+Y+vDo+JFS594OKD0zOaa4fLhJ53joYlv3gR
Coy2WeU3K/0/aw1wcYkELmuuHsSf7gADDDhVcYkCfy9swEp8cYXwtVInQaTtewog
PjUOR/dz54eRTcNF9SaycIm6QKmWQrePTOCh1Vy3bSgmyrwVklvgIf6Lua9OpbEE
tZZVdE+aLMY4YabCgfB5Z39yHTQpHGCI+2v4P675Z+Bl3A6VRrXDKPtjAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+Mi1O0w+yb9V5dG+Itc0lzfZtXMB8GA1UdIwQY
MBaAFJCwrCmxCPNyMW+/Tqk+FIcxpMTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yZjYzMmMtYmQ1NC00MDM2LTkwYjYt
ZDI1M2NkM2U3YTM0LzEva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yZjYzMmMtYmQ1NC00MDM2LTkwYjYtZDI1M2NkM2U3YTM0
LzEva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvLPpEm+
Ss2Rux9liBiGLBNvjUMLyHTbksq2uSodeT8vECaC0Q2vFz5EqJNy9dd2eUYs18h6
gJQUBHnPQHpNGyF8mx1U8hY0qTUocbBJgzDiX/A9P0DHJCOQ8DWPqt+Toxs1Ark8
+/D8CbdEw/3HJdqE0VhrmYnbenxw9uinB/M88CYWrKkjaoNKe4wbV3X5MkMDPYg0
bwYWKDXXJGR4MN5P3YsHpw4ds5Q0Y/jOPKCGQIsKmXAwXGUcOTzrTodmTH2EE08E
ZIpBLFtAt6jr3ExWEamvzFu6jlI/qd7jvBuIGfjSBlFiTtESlC8eMBQLrQJzqXUt
XXcFBGEOU1PaBg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:26 2024 by rpki-client on console-fra.rpki-client.org