Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
File:                     K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json)
Hash identifier:          Ico6f3DGnSSMBaBa7+94aUgfixZTdquS+KZrzSZg6k8=
Subject key identifier:   2D:19:CE:98:BF:D9:67:3D:7D:44:8C:5B:86:71:82:E7:92:43:63:AB
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Certificate issuer:       /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial:       018F885B3B3005C58B669EFCDEF510E0DB1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
Manifest number:          0123
Signing time:             Fri 17 May 2024 21:00:31 +0000
Manifest this update:     Fri 17 May 2024 21:00:31 +0000
Manifest next update:     Sat 18 May 2024 21:00:31 +0000
Files and hashes:         1: 9KclLJnbVlQu-JdDWqK3qYZUVPY.roa (hash: rsjyA0DtgWMdjnfMK9vOhRiEpL/v5bDGD+7OTuRPXT0=)
                          2: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: qhlWCW698pOkwVWOPtX/A5qH1bkIwBXpCtHu2Cwi8V8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:3b:30:05:c5:8b:66:9e:fc:de:f5:10:e0:db:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
        Validity
            Not Before: May 17 21:00:31 2024 GMT
            Not After : May 18 21:00:31 2024 GMT
        Subject: CN=2d19ce98bfd9673d7d448c5b867182e7924363ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:d2:f1:38:81:37:20:99:a0:97:b6:29:e7:
                    9e:90:88:51:b8:82:84:9d:27:40:20:26:9f:49:0c:
                    f1:af:7b:87:67:b0:a6:c6:ac:b3:f1:9f:48:5c:20:
                    54:46:ff:be:5e:17:bb:e1:01:8e:b6:02:b1:bf:5f:
                    9d:7e:b1:57:80:47:a3:58:c2:d0:a6:cb:df:e8:f1:
                    e2:33:32:7d:3c:84:ea:a3:0e:9f:39:72:d5:77:7f:
                    65:82:91:07:6d:ed:0e:e1:a8:09:82:8b:12:fd:c9:
                    e9:91:37:f7:a5:ff:67:e6:d4:39:a9:1d:f6:e2:49:
                    e1:14:16:a0:3c:dd:37:e1:5d:39:13:f4:ae:62:68:
                    bf:8c:a9:5a:49:6a:6b:93:38:22:4c:fc:a9:73:86:
                    69:d6:7e:e7:53:03:56:b8:45:05:7e:58:88:04:d6:
                    62:c7:33:fa:30:46:de:b6:d2:55:82:ed:a0:ca:a0:
                    da:5b:91:90:30:87:ca:7c:fa:7c:b8:93:19:80:d5:
                    60:c6:e6:0a:cf:0f:98:25:13:c2:3b:0c:2b:04:32:
                    9a:57:cd:43:90:2a:0c:b8:25:fa:d2:fb:6c:ac:8f:
                    63:47:a9:3d:50:da:13:a7:c0:ce:ee:48:86:5f:59:
                    5b:a6:26:8d:c6:29:b8:8b:57:0d:78:b9:6b:47:b7:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:19:CE:98:BF:D9:67:3D:7D:44:8C:5B:86:71:82:E7:92:43:63:AB
            X509v3 Authority Key Identifier:
                keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:7a:1f:9c:e4:db:16:3b:b6:bf:9c:af:45:c1:a2:f0:97:
         59:23:fd:be:f9:53:3f:ed:8c:ad:16:bb:ec:87:57:7b:38:a3:
         bd:86:3e:55:39:e6:d8:5a:e5:ea:cd:91:f5:89:ec:ea:b3:01:
         8e:79:72:5b:78:a9:3f:32:64:44:99:38:e8:88:a6:7e:61:eb:
         2c:1a:1f:2d:dd:55:0f:61:5b:3b:f2:65:c2:67:38:4d:e6:de:
         e2:5c:b4:d5:58:16:e9:ef:e1:e7:9c:ca:cf:92:64:87:c6:28:
         c6:73:60:cc:69:3c:d4:1d:21:86:e5:d4:50:64:32:0b:63:65:
         65:51:f5:6f:f6:76:67:ee:77:38:80:0c:e9:55:e0:f2:b7:9e:
         73:84:56:98:22:42:b4:da:62:87:06:33:0d:5b:fc:f9:cb:46:
         76:f4:d5:93:01:af:81:50:62:35:a4:f1:c5:76:3b:f5:d9:df:
         d5:b0:8c:75:2b:85:01:54:9c:fb:34:3f:8e:98:41:25:1e:7e:
         3e:f1:9d:ab:60:52:e6:85:84:33:07:92:d1:37:b3:6c:b9:73:
         f9:27:f4:5e:e6:b0:9a:78:ce:9b:70:bf:f0:97:42:ab:ed:95:
         a4:84:a9:6e:5b:31:0b:84:f6:0c:dd:b3:5b:86:59:4e:6e:18:
         24:4d:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:22 2024 by rpki-client on console-ams.rpki-client.org