Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File:                     kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier:          hx5yx98ESKQ3tIrLiOXNQhCVtgZY/PIy89FnbUNOktQ=
Subject key identifier:   D5:48:49:F2:2F:A7:EE:23:C6:7C:48:C7:61:6A:14:CC:40:38:26:13
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer:       /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial:       018F874AAC2D6A6444A61A36DC10017F97E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number:          069A
Signing time:             Fri 17 May 2024 16:02:48 +0000
Manifest this update:     Fri 17 May 2024 16:02:48 +0000
Manifest next update:     Sat 18 May 2024 16:02:48 +0000
Files and hashes:         1: folF8wM0AHSTQdYKm-pM3uv6JZM.roa (hash: LkxTFtqM1rHDb0lrY15ifqxnVx7ArLz9RW4J/1CNByM=)
                          2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: j/q5RcrdgKYCGn48mKCmDGOk29DBKahfK0gyJW/YvEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ac:2d:6a:64:44:a6:1a:36:dc:10:01:7f:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
        Validity
            Not Before: May 17 16:02:48 2024 GMT
            Not After : May 18 16:02:48 2024 GMT
        Subject: CN=d54849f22fa7ee23c67c48c7616a14cc40382613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:01:03:38:4a:c4:38:78:a6:3d:8a:14:fc:
                    00:1b:c1:c8:e0:21:f2:eb:66:e9:86:60:86:79:05:
                    a1:ba:63:74:47:f8:2c:a4:ab:20:0f:f1:da:24:e1:
                    bc:e6:b8:b7:de:87:ac:b2:34:13:70:70:b8:2b:68:
                    c0:31:b0:fa:41:42:58:23:59:74:6e:ff:18:6d:2b:
                    52:11:44:93:d6:9b:f1:50:2c:ae:0d:f4:02:b7:01:
                    ea:a7:11:0b:68:37:d3:af:95:e4:fe:e1:82:02:b3:
                    07:58:63:cf:3e:d5:de:89:5d:6c:89:d0:bd:6e:78:
                    3d:e7:c0:9e:e5:c6:22:19:ce:84:77:86:ab:0b:fa:
                    00:f1:c1:51:18:87:6a:77:af:4f:62:75:a5:49:8e:
                    e7:c5:88:e4:65:24:2e:be:86:3e:36:c6:08:3e:d5:
                    a6:b1:16:3e:c2:f5:1b:6d:0c:8c:75:4a:6e:ee:fa:
                    e5:9f:fb:d1:5c:33:ef:cd:b1:c2:43:c9:b1:db:a8:
                    b0:e2:24:4a:a7:1f:4a:8e:ff:10:71:0f:97:e8:c1:
                    c9:28:f6:90:f5:f4:c6:94:4a:9b:d3:a9:e0:e0:e4:
                    86:f5:c6:71:d1:fb:c8:36:ad:ca:85:f1:12:0e:f7:
                    59:ea:b9:56:f6:22:54:7b:01:e3:21:05:af:1a:77:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:48:49:F2:2F:A7:EE:23:C6:7C:48:C7:61:6A:14:CC:40:38:26:13
            X509v3 Authority Key Identifier:
                keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:f4:1a:4f:10:54:72:4a:81:21:f5:04:2e:00:70:be:cc:
         20:71:9d:b9:2d:e8:a5:b3:39:e6:20:29:e5:0b:44:26:18:b2:
         a7:06:17:40:1f:23:cd:ef:8b:04:0f:37:8c:0d:19:c1:ce:43:
         f2:f9:9f:d7:eb:ab:c4:b7:78:c7:67:67:f4:97:a4:1c:5b:01:
         52:45:01:dd:d9:e5:73:9b:ab:67:03:62:d8:38:ac:04:e2:e9:
         e8:ca:ca:1c:eb:4e:2b:02:2e:c1:23:33:eb:3b:bf:16:19:96:
         7f:8c:ed:99:cc:f6:44:9b:b8:87:7f:55:3e:48:30:57:52:dd:
         2c:1a:b4:7e:64:3f:94:75:35:34:e8:a6:42:5c:da:4d:90:2e:
         e6:cb:0e:96:95:35:34:83:1f:92:a1:ae:44:21:77:5e:60:81:
         d9:59:57:ab:17:33:40:6f:58:cf:69:9e:21:3b:8a:f8:a4:65:
         65:58:77:05:7b:d4:0b:34:57:c0:29:e0:7d:20:e3:36:d7:35:
         98:01:4e:56:ca:85:42:67:3c:e6:de:f1:66:f0:7a:dc:60:09:
         eb:fd:10:10:e0:4a:fb:80:5e:17:59:52:49:a4:e4:9f:ac:be:
         75:3c:74:90:b4:17:9e:5c:30:bb:41:be:31:f0:dc:1d:0b:33:
         97:8f:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:39 2024 by rpki-client on console-fra.rpki-client.org