Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
File:                     KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft (raw, json)
Hash identifier:          Y8r5hKMbSX85P6cRh4MGykLFUKg8dft/std3Jg3EXSo=
Subject key identifier:   CF:B5:42:10:9B:B3:73:C2:7A:6C:23:41:91:83:8E:43:B7:04:F1:11
Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
Certificate issuer:       /CN=28c2202a443537fb8fb280567a17485f1230c411
Certificate serial:       018F874B52AB9C6587C9566DDC14104F6B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:03:31 +0000
Manifest this update:     Fri 17 May 2024 16:03:31 +0000
Manifest next update:     Sat 18 May 2024 16:03:31 +0000
Files and hashes:         1: 9S-RmcUjSEJdeX-arq9R1M4Eqs0.roa (hash: bMj7HCcav5zZeIEbfKV8Khn3XvfjKI0s3SRyPkFvpIg=)
                          2: KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl (hash: D7JRmssjMTnJqSBhJ5tw/qd2BbZZQHTgAwqXbsIq2N4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:52:ab:9c:65:87:c9:56:6d:dc:14:10:4f:6b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411
        Validity
            Not Before: May 17 16:03:31 2024 GMT
            Not After : May 18 16:03:31 2024 GMT
        Subject: CN=cfb542109bb373c27a6c234191838e43b704f111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:76:f4:d8:19:f8:9e:94:fa:ad:04:8c:69:
                    61:c0:f2:33:dc:f7:82:06:54:f5:ac:53:3c:6e:84:
                    c8:64:26:44:67:b6:d4:08:7d:23:35:fa:a0:41:62:
                    b5:9d:9a:2b:d9:17:5e:65:2f:b7:fa:2a:ad:2d:af:
                    8c:43:83:17:18:36:6b:dc:1d:18:f6:f6:13:47:bc:
                    48:9a:aa:67:51:49:4f:60:db:e6:a9:fa:12:01:14:
                    6f:03:bd:89:29:c8:32:1e:d0:4f:a1:da:63:34:c4:
                    13:cd:48:c8:3c:c1:a3:d2:72:eb:4f:9a:2a:3e:bd:
                    42:07:05:09:ce:d4:34:d2:6e:ce:47:7f:33:85:30:
                    b5:2f:41:da:6f:78:f0:15:1a:b0:16:a7:6f:30:6c:
                    74:f7:bc:7d:fb:5d:11:f2:6f:28:f8:fb:dd:e0:60:
                    09:26:ce:0b:f4:07:db:7a:f0:0b:59:2d:46:9a:7e:
                    3e:97:9a:c8:a0:12:36:3e:69:80:27:83:ac:13:95:
                    40:48:f8:56:2b:46:87:48:b3:12:05:9b:65:be:48:
                    b4:fd:35:e0:ff:6b:5d:7b:d0:9d:4e:7f:eb:f6:d0:
                    a9:42:d1:27:43:17:01:60:f8:81:eb:38:4e:4e:eb:
                    65:a5:4a:50:70:5f:ae:79:c5:0d:05:47:25:7f:92:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:42:10:9B:B3:73:C2:7A:6C:23:41:91:83:8E:43:B7:04:F1:11
            X509v3 Authority Key Identifier:
                keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:06:60:7e:97:ed:e6:a9:42:01:27:a6:f3:8d:e8:a9:82:
         77:46:e0:ec:9c:3c:93:a7:4a:14:55:d7:b0:d6:01:7d:fd:b7:
         9a:e7:30:5d:67:d5:4b:8b:6e:0f:05:59:23:e0:28:64:bb:c1:
         0c:32:6c:42:ed:64:52:99:7b:80:64:6e:32:71:1d:a3:0a:6f:
         4b:91:f9:af:5e:c6:26:5b:a3:66:75:bd:f6:76:87:1d:0a:ef:
         06:9e:88:11:84:ec:4b:16:b3:7d:2b:03:21:b9:10:25:c1:88:
         fa:b2:22:e7:4f:66:3d:2d:65:ea:d9:7b:f3:f9:45:c1:da:6f:
         c5:b7:28:52:ad:cc:dc:22:dd:08:23:46:c9:a9:4c:d1:88:85:
         5a:7b:73:b1:a8:2a:b9:0f:7e:86:df:1a:cc:64:34:5b:03:69:
         8f:8e:70:4b:4c:0a:2c:88:be:62:a6:e3:5a:b6:2d:0a:f4:59:
         23:62:54:0d:27:23:f8:7f:45:41:66:98:53:f0:5f:2b:72:d2:
         ae:26:8f:c1:46:29:e8:64:c9:c9:cc:81:e9:df:00:a4:55:8a:
         9b:f3:a0:f8:0f:aa:1e:1c:44:43:9a:de:3c:9e:34:d5:ab:a2:
         61:ed:5d:e1:c6:91:e0:d7:31:81:8f:30:11:36:b8:08:92:12:
         af:ed:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:27 2024 by rpki-client on console-fra.rpki-client.org