Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.mft
File:                     kjYDyYGGiRawsXAdzzcgyqJIT9w.mft (raw, json)
Hash identifier:          ZjB56+nL+IalH/Hks2q6mojJh0EbUPRj3cboUNQwtyE=
Subject key identifier:   C1:87:6C:30:3E:B1:60:FB:C6:E8:16:5B:A4:BE:A4:07:03:C6:82:A0
Authority key identifier: 92:36:03:C9:81:86:89:16:B0:B1:70:1D:CF:37:20:CA:A2:48:4F:DC
Certificate issuer:       /CN=923603c981868916b0b1701dcf3720caa2484fdc
Certificate serial:       018F8748FDCB92B6B71DA927995FAFCC26D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjYDyYGGiRawsXAdzzcgyqJIT9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.mft
Manifest number:          0C97
Signing time:             Fri 17 May 2024 16:00:58 +0000
Manifest this update:     Fri 17 May 2024 16:00:58 +0000
Manifest next update:     Sat 18 May 2024 16:00:58 +0000
Files and hashes:         1: NxXrYchp6pjfPUDx-yJI_3rbeJc.roa (hash: MwBWpt0C9HQC2VrG5exxf/ekcO46JPfWi80DYG6ltPo=)
                          2: kjYDyYGGiRawsXAdzzcgyqJIT9w.crl (hash: WpWJ6VB8tKZ3XYScknxzt/PzgiNktiMdhNGdIK5WAcE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjYDyYGGiRawsXAdzzcgyqJIT9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fd:cb:92:b6:b7:1d:a9:27:99:5f:af:cc:26:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923603c981868916b0b1701dcf3720caa2484fdc
        Validity
            Not Before: May 17 16:00:58 2024 GMT
            Not After : May 18 16:00:58 2024 GMT
        Subject: CN=c1876c303eb160fbc6e8165ba4bea40703c682a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:50:71:f8:29:30:fc:02:1b:12:81:be:20:
                    21:70:48:70:ed:2a:61:97:be:c4:14:e2:13:fe:3a:
                    30:39:9d:c4:e1:2f:fe:cb:01:fe:d3:8e:9e:0d:8e:
                    60:62:6e:89:39:1b:cd:88:ee:17:57:24:dc:5b:6c:
                    79:ae:88:19:bf:d0:0b:78:9e:89:f9:b9:5b:21:b3:
                    64:2f:01:f2:95:86:fb:3e:c0:ca:ee:82:85:19:77:
                    11:68:29:db:93:9b:d9:2b:85:fb:fa:27:ea:28:13:
                    d2:83:eb:6a:f9:a8:ca:ea:1f:45:7f:3d:9d:18:f4:
                    1a:3a:1a:93:63:22:41:4e:56:33:e8:c4:8b:9c:56:
                    c5:57:0d:04:b2:ee:74:58:a7:16:82:96:fb:70:79:
                    33:d2:e4:24:f4:ef:09:50:44:ab:31:4b:c0:f7:2b:
                    52:b8:ab:83:88:06:51:17:14:e6:ff:6c:fd:5d:4e:
                    2f:8f:5a:52:19:12:a8:e7:4f:05:4c:e5:7f:02:f7:
                    a0:0e:18:7a:fc:62:43:bb:e1:8e:5a:6a:03:4f:6e:
                    3f:a0:28:94:9d:09:50:e8:cb:67:8b:18:f9:95:95:
                    b1:68:6c:e5:98:df:f7:8f:26:5f:4a:82:bd:23:2d:
                    9c:7b:d8:92:54:9b:93:a8:31:6f:dc:4e:29:68:78:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:87:6C:30:3E:B1:60:FB:C6:E8:16:5B:A4:BE:A4:07:03:C6:82:A0
            X509v3 Authority Key Identifier:
                keyid:92:36:03:C9:81:86:89:16:B0:B1:70:1D:CF:37:20:CA:A2:48:4F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjYDyYGGiRawsXAdzzcgyqJIT9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5d:a5:7a:de:ad:b1:bb:f0:41:71:15:83:f4:2e:dd:e1:2a:
         41:7f:a0:3b:0d:dc:48:4e:eb:ab:20:9c:77:20:63:42:48:af:
         5e:46:ea:e9:ff:c8:28:04:a3:19:ca:79:66:cd:de:ef:44:75:
         57:4c:23:6c:df:69:b9:e5:80:5c:6d:2f:ad:41:80:01:a3:b2:
         e0:af:ef:52:4a:35:b5:a2:b2:96:f8:a1:11:ab:69:59:3d:68:
         9b:b9:9c:d9:37:65:e3:4a:57:a6:d6:3e:e7:d9:69:6f:4a:fb:
         e2:f3:1c:9c:0e:e0:c9:53:b1:e0:60:63:ac:a5:9f:3a:67:50:
         1f:56:df:c2:ae:13:c9:0b:d7:c7:70:36:fe:fd:02:15:46:56:
         04:18:fc:d1:e5:ac:50:68:12:10:0e:01:1a:c6:13:03:d7:76:
         7e:9b:9f:53:b8:25:5e:2a:c6:ac:10:40:75:ad:4a:cc:da:8e:
         0f:29:8d:ac:11:68:8f:e8:20:22:49:16:7b:49:62:7b:0e:10:
         1e:d3:ee:01:11:0a:47:93:19:e9:f5:17:f0:07:7a:f7:30:e6:
         31:d4:2e:d7:da:a3:a2:fa:c9:86:f8:87:9b:3a:28:b6:65:ed:
         64:7b:77:be:a0:d0:25:32:69:40:9c:4b:0c:3a:b3:72:66:04:
         4a:eb:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:11 2024 by rpki-client on console-fra.rpki-client.org