Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
File:                     KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft (raw, json)
Hash identifier:          TtTMNYTTO/aoESbpzzNNcRiv5tD+Pkd829wfzZSdp64=
Subject key identifier:   EC:CF:51:05:EC:8E:C3:6F:9B:AC:F7:99:F5:E5:BA:9A:5C:3A:5C:BE
Authority key identifier: 2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
Certificate issuer:       /CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Certificate serial:       0193549CCB57F3CC6278C12AA97D2D3AF10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
Manifest number:          09F0
Signing time:             Fri 22 Nov 2024 16:03:01 +0000
Manifest this update:     Fri 22 Nov 2024 16:03:01 +0000
Manifest next update:     Sat 23 Nov 2024 16:03:01 +0000
Files and hashes:         1: E9tGRrqzn3kxerqSfSL4FQkDUjk.roa (hash: KNu1yQBlDmpi2WhU+zm77dVktytu83kBZblpRr5EPQQ=)
                          2: KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl (hash: LpGFfDKLAYNLIaRtLXcjaxtCj02k3rftohertN4UIrc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:cb:57:f3:cc:62:78:c1:2a:a9:7d:2d:3a:f1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
        Validity
            Not Before: Nov 22 16:03:01 2024 GMT
            Not After : Nov 23 16:03:01 2024 GMT
        Subject: CN=eccf5105ec8ec36f9bacf799f5e5ba9a5c3a5cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:bc:86:7b:d1:7e:6b:3b:8c:f8:80:40:8c:
                    52:15:86:ab:81:2e:74:3c:4e:c3:d3:fe:8a:b5:62:
                    c8:0c:01:23:d2:90:27:7f:65:8e:ea:38:d0:33:e0:
                    81:49:4b:13:4c:c4:3e:6d:09:27:d2:bf:4c:d9:e0:
                    af:96:1c:73:ec:0f:9b:3f:1d:51:0b:9c:21:62:90:
                    a7:0b:0b:53:a4:ae:23:56:20:0e:50:3d:38:a4:4f:
                    b0:2f:f1:2e:61:93:a7:02:f4:66:13:c0:31:01:b4:
                    27:ac:8d:f7:06:fb:be:2a:b6:fc:f1:47:69:2e:c6:
                    be:42:1e:57:8c:4d:86:d1:a1:86:d8:d0:04:02:22:
                    78:2d:76:14:69:1b:03:68:ea:61:9c:c2:4b:a9:04:
                    b5:4c:55:d0:dc:56:70:71:0b:61:7c:00:cc:1b:1c:
                    ec:59:36:b1:09:9c:ec:09:b8:b7:1e:02:1d:d4:ee:
                    40:73:77:35:c4:94:23:42:0d:ac:e2:c5:46:af:e1:
                    6e:ea:3e:cc:30:64:a6:05:b4:1b:37:33:1a:58:d4:
                    07:84:88:60:ce:0d:b9:61:1e:cf:3a:bb:97:01:5d:
                    72:55:ee:1c:8a:b4:71:86:30:76:bf:73:35:55:86:
                    a2:1a:a0:61:d9:eb:7b:a2:c8:74:bb:cc:ac:3f:3b:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:51:05:EC:8E:C3:6F:9B:AC:F7:99:F5:E5:BA:9A:5C:3A:5C:BE
            X509v3 Authority Key Identifier:
                keyid:2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:56:aa:b4:17:3a:53:eb:f6:29:80:c4:32:de:18:26:6c:76:
         4d:b7:88:75:64:14:a9:8c:8e:b3:03:ea:33:5f:ae:c0:68:bc:
         04:a0:bc:be:2e:b7:c9:39:a7:ac:e9:ed:48:d7:bc:87:36:b0:
         34:7e:69:1f:f9:15:ab:26:74:a4:b0:66:1b:6c:56:60:fd:dc:
         5c:f6:fb:8b:00:2a:00:15:de:09:d0:20:15:62:0b:c2:a0:76:
         5d:ca:b8:ae:9c:29:7d:83:f0:1e:9e:21:c1:39:06:44:37:1c:
         8c:6b:86:fd:aa:4c:ab:d4:ab:6b:77:80:af:26:bc:e4:50:85:
         81:85:4f:c6:27:46:8f:69:55:5b:b2:60:53:e0:ca:36:50:b2:
         94:fc:ef:d2:49:7a:26:5d:1b:48:28:b0:18:4f:f1:86:b7:ef:
         da:50:ee:b1:31:ef:04:f5:9d:8e:b9:6c:b0:56:15:9b:35:24:
         a0:8e:e8:fa:01:7b:b2:0f:c7:9c:54:f4:8e:55:87:00:9b:25:
         10:e9:02:9b:f4:80:90:ff:5b:47:0c:ff:76:33:2e:0d:7e:2a:
         ea:ae:e2:6b:d2:9a:c7:de:8e:59:74:f6:1c:cf:4f:08:0d:76:
         17:96:5e:32:bf:7a:72:31:63:cb:f9:2a:3e:5d:2b:12:30:14:
         78:ae:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:55 2024 by rpki-client on console-fra.rpki-client.org