Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft
File:                     K33FrWYAWqG23GCT-xHzWBp5UzU.mft (raw, json)
Hash identifier:          7iyBWM2VOPpMufq3jKYQi52sJvmRO0QxlQVT93RyG44=
Subject key identifier:   E0:0F:1A:45:02:54:CE:7E:47:B7:C3:22:A7:D2:FB:56:BA:36:D8:95
Authority key identifier: 2B:7D:C5:AD:66:00:5A:A1:B6:DC:60:93:FB:11:F3:58:1A:79:53:35
Certificate issuer:       /CN=2b7dc5ad66005aa1b6dc6093fb11f3581a795335
Certificate serial:       018F87ED692749CF6553B081AA970E176DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K33FrWYAWqG23GCT-xHzWBp5UzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft
Manifest number:          04C1
Signing time:             Fri 17 May 2024 19:00:34 +0000
Manifest this update:     Fri 17 May 2024 19:00:34 +0000
Manifest next update:     Sat 18 May 2024 19:00:34 +0000
Files and hashes:         1: K33FrWYAWqG23GCT-xHzWBp5UzU.crl (hash: G3AJgFANzC4wF1N4YKwkKkwaXqtZiygv0jv1yFfL644=)
                          2: oYPVT5oE5zpwcFnZ8YJoOYCnchI.roa (hash: rJ7YB/V+G66gXnvsmVLc7S7e9nKyJeNdBiMdH4tB7UA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K33FrWYAWqG23GCT-xHzWBp5UzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:69:27:49:cf:65:53:b0:81:aa:97:0e:17:6d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7dc5ad66005aa1b6dc6093fb11f3581a795335
        Validity
            Not Before: May 17 19:00:34 2024 GMT
            Not After : May 18 19:00:34 2024 GMT
        Subject: CN=e00f1a450254ce7e47b7c322a7d2fb56ba36d895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:a4:f0:d5:cc:0c:c1:17:91:7c:a3:96:cb:
                    d7:30:1d:a6:34:10:18:12:01:c8:7b:3c:3a:3d:1e:
                    38:f9:aa:37:2e:53:08:7f:47:f8:6f:9f:5a:f9:a6:
                    0b:50:c0:db:64:5c:c2:1a:e1:fc:89:6d:c9:ea:38:
                    87:66:f0:7e:a6:c7:67:51:1b:f4:b4:09:a3:a4:3f:
                    e6:4a:af:82:c4:02:50:5b:84:78:e3:fc:fc:a9:29:
                    0e:05:f4:d0:24:45:dd:19:8a:71:4e:75:e4:2c:89:
                    a4:10:2a:d2:1c:ad:d2:dd:d8:86:97:ca:cb:fd:67:
                    9f:bb:4a:57:e8:46:de:47:11:83:ee:86:b5:d0:47:
                    d9:68:68:af:9a:d6:94:da:09:88:61:6d:61:41:0e:
                    35:f5:4d:f9:2f:f0:3a:fd:2d:79:3c:14:90:da:54:
                    a1:0f:80:57:90:33:e5:22:9e:c9:c6:e2:4e:4d:55:
                    92:60:cd:4a:b2:07:ef:7b:e5:e5:45:4b:18:c7:d6:
                    6d:87:50:48:c7:7f:44:f3:65:fb:d0:6f:17:0e:92:
                    11:30:17:f7:14:f1:63:04:15:fd:c6:ce:fe:19:a6:
                    ea:ca:87:0e:fc:c8:a5:53:18:ff:1e:f7:2a:dc:ee:
                    d0:39:d0:28:21:67:a6:53:1a:b8:55:ba:b0:73:c0:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:1A:45:02:54:CE:7E:47:B7:C3:22:A7:D2:FB:56:BA:36:D8:95
            X509v3 Authority Key Identifier:
                keyid:2B:7D:C5:AD:66:00:5A:A1:B6:DC:60:93:FB:11:F3:58:1A:79:53:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K33FrWYAWqG23GCT-xHzWBp5UzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:8f:e0:74:e3:13:04:80:de:4d:a3:d4:74:34:34:27:6b:
         b4:c8:59:73:a5:10:73:66:5f:d6:7c:89:4e:01:0a:56:5f:1a:
         91:99:c9:70:48:d2:16:30:30:dc:7c:45:81:31:41:5f:18:64:
         e0:63:80:23:93:1d:56:02:30:d7:5d:92:ed:60:fa:96:2f:07:
         74:ba:5f:5a:b3:3c:15:db:79:96:ee:2a:e8:c6:3b:04:21:b9:
         26:7b:54:7a:b9:d3:7e:6b:15:71:18:eb:68:8a:9a:24:38:b3:
         13:c4:b1:a2:64:cc:24:c6:5e:11:9d:fb:f2:db:ac:24:f8:69:
         6f:30:35:5e:f8:ef:e8:b8:02:94:cd:10:2b:f0:6d:26:86:0d:
         b6:88:be:78:6a:86:3d:b1:5a:dc:28:0c:e3:ad:b4:7c:2a:99:
         9f:ec:e4:40:8f:41:63:56:05:87:1b:a5:7a:5c:0e:af:32:bc:
         cc:75:63:7e:bb:d6:ed:32:ad:c7:0e:68:21:1c:88:1a:47:4d:
         b6:c8:6b:3b:98:ea:50:28:aa:e8:41:ad:0b:4a:a0:90:7a:45:
         04:cd:b8:f1:f5:cb:6a:66:a0:eb:0e:01:1d:1e:60:1c:b7:54:
         47:8e:6f:c1:bb:d3:f7:95:be:eb:4c:1d:fa:ec:a3:13:86:e0:
         63:cf:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:15 2024 by rpki-client on console-fra.rpki-client.org