Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File:                     kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier:          NSBgxfh3dqrvu4JHwURYJBBPL8FzsDIuXXoZstaiY6Y=
Subject key identifier:   A5:61:8C:E1:01:41:CA:52:2A:2E:7F:20:CA:7A:1D:19:07:6A:E9:84
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer:       /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial:       0190719A4376D63CE080F6A67C1237428769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number:          0BF0
Signing time:             Tue 02 Jul 2024 04:00:53 +0000
Manifest this update:     Tue 02 Jul 2024 04:00:53 +0000
Manifest next update:     Wed 03 Jul 2024 04:00:53 +0000
Files and hashes:         1: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: 3lDB6V4dyIccdm02ljI+WsMhXerd40de5BqEbOHxYfk=)
                          2: yWc41PdzlD_sJNcrjVnceFv_b9c.roa (hash: OvWz5Fw3RAttGcLbboVStuThyV/zzHmxLNlgziN8Q/8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:71:9a:43:76:d6:3c:e0:80:f6:a6:7c:12:37:42:87:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
        Validity
            Not Before: Jul  2 04:00:53 2024 GMT
            Not After : Jul  3 04:00:53 2024 GMT
        Subject: CN=a5618ce10141ca522a2e7f20ca7a1d19076ae984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:43:2c:36:18:89:a1:12:90:78:49:cd:9a:
                    c4:71:bd:00:be:d7:de:ec:67:50:e4:0e:7b:60:c3:
                    26:4b:a7:52:dc:d5:04:16:aa:1d:5d:d1:3a:da:3c:
                    fe:21:e4:16:79:14:7c:ea:13:14:42:22:de:28:86:
                    f2:78:d0:ff:aa:58:ec:55:f9:3c:4f:57:57:9a:4c:
                    44:6d:51:33:12:c8:9b:87:af:e7:e3:ed:8a:37:c5:
                    2a:51:ba:82:e1:4c:74:39:f2:3a:20:62:e2:39:1f:
                    97:2c:85:e3:ab:0d:d5:c8:11:d5:37:72:d1:dc:c4:
                    83:99:b3:ce:4f:e8:4c:ac:03:9a:31:1b:5b:37:21:
                    9c:80:51:ef:60:c6:34:0e:fe:51:bb:62:de:e5:9e:
                    c7:5e:da:99:8c:b4:2d:cf:0d:60:1a:1b:d4:1d:97:
                    85:35:ba:eb:46:68:94:96:7e:06:e5:fb:51:67:c4:
                    47:5d:62:ca:28:b2:3c:54:7b:25:0f:06:bc:3d:68:
                    de:df:2e:da:d5:2f:7c:05:b0:17:63:75:3e:63:e1:
                    1d:2a:d8:48:d2:46:42:52:5f:32:ef:af:01:38:85:
                    f4:e7:8b:25:c9:81:e5:ff:21:53:8c:25:22:ed:a6:
                    41:67:52:8d:96:4e:ff:ab:65:21:2b:c9:60:77:9e:
                    e9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:61:8C:E1:01:41:CA:52:2A:2E:7F:20:CA:7A:1D:19:07:6A:E9:84
            X509v3 Authority Key Identifier:
                keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:fb:e5:00:87:50:29:e8:4d:f6:a5:e7:b9:0f:c9:bf:8e:2a:
         76:eb:98:b0:ec:cd:dc:5a:c5:08:9a:6b:b1:b1:60:7b:86:ea:
         9d:cb:06:e5:de:00:b0:db:b6:49:6f:79:dc:0a:64:e8:c1:01:
         af:63:c6:d1:eb:86:33:c5:c8:e3:13:2d:93:36:f2:9f:93:21:
         7f:f4:60:66:14:93:54:72:85:a6:80:cd:eb:8b:ed:df:45:69:
         c2:93:fa:fe:c1:e5:e2:f1:60:30:c2:dd:a1:bf:6c:1d:d6:41:
         db:45:8b:b8:32:d5:6d:8f:d3:56:d9:32:5c:cb:3a:e4:83:d1:
         a1:a9:d6:5f:24:a2:b3:07:b7:11:5a:c5:03:e8:62:3f:32:37:
         9c:d4:d2:60:3b:70:7b:fc:90:b8:91:0b:9a:33:4e:69:80:e0:
         65:2c:63:ab:ad:c8:cd:5f:42:a9:8d:56:96:5e:97:e6:83:83:
         38:5b:94:a0:bd:49:26:94:09:a9:b1:9e:c6:d9:74:ff:85:c5:
         f3:1e:f0:34:f7:f4:0b:b7:2c:aa:80:06:27:ea:dd:2b:85:97:
         47:28:44:9c:c0:c1:bd:3a:74:ef:38:1d:cf:aa:0e:55:6f:f0:
         03:51:81:16:04:30:33:9e:64:f2:93:23:37:da:eb:8b:16:dc:
         d5:f3:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 05:50:46 2024 by rpki-client on console-fra.rpki-client.org