Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File:                     kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier:          atD4oRNSDsn3u2lzcHNcvj+RVyPjqq4DfWqZoc+AvVA=
Subject key identifier:   D5:C9:B1:D3:D8:15:71:F9:97:E3:7E:3A:13:84:84:9A:21:A4:31:D2
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer:       /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial:       018F874A5EAA2CFAAADE331570AD5F32DEE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number:          1050
Signing time:             Fri 17 May 2024 16:02:29 +0000
Manifest this update:     Fri 17 May 2024 16:02:29 +0000
Manifest next update:     Sat 18 May 2024 16:02:29 +0000
Files and hashes:         1: doWTq4Gg8yVRYQmZ48ybIihCAuU.roa (hash: T5l0aIYeM9acFPTOcVDdj6wQGr3BtAByag1EcTh00Go=)
                          2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: Zy+lGU1Y7KCRlTEQfDN+jRNtqDEagpJjZXD+6Cco/7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5e:aa:2c:fa:aa:de:33:15:70:ad:5f:32:de:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
        Validity
            Not Before: May 17 16:02:29 2024 GMT
            Not After : May 18 16:02:29 2024 GMT
        Subject: CN=d5c9b1d3d81571f997e37e3a1384849a21a431d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:f4:27:8f:fc:c7:bb:71:fc:4f:44:a7:a2:
                    aa:c4:07:fd:ef:60:0a:df:5e:4a:05:ed:ef:f3:be:
                    0c:a5:da:c5:67:2d:9f:88:8d:c3:10:bb:58:a0:19:
                    6b:72:ec:48:f1:df:e0:33:30:4e:00:13:e6:be:6e:
                    23:e8:85:17:fd:73:5f:a7:55:9e:d1:c9:e9:b2:cc:
                    38:57:ca:af:4a:f5:83:08:96:1a:ed:76:51:47:b4:
                    1c:cc:4d:30:36:30:31:10:b6:b2:40:dd:48:05:57:
                    50:a0:1a:a7:db:13:09:ca:eb:1b:e5:c6:e8:aa:58:
                    ca:6c:06:b9:47:71:3e:a5:45:37:ad:8f:8f:71:0c:
                    a6:65:3c:1d:d9:49:5a:42:96:7b:f7:eb:59:8b:06:
                    94:38:58:a6:9e:54:f0:c8:5e:52:f8:39:41:c2:ec:
                    74:55:3f:4d:b4:64:48:f6:29:62:54:4c:53:b1:92:
                    99:6e:f1:11:b0:f8:af:5c:59:d0:88:f6:1a:9b:76:
                    2d:a6:da:ec:89:01:cd:9e:db:8a:85:3b:24:75:08:
                    9c:d6:5f:22:12:0c:11:dd:e5:fc:b9:95:1c:44:4a:
                    37:d2:e8:9d:51:21:cf:a3:74:6b:f9:ab:cb:f2:b3:
                    79:e7:9a:0a:4f:d2:94:6d:5c:56:ad:ff:5d:81:39:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C9:B1:D3:D8:15:71:F9:97:E3:7E:3A:13:84:84:9A:21:A4:31:D2
            X509v3 Authority Key Identifier:
                keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2b:50:71:2d:bb:88:b9:8e:82:06:0b:9b:e0:be:9d:41:a7:
         d6:56:5f:3a:05:25:8e:47:53:5b:a1:ad:04:23:e0:7d:c9:db:
         ec:20:5d:cf:33:d2:54:d4:f7:ac:09:32:2a:f0:2a:27:e8:fd:
         bc:a3:7c:fa:2d:c8:88:5e:85:46:ef:1a:13:b0:52:13:3a:9f:
         3b:82:35:9e:e0:bf:28:18:e6:0d:ad:18:a0:51:8d:14:7a:84:
         9e:9a:55:0d:6f:ed:9a:40:db:96:f7:04:a4:d2:59:66:11:a0:
         74:b4:ee:3a:f6:41:6e:12:bc:ca:bc:e0:aa:ac:ab:97:9a:60:
         7a:98:75:52:3d:69:a4:8e:69:31:b3:41:ec:51:41:e0:e6:2f:
         4e:85:64:86:bc:a7:f5:41:7c:25:76:2b:b5:b2:2c:2f:12:61:
         f2:45:96:d8:cb:6d:6e:71:c1:cd:21:4e:35:9d:b7:22:90:dc:
         d0:1a:18:a0:b3:0a:d7:84:77:aa:49:9e:c4:8f:cf:a3:2b:ff:
         81:a6:70:5e:c0:35:ef:25:bf:fd:a8:44:c9:2a:fd:dd:64:3b:
         0a:cb:ee:e5:20:b4:5d:c7:eb:e7:32:33:53:cd:73:9f:0c:40:
         fc:b8:83:31:f8:99:9f:82:19:40:e2:98:8a:2f:14:79:0f:0e:
         c0:9d:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:54 2024 by rpki-client on console-ams.rpki-client.org