Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File:                     KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier:          8hTF/Fj7SIR+JObktJXxs1eKz8IW8GUExS47/JK2wQU=
Subject key identifier:   AF:07:39:69:EE:91:C1:68:F5:D6:13:B0:CC:AD:A6:A5:48:F2:09:5F
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer:       /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial:       018F9A98A105C4DA49843EF061D0F738CF3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number:          05E4
Signing time:             Tue 21 May 2024 10:00:44 +0000
Manifest this update:     Tue 21 May 2024 10:00:44 +0000
Manifest next update:     Wed 22 May 2024 10:00:44 +0000
Files and hashes:         1: AcWWGcBkvpsGsoKUWSoaaA_Ho84.roa (hash: D+AXWvBo7QDBQPmE6uFQSvoC+msw5rWj5I1/pmx52zo=)
                          2: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: 0hd6qxbpp9kok7VkU37LtLsRAaCkYdHLpiQQgAMGx6o=)
                          3: QZJnuQyac489RFoA9bz22jWa7LE.roa (hash: 56gWm2m7HDC2eg4k9U+VPnDTYX4/gekWV/vqFBmnG94=)
                          4: Um4E5fVDXPSksIgkdnUaTYvxVPw.roa (hash: QAvSlHJxAKMsSGQIKpSBD9FFIF7ceO/AR925Jh1iukM=)
                          5: Y-22STYS5p5pjUJW0U7izf96C1s.roa (hash: sfn8noDiZ1EXcREq74Qrsva7acu1oS1b8SDwv0as7Fk=)
                          6: jas_GORNCuhrvBoF01-R8dQ3QJo.roa (hash: xCu6mc/y/WROPAB6mvvYnKwYJccMAaG1EhNnGZ4cGPE=)
                          7: pjGEMuNoO9gtgQoDBeR-B3itT2M.roa (hash: RYNbAPSco8b7E+6dvpELFZOdDZKou25w13HFONLZkww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:98:a1:05:c4:da:49:84:3e:f0:61:d0:f7:38:cf:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
        Validity
            Not Before: May 21 10:00:44 2024 GMT
            Not After : May 22 10:00:44 2024 GMT
        Subject: CN=af073969ee91c168f5d613b0ccada6a548f2095f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:3b:46:3a:f5:7f:21:53:b2:66:56:b8:a6:
                    c2:82:64:d4:b9:d7:15:2b:13:35:d0:d6:1d:44:73:
                    85:f4:a0:07:00:f9:df:4a:59:75:d8:0b:2d:1c:b9:
                    3c:a4:36:1b:85:c7:39:f3:e8:ca:39:e6:14:49:cb:
                    7a:ab:b2:38:b7:b6:88:1d:e8:e6:9d:18:3a:6c:03:
                    e0:60:1a:f6:b6:ac:f6:54:26:3d:21:af:ef:b3:3d:
                    02:46:bf:c6:97:77:7e:69:b0:69:00:d8:60:65:14:
                    b7:a3:42:54:3c:09:8d:34:96:70:1a:38:bc:28:b4:
                    e1:cc:ab:3e:4e:72:fe:40:4f:81:47:72:cb:63:77:
                    10:b0:a2:d7:cb:7d:86:07:d6:51:be:7b:50:c2:3e:
                    de:27:94:2f:e4:d8:b2:c7:ac:71:32:ca:28:9b:0b:
                    9c:ea:f6:e7:19:1a:fd:d7:d2:0f:ca:b3:b6:c9:5b:
                    71:ae:59:6f:c3:a6:9d:3f:2f:28:02:df:6f:5c:78:
                    08:27:59:95:eb:43:ca:87:b7:77:8f:e4:20:cb:9e:
                    b2:79:74:f4:c3:57:fe:fb:1b:ad:ef:21:0e:6a:f6:
                    f9:c5:95:05:ff:0f:9d:53:11:8e:13:48:39:a2:58:
                    7e:ae:81:c4:50:f1:bd:33:13:89:bb:96:67:8c:26:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:07:39:69:EE:91:C1:68:F5:D6:13:B0:CC:AD:A6:A5:48:F2:09:5F
            X509v3 Authority Key Identifier:
                keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:80:fc:13:dd:9c:ec:d8:7c:2a:82:29:da:f5:c6:9a:71:
         f3:37:a2:ab:8c:9a:08:1e:13:54:80:f3:75:76:8d:df:26:9d:
         4d:29:5e:60:74:5d:d5:87:41:1b:22:bd:34:50:4f:81:1c:c4:
         af:05:e8:30:62:b5:bd:18:0b:e9:92:87:ef:ff:a5:aa:19:3a:
         fd:74:7c:26:66:03:5e:c2:eb:e5:cb:c1:46:ad:ea:ae:95:dd:
         89:f2:81:a7:c6:92:45:b1:4e:ac:39:14:8d:24:41:60:1d:e9:
         00:6d:11:9a:a2:e3:3f:35:3d:83:57:63:5b:8b:f3:26:13:c7:
         4c:4d:4a:26:b1:86:50:d0:e0:4e:e6:7c:76:28:6a:df:cb:46:
         9d:39:a0:e6:be:30:e9:52:01:59:24:b7:47:12:26:20:22:cb:
         a5:29:cf:9f:23:88:54:0d:d3:82:d7:45:65:18:ad:3e:77:91:
         b0:f4:d3:b8:78:bd:a0:ae:48:bd:95:50:8d:19:46:7b:18:bb:
         54:b0:df:93:a9:df:55:67:47:5a:f8:0e:ae:0e:01:b0:dc:b4:
         d7:d9:3a:9c:7b:23:3e:0b:e7:c8:b7:38:45:0a:0b:39:e6:66:
         6e:96:b6:ed:1f:b0:24:8f:6a:db:e0:1f:da:a6:e6:ea:84:a3:
         5b:bb:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:59:42 2024 by rpki-client on console-fra.rpki-client.org