Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File:                     KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier:          0aMFhHtRTZ02fvWf6VsfVFuzgxf600epA8uteG69rbY=
Subject key identifier:   2E:47:F0:A6:CB:EA:E5:48:40:D0:4E:35:FE:2F:48:9B:B9:F6:EF:62
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer:       /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial:       018F874874998D24A02198C35A34B6A8026F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number:          016A
Signing time:             Fri 17 May 2024 16:00:23 +0000
Manifest this update:     Fri 17 May 2024 16:00:23 +0000
Manifest next update:     Sat 18 May 2024 16:00:23 +0000
Files and hashes:         1: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: UXK5X1sJ313tJ4b60if858LcQgGKVva2A3PeYzIkOzo=)
                          2: W8xtC8Zi7uWOjbUA7seBvN4EGoE.roa (hash: 3+4ROcDbUHhGpqwikFDfJCQFc5oH0cExxE3gqtwTmcs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:74:99:8d:24:a0:21:98:c3:5a:34:b6:a8:02:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
        Validity
            Not Before: May 17 16:00:23 2024 GMT
            Not After : May 18 16:00:23 2024 GMT
        Subject: CN=2e47f0a6cbeae54840d04e35fe2f489bb9f6ef62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:37:5a:40:b6:c4:f7:d5:88:d0:9c:5b:7d:2c:
                    57:00:40:19:88:c3:85:a3:50:16:ea:4b:4d:3e:35:
                    df:d4:0e:6e:37:c3:f6:42:31:26:99:fb:82:6f:28:
                    1a:78:7e:0d:57:9c:bc:d2:d0:45:ae:f1:bf:da:8e:
                    8e:b2:ed:42:03:79:41:a7:9c:a6:db:e5:b2:e7:c4:
                    4c:17:89:90:99:4b:58:8b:c1:0f:b4:9a:eb:e8:91:
                    fe:0d:b6:00:f8:a2:98:7b:d7:54:e8:62:02:83:39:
                    8b:b3:c4:de:61:15:74:11:5d:94:fa:7d:e5:e6:06:
                    df:d5:7d:cc:a6:55:44:90:5d:c4:f1:5b:a9:21:c2:
                    c1:34:5b:c4:7a:43:e2:6d:4c:06:16:e0:f9:e4:30:
                    db:63:56:a4:2f:e8:11:df:47:b5:fe:c3:11:1f:cb:
                    58:6d:f6:88:8d:10:01:5d:b0:87:d1:18:19:34:eb:
                    e0:68:b6:88:09:6f:1f:f4:d0:08:8c:df:23:cb:81:
                    4f:30:55:5d:7d:c4:55:68:27:ed:62:a5:c9:e3:0f:
                    3e:22:22:5a:88:70:2e:74:32:76:f4:3c:7b:77:cd:
                    06:c1:75:db:0a:76:b3:62:bd:de:b3:bb:fe:a4:d4:
                    65:af:f7:3f:36:4c:f9:6e:40:f4:6a:2b:a7:4b:14:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:47:F0:A6:CB:EA:E5:48:40:D0:4E:35:FE:2F:48:9B:B9:F6:EF:62
            X509v3 Authority Key Identifier:
                keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:61:32:d8:dc:25:81:87:34:9d:bb:85:e5:41:b8:f4:e3:
         18:7a:74:23:35:65:fb:7d:71:c7:b6:83:d1:04:a2:fa:4c:83:
         60:9e:84:1c:6a:db:c2:c2:1a:71:15:53:e8:61:52:31:89:85:
         21:5a:93:d2:e6:4f:86:18:8e:78:1f:53:f6:12:72:90:96:3d:
         5b:c0:7f:a2:f1:68:64:98:4c:b2:c1:91:cd:fe:55:24:d7:78:
         35:50:99:5a:01:b1:0c:7e:d1:a3:dd:e5:e6:23:87:48:7d:dd:
         ff:82:f6:01:a5:3b:84:02:e6:11:4e:f9:ee:bf:ac:f1:6a:64:
         bc:86:3e:e6:c5:39:d6:65:c8:95:22:9f:df:53:dd:d4:0c:0d:
         83:50:9b:26:3b:a0:c7:44:dc:e3:0e:2d:3e:e4:e0:1b:34:43:
         dd:d6:27:73:50:14:e2:18:70:36:8f:d3:e4:33:2e:52:2f:d5:
         48:96:e7:ce:75:bf:a6:cd:25:dd:90:b2:e5:7c:e8:64:c2:99:
         bb:0f:23:b0:f6:b2:99:e6:2d:ad:9f:07:4a:1f:40:53:6e:cd:
         68:4d:02:9b:09:b1:34:58:94:48:b7:9f:ff:9d:f6:50:85:23:
         ad:9a:0c:5d:8c:5c:bb:17:28:f6:91:aa:91:a7:04:f1:27:78:
         bf:78:ec:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:26 2024 by rpki-client on console-fra.rpki-client.org