Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File:                     KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier:          pYMYMeWInhFj+mW6T9D7uWqPoezsR23PveEe3LSGZvQ=
Subject key identifier:   B2:B7:7B:8F:F5:B9:32:3E:32:3E:77:1B:D4:5D:98:EF:5E:14:13:6E
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer:       /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial:       018F5CCD3BA6785B80A4F75F8BBE9A44067A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number:          1164
Signing time:             Thu 09 May 2024 10:01:45 +0000
Manifest this update:     Thu 09 May 2024 10:01:45 +0000
Manifest next update:     Fri 10 May 2024 10:01:45 +0000
Files and hashes:         1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: V2diWAnycKk3AKpBlyFfj53A+lEcJ6JTnvu2wbmAz6k=)
                          2: vr2BnLoxM5s-_wYNoUTiWFUXaC4.roa (hash: RzbsUcexIXqhXU4KGamGV+v9VGjcLH4U3vJja1Duexk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 10:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5c:cd:3b:a6:78:5b:80:a4:f7:5f:8b:be:9a:44:06:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298354861973728ce2be505f7270a4364d94e691
        Validity
            Not Before: May  9 10:01:45 2024 GMT
            Not After : May 10 10:01:45 2024 GMT
        Subject: CN=b2b77b8ff5b9323e323e771bd45d98ef5e14136e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:9d:5b:56:58:ca:cf:bf:ad:72:c4:92:b2:
                    40:d1:dd:64:c3:80:0f:05:15:e3:ea:80:9a:fd:a6:
                    84:23:38:94:2a:10:91:b8:56:f4:58:6e:b0:06:df:
                    b0:f5:59:3f:7c:6c:4c:a8:08:5a:e9:80:e4:59:fc:
                    99:43:db:74:fe:b6:6b:a6:07:86:4f:77:87:95:fa:
                    56:8c:d4:74:2e:7b:74:5e:2e:53:dd:ae:3d:23:ef:
                    ab:08:3d:61:6f:f3:d8:fd:00:cc:15:b2:aa:1f:44:
                    e1:0d:cc:5a:cb:29:87:10:19:13:e1:d5:b4:9b:3c:
                    8e:35:68:e3:3c:1f:eb:62:d1:f7:d9:44:d9:7f:9d:
                    04:f5:8a:10:c2:61:f9:fb:51:25:08:6c:5c:63:87:
                    80:f6:01:a6:ff:f5:db:f3:b5:e2:5a:39:57:8a:40:
                    69:d4:6a:ea:27:cc:94:80:ef:86:1e:9f:3f:d0:0a:
                    97:37:2f:f6:fe:64:69:20:9c:fd:36:8a:40:b0:47:
                    df:37:08:93:ca:d9:01:0b:0e:ae:5b:e8:7d:40:f5:
                    dc:46:c7:6e:93:1a:9d:c3:f9:4b:5a:1f:fb:9a:74:
                    8b:4a:19:4c:a8:d2:20:4f:fe:d4:4b:5f:43:16:c9:
                    20:ca:5d:f7:23:d6:65:7d:24:7e:c1:db:91:df:ed:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B7:7B:8F:F5:B9:32:3E:32:3E:77:1B:D4:5D:98:EF:5E:14:13:6E
            X509v3 Authority Key Identifier:
                keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:19:a6:2a:57:74:88:be:a7:c4:3e:90:2c:57:14:5d:4b:70:
         4c:68:39:87:e8:cb:2f:db:ad:d8:dc:d6:33:5c:95:9e:95:cc:
         91:43:48:e5:85:8f:3c:39:88:2e:b7:a9:07:52:b9:79:a8:c5:
         47:64:f3:9e:99:9f:3c:77:73:c5:73:1e:44:dc:8c:73:22:05:
         c0:4c:f9:c0:2b:e8:0f:49:4a:1a:f0:3c:dc:5a:0f:30:b5:39:
         fe:82:ab:d1:42:f7:cf:a2:1d:4d:ce:1b:30:37:dc:76:52:d1:
         05:41:ff:c2:8f:6c:ab:51:82:15:ab:e4:56:1a:ee:89:55:02:
         23:ca:c4:87:ce:8a:ff:7f:98:88:ee:61:12:be:08:e0:bd:13:
         58:13:b6:66:eb:96:60:28:b0:45:d5:44:a2:03:5b:db:99:ef:
         3a:ee:31:e7:d5:a7:78:a6:a3:c7:c2:16:a1:aa:45:7e:2d:8c:
         a3:b9:0a:08:01:f6:41:72:51:f4:f8:70:15:89:f7:22:97:16:
         6d:f7:41:81:13:48:cf:0d:04:05:36:7f:a0:b1:dc:81:b3:79:
         dc:72:c7:6a:07:73:e0:63:0d:0c:ac:17:46:f5:11:0f:97:a0:
         0a:23:39:4b:a4:f2:d2:9f:9f:a0:70:73:d6:1a:7c:c5:bb:44:
         78:cd:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:28:30 2024 by rpki-client on console-fra.rpki-client.org