Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File:                     K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier:          ffvEgYb94ZCn5294/Nj6IOxRhbLEGuWOx0Ck5mrH+dQ=
Subject key identifier:   50:8B:9E:D4:2C:95:A5:D7:2F:5A:1D:52:64:76:37:4E:F7:F7:98:59
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer:       /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial:       018F889227B9F7C27D3F413445A16673D586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 22:00:30 +0000
Manifest this update:     Fri 17 May 2024 22:00:30 +0000
Manifest next update:     Sat 18 May 2024 22:00:30 +0000
Files and hashes:         1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: biU5rD0tzdfWW8wo046dHr1pq6SriFFUg+/evYQBu+M=)
                          2: fR3UTSOO44UcMNs2i_e0JPMzjdk.roa (hash: C6YLqXljpmeyZD+5z2fIFe0rv/FslXjOpceZVxffIcI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:27:b9:f7:c2:7d:3f:41:34:45:a1:66:73:d5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
        Validity
            Not Before: May 17 22:00:30 2024 GMT
            Not After : May 18 22:00:30 2024 GMT
        Subject: CN=508b9ed42c95a5d72f5a1d526476374ef7f79859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:97:a2:fe:6e:ca:63:60:bf:85:cd:10:1d:
                    00:aa:bb:ef:e3:f8:d9:6c:c3:d8:bb:1c:2e:12:da:
                    5f:1a:52:d6:25:e7:f1:df:aa:ab:b3:21:1f:24:de:
                    13:65:76:da:b2:bb:0c:d8:04:6e:0f:fa:21:1d:93:
                    59:1e:8c:a6:42:32:f9:2b:62:84:02:9f:80:01:c9:
                    1d:8c:6f:ed:02:ab:b1:41:98:7d:2a:eb:95:4a:66:
                    e1:4c:fc:ed:31:03:b8:e9:fc:13:0d:af:d3:c9:43:
                    bd:17:25:06:95:3c:75:10:d8:bd:8a:2d:2b:97:f7:
                    ea:d4:a4:b2:f0:fd:6e:8d:65:87:20:d7:b5:b8:d7:
                    5e:cb:5e:68:b7:5f:09:a3:3e:20:cf:88:48:12:a4:
                    b3:5c:29:ef:14:83:67:32:ce:a5:bb:e3:af:66:18:
                    6b:11:79:13:80:02:db:62:be:f9:c3:b6:03:c5:a1:
                    68:2c:6c:86:fb:76:30:9b:e4:e6:21:b0:aa:f5:83:
                    f4:e0:cd:a8:63:46:83:be:11:8f:c3:4c:18:68:51:
                    9b:32:96:6d:42:13:85:47:ec:00:07:28:b2:be:30:
                    1a:4d:9b:a7:58:09:2f:24:c6:5d:6f:59:e4:c7:f4:
                    96:2c:d5:d8:a4:37:6a:3e:a8:22:c7:b3:a0:df:61:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8B:9E:D4:2C:95:A5:D7:2F:5A:1D:52:64:76:37:4E:F7:F7:98:59
            X509v3 Authority Key Identifier:
                keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0d:4f:8d:95:4e:12:4a:ff:25:3b:1e:4e:a4:23:cb:a8:37:
         93:5b:76:3e:e6:ce:6b:0b:e8:b3:a8:33:da:8e:59:5b:9b:ae:
         0b:93:1c:d2:f6:7c:4c:bc:41:17:7b:12:36:1f:4b:14:49:6f:
         47:fb:37:c8:b6:15:83:58:d0:2e:ef:b6:d4:9d:44:00:49:6b:
         09:e0:4a:c3:77:f9:1a:33:12:e8:76:e8:be:0b:81:0c:a4:ca:
         99:4f:f5:d1:d6:cd:43:16:e4:44:a5:3f:02:a4:b9:82:25:8f:
         14:48:83:88:76:05:7f:fb:7f:24:42:52:02:dd:77:53:b4:66:
         f3:94:42:16:c0:0f:c3:c6:1d:f4:b5:63:cf:fb:99:b2:59:c1:
         04:83:ef:64:83:bc:6d:3c:0e:e5:c9:24:f8:02:38:cc:43:9c:
         bf:14:bc:7a:96:09:4b:db:00:3f:14:5e:4d:00:64:f2:47:4b:
         c3:9b:1a:a7:74:ae:07:15:79:df:5f:df:62:ad:8d:90:4b:d6:
         6f:2f:4e:02:a7:d3:51:47:8a:11:12:fd:53:7a:6f:69:b9:de:
         76:11:63:67:89:31:53:5c:f5:56:f3:32:ea:ae:97:59:94:ca:
         c5:0f:25:5e:45:28:a2:8d:d1:51:b3:43:93:da:2c:2d:88:78:
         72:a6:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:34 2024 by rpki-client on console-fra.rpki-client.org