Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File:                     KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier:          otZY1VeIR8jWOzT8WWpRVP0yk8KfjiMMFvv97Aqk0xI=
Subject key identifier:   5D:B9:B9:E1:E2:31:02:62:E4:D0:4D:C4:1E:1D:FE:FC:DC:87:1A:48
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer:       /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial:       018F9B06548702257E5ED9D5C7A43E58D5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number:          1182
Signing time:             Tue 21 May 2024 12:00:34 +0000
Manifest this update:     Tue 21 May 2024 12:00:34 +0000
Manifest next update:     Wed 22 May 2024 12:00:34 +0000
Files and hashes:         1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: vpM65+OhPVyKWX6Idaq9Oghxlg3kQLcZI9/K1A7goTw=)
                          2: eJL1xlCA2Gkj9Ujf3WryCemY7DM.roa (hash: 5kMiEhpUQwfwEgl5+sVa7C31lagzQ11yeaDTRxnKeAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:06:54:87:02:25:7e:5e:d9:d5:c7:a4:3e:58:d5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
        Validity
            Not Before: May 21 12:00:34 2024 GMT
            Not After : May 22 12:00:34 2024 GMT
        Subject: CN=5db9b9e1e2310262e4d04dc41e1dfefcdc871a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:4b:4e:8d:d8:f4:a3:e5:df:5a:d2:ab:c2:
                    b8:36:94:fc:39:2e:d2:8e:71:35:d2:0a:8d:d3:70:
                    05:4d:f0:b4:3e:60:77:b4:be:1a:1d:71:62:e6:1d:
                    a6:40:53:20:f8:d7:de:13:13:7e:e5:e3:b6:be:0b:
                    63:7a:0c:18:f8:c9:f9:ba:c6:c6:7b:9c:28:fb:c9:
                    f4:b7:ed:ec:b1:38:64:7c:aa:30:ad:f5:f4:5a:1a:
                    c0:0e:45:ff:0b:22:6a:af:92:91:05:c3:95:5b:27:
                    38:d6:4e:cf:f3:33:50:09:34:b5:37:c0:23:42:65:
                    a1:47:25:f2:c7:ef:36:e6:04:ca:63:c1:53:a7:e0:
                    b8:d1:f1:6b:0f:f8:05:96:3b:4d:b6:a0:39:cd:9b:
                    ee:ba:f5:c6:93:4d:50:a1:32:46:dc:59:60:ce:5c:
                    61:d2:79:ae:48:3b:1e:87:b4:ed:da:95:7a:4a:5d:
                    aa:ee:ed:59:2a:78:b3:6a:e5:b9:16:bd:fd:9d:24:
                    5d:a1:1a:bc:68:f4:55:2c:43:53:db:c6:ae:58:78:
                    b4:fb:d5:78:34:a8:5c:d1:39:b3:5f:0b:cf:46:f7:
                    fc:a2:47:b0:ae:66:d5:a4:da:03:69:0a:85:45:66:
                    a3:8c:d7:a5:7a:8b:df:f5:2a:09:7a:ee:13:0d:85:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B9:B9:E1:E2:31:02:62:E4:D0:4D:C4:1E:1D:FE:FC:DC:87:1A:48
            X509v3 Authority Key Identifier:
                keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:84:ee:ac:65:21:58:32:f0:64:78:8f:09:c0:40:2d:1f:
         fd:41:ea:06:25:ba:58:a0:15:0b:03:79:e1:fa:0a:d5:d5:01:
         19:9a:01:97:5b:94:93:ca:be:38:b6:0f:c3:fb:a0:74:1b:ef:
         a0:35:8e:88:36:c3:4f:50:6c:e7:fb:4c:92:3c:f3:77:d3:23:
         19:e0:42:ba:6d:b9:3b:6d:fd:3b:77:08:41:17:5f:b9:74:c1:
         b1:d0:b5:8a:4d:fc:87:8f:c5:f3:f5:2b:23:89:60:cd:6a:0e:
         8d:c6:d6:20:21:bb:e6:22:6e:26:78:ac:81:75:c6:9e:1e:fc:
         29:c0:76:e1:12:44:e5:1e:34:19:bd:0c:c3:8b:b2:2d:f7:17:
         d6:b1:e2:00:7c:52:c0:c1:b7:47:84:a5:61:e6:06:93:5b:15:
         0b:0d:42:0b:ab:72:63:87:50:ad:3e:ed:32:7a:de:8b:3b:6e:
         37:f8:4c:7e:2c:8a:a1:69:eb:af:cd:7e:e9:de:83:ed:ec:95:
         1a:85:1a:25:67:31:a1:2d:aa:4f:e0:29:92:c6:20:a2:6a:54:
         81:a3:7f:37:01:9a:e7:0c:a8:6f:c4:63:03:36:71:68:e4:6c:
         04:00:8a:88:4f:fd:a9:07:1b:17:19:d0:37:b4:92:6d:e8:9d:
         1d:c7:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 12:52:07 2024 by rpki-client on console-fra.rpki-client.org