Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
File:                     KGS7NPtdFsqdH6P5eUy0jUvthHM.mft (raw, json)
Hash identifier:          bslHqHpFhZX2klvC1e42uqD0xuqS7z0QvXOkVs/unLA=
Subject key identifier:   3B:88:BA:09:59:25:A1:CF:5C:A5:4A:C7:FC:BE:C9:36:56:0F:F4:EE
Authority key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Certificate issuer:       /CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Certificate serial:       018F5A39AEEA4E2718BB5A72B1AD02425B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
Manifest number:          10B1
Signing time:             Wed 08 May 2024 22:01:20 +0000
Manifest this update:     Wed 08 May 2024 22:01:20 +0000
Manifest next update:     Thu 09 May 2024 22:01:20 +0000
Files and hashes:         1: Iopd-BqA3SPyN8dk3S77MQi90FM.roa (hash: IXN9UC0/Us2cSvcFyPV0e35l8elnhLeWC+1GT4Ovrdg=)
                          2: KGS7NPtdFsqdH6P5eUy0jUvthHM.crl (hash: mUMbvuPGVvRuK9lRPQWRl6d8feexGwC/hBYgkXzU7gQ=)
                          3: jV4KyYOgRoTiEBd1z7O6p8ohyb0.roa (hash: LV8co3zsXv3cHBPxPfQEUFy1p4Y87jIVKNUsHDiMHq0=)
                          4: rdW_Uwi1zywbRu9qjW5gmE-XhqQ.roa (hash: a3iBQ2w14uNmI0u4+5wRX/6K/QJ3ekSsmQctNl8Ueik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:39:ae:ea:4e:27:18:bb:5a:72:b1:ad:02:42:5b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
        Validity
            Not Before: May  8 22:01:20 2024 GMT
            Not After : May  9 22:01:20 2024 GMT
        Subject: CN=3b88ba095925a1cf5ca54ac7fcbec936560ff4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:6e:b5:e5:35:eb:2f:25:6f:7e:9d:49:74:
                    65:62:92:69:40:5f:0b:80:77:99:61:78:5d:d3:74:
                    9d:38:cf:d8:35:d6:2e:38:e1:f6:64:c8:8b:91:8c:
                    d6:4b:2d:40:56:46:96:15:d6:94:cb:91:07:1d:b7:
                    39:09:55:eb:eb:c9:92:89:3b:bf:4c:39:93:0f:63:
                    d7:b5:e2:88:cc:8d:66:29:56:41:11:60:57:ba:09:
                    08:2d:74:11:03:4f:c5:ff:97:7b:21:cd:31:6e:7f:
                    dd:74:ae:4e:b8:e6:1a:ea:be:92:1e:a9:2a:42:49:
                    d2:0b:74:d8:f2:a5:0c:86:5b:16:7c:ce:4f:23:60:
                    0c:88:f9:24:3e:10:f2:f6:37:2e:16:c6:2c:0f:25:
                    09:7b:b5:7b:28:67:e1:95:ef:1e:11:87:68:5c:2b:
                    53:12:be:ff:73:70:50:00:5e:0f:1f:53:80:3e:cb:
                    d7:3d:4e:3f:81:05:a2:5c:0a:54:0c:21:1d:19:e3:
                    f2:35:06:ea:31:4a:6b:27:c3:83:5e:60:ac:e9:46:
                    0e:ae:d1:6d:ed:91:0c:44:f5:8e:f6:f5:fc:6e:9a:
                    90:f8:da:4c:36:88:ca:82:fa:24:ce:d3:99:fd:de:
                    6d:62:27:22:25:02:49:04:b8:fb:ca:ad:ad:35:4c:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:88:BA:09:59:25:A1:CF:5C:A5:4A:C7:FC:BE:C9:36:56:0F:F4:EE
            X509v3 Authority Key Identifier:
                keyid:28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:32:50:2a:86:6a:9a:d3:39:6e:eb:8b:76:ba:8c:0f:a8:
         72:4a:d4:ae:d6:67:cf:f7:e0:6a:98:35:19:87:b8:81:e5:84:
         45:db:33:8a:9f:2d:10:7c:fe:ec:44:3e:5f:8c:96:bb:24:83:
         8d:cd:e2:ba:8b:d6:d4:85:96:25:d7:73:8f:73:6d:82:b0:c2:
         fb:e5:6c:8b:d9:66:10:36:1e:07:03:aa:c7:d6:1c:db:ba:45:
         d9:b1:20:72:ad:e3:10:04:c8:73:7a:23:c3:cc:21:80:4c:16:
         4f:75:12:4a:bf:c1:0f:3f:7e:2c:f2:5d:0f:7a:d7:ad:15:e9:
         63:3e:77:ce:a4:58:07:29:f3:7e:23:07:5a:81:e1:b9:da:b1:
         51:6a:73:92:7e:92:0a:dc:01:3b:6d:e4:7b:38:35:97:9b:b8:
         62:d5:09:47:3d:10:36:80:0a:b6:b7:a6:79:c4:d3:3a:e7:fe:
         16:c6:25:57:2e:2c:37:11:89:29:21:3d:d2:09:c3:63:bc:a2:
         2f:73:f8:81:1e:01:f9:0d:99:57:ea:24:a8:58:62:79:87:2f:
         c8:e7:95:23:48:70:6e:87:0b:a7:91:be:61:19:59:86:e6:b5:
         8e:3d:00:80:ee:22:af:3d:e3:27:6b:dd:bf:b5:2f:82:85:36:
         b7:cf:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:50:20 2024 by rpki-client on console-fra.rpki-client.org