Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File:                     kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier:          SmTbcXXw255E7XkTn/3gtMZPo/0C41MsZATBFgjy4x4=
Subject key identifier:   68:5D:95:2D:76:09:E2:3B:C6:E8:F6:53:F1:18:FC:69:80:D2:3C:21
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer:       /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial:       0193568954AFA847C89182AF31F37B607847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 01:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:00 +0000
Files and hashes:         1: 0OzbWqeyS-modkV7KOTGk-Xbys8.roa (hash: UXQi4LYuJx6pnCqAWmDlQAgag+ph0vd051a5V9YU/iU=)
                          2: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: QkUh8h2kkl5kM/TWvnpPZxW+1727Wr9UsOD4nAdErWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:54:af:a8:47:c8:91:82:af:31:f3:7b:60:78:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
        Validity
            Not Before: Nov 23 01:01:00 2024 GMT
            Not After : Nov 24 01:01:00 2024 GMT
        Subject: CN=685d952d7609e23bc6e8f653f118fc6980d23c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:c5:f2:35:ab:fa:b6:49:b4:49:b1:10:2a:
                    9c:ec:e6:61:e2:76:1d:b8:ca:7e:56:b4:9a:cd:20:
                    2a:91:ae:31:9c:86:02:bb:2f:82:c1:57:18:f5:21:
                    f2:30:9c:ab:1e:3c:ae:db:30:eb:e3:b9:17:e2:5c:
                    aa:fe:75:b6:53:50:95:26:f4:e6:55:28:70:29:ae:
                    44:14:97:60:47:cc:08:be:a4:8e:5a:18:62:48:87:
                    0b:f4:ac:32:41:48:33:62:53:c5:d2:4c:78:fe:64:
                    f7:92:52:95:5f:b3:a3:96:31:cf:f7:c1:4b:f3:7f:
                    d1:5f:0c:92:e6:2e:fa:1e:c7:17:36:82:05:55:bc:
                    35:d8:70:e1:19:57:bf:e7:46:43:18:eb:3b:6c:d7:
                    ce:50:69:6e:af:0e:a4:1b:9a:33:aa:e7:60:5a:59:
                    2f:46:fc:b7:31:10:a0:7f:62:39:53:5a:ab:a9:65:
                    9e:4d:47:a6:76:f6:e2:e1:35:ef:3e:31:0d:dc:16:
                    3f:98:b9:b3:d6:67:99:e8:fa:8b:2b:a7:f2:5c:c3:
                    71:1c:2d:a9:8c:0c:93:47:81:ff:45:71:94:5c:1a:
                    69:cf:ee:a4:45:0f:2b:07:6a:05:39:12:6e:97:99:
                    41:ee:30:f2:9a:a2:1a:8f:ce:7c:fc:d4:0f:1f:89:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5D:95:2D:76:09:E2:3B:C6:E8:F6:53:F1:18:FC:69:80:D2:3C:21
            X509v3 Authority Key Identifier:
                keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:33:ac:f2:71:5d:42:4f:b1:05:c1:51:27:72:a8:4d:0c:68:
         e0:02:80:de:3d:ed:fe:a3:f0:cf:70:92:3b:15:66:11:fd:fc:
         4c:ad:e7:8e:da:e3:60:c0:3a:4b:08:bc:0b:60:cc:ce:16:93:
         28:88:8e:f8:a9:1f:a6:45:e2:9a:a4:d3:db:a8:71:3d:19:05:
         2f:8e:de:18:ce:04:46:c2:62:a5:78:9d:8d:bf:99:a1:27:f8:
         f4:f3:08:bd:6c:d5:39:80:09:b4:34:5b:51:85:aa:4d:0b:ca:
         11:48:db:d1:b0:b6:3f:59:1b:2b:df:cc:2a:89:9d:b8:aa:2a:
         4b:3d:a1:e7:83:f7:a6:25:c2:86:d1:49:dc:0a:f1:a1:c3:27:
         b6:ae:7a:eb:3c:11:e8:53:df:34:cc:c3:d2:c3:f4:71:e6:23:
         31:4e:3b:06:3f:50:84:23:b3:3a:3d:a4:3f:8f:9b:c0:1a:92:
         33:50:be:d4:ed:af:7b:11:40:98:93:9c:a4:cd:33:64:96:e4:
         ae:78:ad:49:8a:16:59:a3:34:dd:44:95:6d:53:f9:e4:7a:96:
         ab:82:ae:d3:04:05:a4:fd:c1:2d:0a:27:97:34:45:4f:47:4b:
         05:ac:a2:41:be:93:29:f0:75:aa:d0:54:da:46:ee:ef:51:dd:
         3d:29:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:38 2024 by rpki-client on console-fra.rpki-client.org