Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File:                     kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier:          gof6XQJjr6q2iHJkxrZrDhmP7eidG/znXs94cMR01pw=
Subject key identifier:   BF:7C:6D:33:01:19:40:36:1C:FE:2E:02:E3:59:7F:C5:2A:80:FD:B0
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer:       /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial:       018F87ED55595DA0E1769A63DD80CA5A414F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number:          0844
Signing time:             Fri 17 May 2024 19:00:29 +0000
Manifest this update:     Fri 17 May 2024 19:00:29 +0000
Manifest next update:     Sat 18 May 2024 19:00:29 +0000
Files and hashes:         1: eu0OEDjalVHa6HOUVBEL6uSqL88.roa (hash: FNItrku+LgAIr2au0NZFdAsR1B4fsj9/6iF9ntWCuMk=)
                          2: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: 3OCGFFDwuvJ7eUEY/hDthvcFNlmSUv8qUrPtD1eB5xQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:55:59:5d:a0:e1:76:9a:63:dd:80:ca:5a:41:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
        Validity
            Not Before: May 17 19:00:29 2024 GMT
            Not After : May 18 19:00:29 2024 GMT
        Subject: CN=bf7c6d33011940361cfe2e02e3597fc52a80fdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:96:0f:2d:65:0a:fa:7c:6c:e7:e6:c2:6d:
                    38:b5:6d:da:b1:a9:55:59:34:f4:26:0c:1a:ea:49:
                    f5:a9:b8:66:54:f5:fa:6a:5c:10:df:75:52:3b:01:
                    51:f0:95:42:01:ae:7e:73:21:79:8d:31:fa:84:f2:
                    f4:10:c4:a4:9c:95:ae:95:25:36:25:2a:af:05:b7:
                    20:c6:7c:33:b9:f5:ae:a5:88:f5:92:5a:4a:c1:43:
                    08:ed:1d:d0:a4:b4:94:dc:19:a0:bc:a0:05:87:69:
                    04:12:82:48:83:09:88:b9:d1:22:29:ac:2d:ec:98:
                    43:58:cb:24:bd:d6:cd:f4:56:c0:03:a7:c7:25:05:
                    55:a1:e2:97:81:00:9e:39:e5:15:13:92:25:71:6f:
                    fa:18:52:04:fb:d8:5c:55:7a:db:ef:c8:0d:a0:86:
                    0f:74:8d:80:2a:e2:61:48:ec:11:89:52:93:2f:c0:
                    1a:2d:b6:8a:75:94:67:67:74:68:dc:63:79:ee:b2:
                    fd:b8:25:cf:a4:e6:72:ff:ed:60:f5:0d:61:b3:eb:
                    32:c0:2e:4b:f3:28:a9:b3:d8:52:39:63:d4:bc:0d:
                    88:6a:bc:f0:48:17:1a:28:7d:4f:d5:9d:c7:96:c9:
                    1f:21:63:11:fa:87:5a:e4:6f:e1:b1:7c:fb:88:50:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:6D:33:01:19:40:36:1C:FE:2E:02:E3:59:7F:C5:2A:80:FD:B0
            X509v3 Authority Key Identifier:
                keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5f:03:3e:89:6f:82:2c:a3:f2:7b:af:1f:da:21:09:b3:87:
         29:77:26:7e:4a:71:28:28:c3:b3:5c:4b:98:52:c5:5e:ff:72:
         cb:cd:e0:9b:56:50:b6:1e:50:da:bc:19:07:8f:57:a6:fc:55:
         21:65:89:9a:f8:bf:19:6b:1d:cf:c0:d5:7f:d6:d9:a5:b2:46:
         4f:cb:ba:7d:68:e2:34:0f:b2:2e:aa:25:c4:42:74:ea:74:88:
         e0:77:bb:33:a8:4d:86:b3:bf:bd:d8:d3:df:d7:d4:36:d3:75:
         f8:bc:c5:cc:87:9e:3d:58:d7:48:53:d6:4f:6f:91:16:a8:d3:
         73:7d:dc:9a:b2:16:c0:27:52:fd:9e:27:ef:83:31:3d:30:36:
         26:71:ed:1e:08:25:58:5d:20:b2:30:f6:87:e4:01:f7:6a:67:
         a2:81:2b:3b:28:12:2a:28:bb:9d:5d:03:c5:ff:b8:4e:0d:32:
         1e:d5:7d:af:d6:ec:a6:79:86:af:fd:0b:74:aa:6b:31:e6:ad:
         49:2a:f2:ba:df:c0:e2:40:9a:a1:54:54:b1:d1:d9:6c:f8:b1:
         83:7c:6e:8c:8d:15:d8:b7:3e:43:96:55:e0:ab:de:fe:5d:1b:
         b1:48:52:ce:27:13:87:fe:46:2e:d9:ea:b2:94:7e:94:7f:54:
         a3:4d:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:13:40 2024 by rpki-client on console-ams.rpki-client.org