Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File:                     KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier:          WaWk5uQNREKVWwtbJDfB+MFFUvgOYJC2SHtSiyOwROI=
Subject key identifier:   2C:F3:07:78:AA:EB:75:EA:4F:9C:84:37:F9:26:F2:47:6B:BB:C6:3D
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer:       /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial:       018F836C736508179459106CF8A835E5A908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number:          0692
Signing time:             Thu 16 May 2024 22:01:13 +0000
Manifest this update:     Thu 16 May 2024 22:01:13 +0000
Manifest next update:     Fri 17 May 2024 22:01:13 +0000
Files and hashes:         1: 0NkZr9xN1HRdTGRaVb57tDZXqFo.roa (hash: botsMZF+GjttbrakuQN0eLxcRATmR0gANUESq5NOgvs=)
                          2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: l0TADJBp+t4nViVse/+kcr6wHh52aBDIemCMV8/APhA=)
                          3: dMLi1hnqfwP2FZ7MrJzKAhZqNj4.roa (hash: fgjKdEVKKQLyuZgdRPOIVpLaIZvI5cp4LI1zSG3BXpY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6c:73:65:08:17:94:59:10:6c:f8:a8:35:e5:a9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
        Validity
            Not Before: May 16 22:01:13 2024 GMT
            Not After : May 17 22:01:13 2024 GMT
        Subject: CN=2cf30778aaeb75ea4f9c8437f926f2476bbbc63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:eb:cc:23:de:4b:fa:d9:db:65:27:0c:eb:
                    5e:38:9b:dd:66:a8:d7:d3:99:a0:89:86:12:12:1a:
                    f8:f1:94:5c:90:8e:b8:48:94:55:51:80:a0:4b:83:
                    27:55:b4:9d:fc:a3:ad:91:68:2f:19:9e:0f:a3:ac:
                    68:77:51:34:66:44:9b:b4:2d:80:9f:7f:86:af:e6:
                    b3:90:9b:24:36:bf:b2:55:56:21:5c:e4:ff:c1:cd:
                    78:e8:59:6d:77:f3:37:eb:3f:cd:bd:78:b9:e0:32:
                    08:16:88:cb:06:5f:ae:f7:00:91:43:a2:87:6c:d2:
                    8f:af:90:4d:96:26:60:f8:a5:12:1b:e1:49:14:d6:
                    c0:ed:3e:45:d8:31:f5:bd:1f:cf:b1:86:35:8a:5c:
                    f9:e8:e3:1c:77:5f:09:96:eb:bf:b9:8f:70:b0:6a:
                    3d:34:2d:24:97:23:e6:ae:75:f5:17:ad:07:d3:15:
                    c0:8c:dd:9b:e4:63:bb:88:e1:f9:7a:e7:65:9b:62:
                    47:6c:b6:0b:5d:2e:7d:22:cd:cb:f5:05:c3:55:19:
                    7c:4d:82:7e:f4:ae:c6:d7:e0:8d:20:69:01:a2:c2:
                    49:d7:1d:1c:16:f9:4e:8c:62:12:a8:b9:92:18:c2:
                    9a:42:fa:5e:10:60:4b:35:e9:f6:35:55:10:98:5a:
                    08:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:07:78:AA:EB:75:EA:4F:9C:84:37:F9:26:F2:47:6B:BB:C6:3D
            X509v3 Authority Key Identifier:
                keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c2:32:2f:b9:d1:1b:41:ab:57:c2:08:16:c5:a8:8a:01:ca:
         dd:23:35:47:14:6d:3d:e3:6c:cb:93:d6:41:db:dc:59:9d:61:
         bc:14:6d:9f:e0:6a:39:16:95:30:b1:f7:21:91:f4:6e:97:bc:
         21:22:0c:42:d1:e0:44:0e:74:e8:6b:2d:f2:90:2f:67:79:26:
         8f:e6:01:d0:33:9b:87:6d:f4:a2:c3:53:ff:35:24:e6:57:cd:
         11:54:3c:86:18:dc:ea:aa:27:65:8f:22:de:8a:11:ee:40:9a:
         88:6c:8a:27:ef:b1:96:a8:d1:11:e0:09:bd:44:95:9a:66:b9:
         6b:c8:91:31:52:22:94:d6:47:6d:cd:c8:19:00:83:05:6a:66:
         ef:25:45:81:71:25:8b:b6:28:1c:4f:1b:bf:1e:1e:e2:ff:fd:
         9d:82:3b:96:e5:6c:8c:35:2e:30:f7:ab:d6:43:8f:47:e5:f1:
         71:80:55:a5:63:a5:13:31:b5:31:41:66:3a:b4:05:23:6e:56:
         db:0c:62:87:dd:ee:42:a3:fe:23:5d:28:1f:d6:47:cc:83:7e:
         13:8f:36:08:75:f2:82:7c:4a:3c:b2:0c:3a:20:e7:34:74:84:
         c9:c3:8f:9b:e0:2f:c8:32:6b:25:1e:2b:cc:6c:b2:ef:08:33:
         9b:36:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:43:28 2024 by rpki-client on console-ams.rpki-client.org