Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File:                     kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier:          PcJyv9qm0ATHRX+GEfPXBAZGX7CfqYTKjQ0kzxsZq/8=
Subject key identifier:   E8:70:24:E9:D2:57:67:19:B8:53:1B:0F:C5:D3:FE:DD:C7:AC:09:9B
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer:       /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial:       01906294F8DA57C00413E7E961A0064D7AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number:          44
Signing time:             Sat 29 Jun 2024 06:00:48 +0000
Manifest this update:     Sat 29 Jun 2024 06:00:48 +0000
Manifest next update:     Sun 30 Jun 2024 06:00:48 +0000
Files and hashes:         1: Ic-u24aNdkMdE0xtpojKmIhAGXg.roa (hash: 9CuGqkLGq7Iw9i8uRHj1o4NDPIQMahS9frHepmZBZz0=)
                          2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: cRHadbVZD+bqG0aRaYpZyn0ZAJ8oPXEo4dFTyUtJEPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:94:f8:da:57:c0:04:13:e7:e9:61:a0:06:4d:7a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
        Validity
            Not Before: Jun 29 06:00:48 2024 GMT
            Not After : Jun 30 06:00:48 2024 GMT
        Subject: CN=e87024e9d2576719b8531b0fc5d3feddc7ac099b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:29:bd:d5:e4:12:ad:87:24:79:b8:2b:d7:
                    cc:94:ed:85:3a:20:7a:57:17:ea:25:a6:22:a6:53:
                    96:ff:06:7b:a1:50:06:7b:ac:50:85:66:f0:1d:6f:
                    f0:c5:0f:fb:26:1f:95:27:40:eb:fc:96:9d:65:1e:
                    18:13:aa:a3:de:ac:ca:05:fa:a8:03:d6:ef:0c:11:
                    f0:b9:5d:88:14:30:2b:e1:26:cc:74:3e:6f:82:a6:
                    2f:36:b6:b8:48:0c:19:62:ce:38:49:03:18:8d:af:
                    d0:7a:b5:65:b2:2e:88:92:6f:4d:26:eb:b3:e8:11:
                    12:b0:b2:da:ea:85:7f:7f:ff:f2:df:37:89:a1:90:
                    45:98:11:d7:37:93:c0:29:f2:35:a7:4a:2d:e1:51:
                    2f:63:ed:06:ba:77:f8:fe:20:b8:b0:03:a1:b5:02:
                    ea:7a:8b:e8:3d:f9:a3:8f:43:4e:45:3c:aa:ef:0a:
                    bf:af:7d:75:60:b3:19:c2:3d:d1:05:f1:cf:06:76:
                    8f:96:41:c7:0a:4c:b8:56:86:1b:a2:70:1c:80:3f:
                    20:40:a7:29:04:fa:34:fe:36:28:b5:c0:b5:70:93:
                    f6:ab:b1:50:03:89:ac:8c:ba:dc:78:f6:34:f2:1f:
                    c0:ce:cf:9f:ab:67:40:0b:4d:b6:4a:8a:8b:70:2c:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:70:24:E9:D2:57:67:19:B8:53:1B:0F:C5:D3:FE:DD:C7:AC:09:9B
            X509v3 Authority Key Identifier:
                keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f7:ec:9f:52:bc:17:37:d5:bd:7c:8f:76:e3:87:93:22:14:
         4c:c7:8f:1e:92:1f:f4:97:ad:08:9b:ee:b4:5d:d9:71:5a:92:
         13:7b:b4:d6:f9:36:76:77:49:5a:ee:ad:54:90:6d:0c:33:66:
         10:cc:f3:4a:06:4e:f7:3f:38:ec:1a:61:6e:f4:86:de:7b:11:
         d8:b9:ac:8d:b0:da:f1:e3:f1:b8:10:68:44:44:a1:21:fe:b9:
         ff:02:4c:f7:9b:d2:63:a6:3d:4d:11:b6:dc:d5:00:f3:78:42:
         83:4e:c5:29:b6:12:69:05:5a:a4:ce:76:3f:f6:f4:02:c5:fd:
         0e:97:12:da:61:f3:23:ca:8a:f2:7a:4e:75:5a:88:8a:e7:50:
         46:a0:94:4e:16:af:83:c9:d5:a1:8b:27:74:d2:d1:2f:bb:c7:
         7b:75:d7:02:81:06:a5:33:fe:dc:99:20:35:d9:32:6c:c6:2d:
         2e:b1:34:25:c1:8f:bf:a4:83:0e:99:e0:27:8d:fe:a7:f3:f3:
         9b:9f:67:40:cb:cf:d7:68:2a:93:c5:fb:3d:01:22:c1:10:03:
         ca:b5:67:1d:ab:3c:ad:06:52:20:c8:d7:88:d4:96:6f:8e:32:
         70:bd:5e:70:4e:a3:b4:53:08:aa:2a:58:4b:c0:62:6d:41:7c:
         45:0e:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:48:00 2024 by rpki-client on console-ams.rpki-client.org