Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File:                     KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier:          yAnR7JGaVKI9Iz/zXIY6K87vJqXRhpwqKCGYooz5QD8=
Subject key identifier:   B6:73:09:EC:AE:3E:0C:32:18:BF:12:BB:CF:86:50:85:3D:28:05:68
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer:       /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial:       018F885B2205F210BA4011F4070510526996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number:          03F4
Signing time:             Fri 17 May 2024 21:00:24 +0000
Manifest this update:     Fri 17 May 2024 21:00:24 +0000
Manifest next update:     Sat 18 May 2024 21:00:24 +0000
Files and hashes:         1: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: roT9r21KxGkCRVFvfUY6Vmfs1hr7pKdKKQ8tfYHeg7A=)
                          2: W0KYntp80XqYo8u7LuFGqd7rKVo.roa (hash: BVsNanYCfagFO2VRL8RsSrGS4l2Um2UhKQnabcrgRAU=)
                          3: x-wi5OePJObwjtMIP5kzaryMlig.roa (hash: tI9He1PeHxfRiuZ2yrv1KlruGK7iuaoeDbA57xWU8EE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:22:05:f2:10:ba:40:11:f4:07:05:10:52:69:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
        Validity
            Not Before: May 17 21:00:24 2024 GMT
            Not After : May 18 21:00:24 2024 GMT
        Subject: CN=b67309ecae3e0c3218bf12bbcf8650853d280568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:b7:72:67:a6:d6:32:31:dc:c6:73:ef:7f:
                    87:20:91:9c:55:7c:07:93:2d:5f:76:15:70:76:a3:
                    a3:c5:b1:7d:b8:c9:25:08:26:8a:5e:62:b5:40:52:
                    b1:43:e7:d5:68:de:27:6a:72:42:23:70:80:73:2a:
                    3f:52:45:be:7a:18:c2:66:71:e0:9c:2b:1a:f5:1c:
                    af:46:e0:c3:fb:e3:33:a6:7e:d1:14:b5:75:52:6b:
                    45:03:87:50:15:62:5d:ec:c5:c6:5d:7f:b1:3d:4f:
                    3d:27:94:97:ff:2f:88:0e:52:4b:5e:9b:e5:55:d3:
                    68:d5:c7:c2:9f:63:f7:f0:30:6b:7a:8b:f4:39:83:
                    86:fc:c1:d1:86:1a:45:c4:95:ee:b7:a0:f2:3f:46:
                    f1:56:5a:14:38:7e:ee:18:0b:1b:08:8f:79:bc:4a:
                    57:d3:d0:6b:c2:74:a7:ce:86:46:f7:d6:7d:76:22:
                    88:f8:4f:32:50:8a:94:9e:a1:3b:6b:7a:f4:6d:be:
                    da:36:82:d6:df:1e:1d:4d:b6:38:c8:dc:01:e2:56:
                    41:09:15:a4:04:66:1d:fa:4a:43:47:6e:0f:75:eb:
                    18:a5:ee:ba:a9:f8:78:46:3e:59:f3:fa:97:83:29:
                    0d:7c:45:2f:f2:d4:67:6b:63:3c:7d:14:fe:96:3d:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:73:09:EC:AE:3E:0C:32:18:BF:12:BB:CF:86:50:85:3D:28:05:68
            X509v3 Authority Key Identifier:
                keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:85:4a:f3:71:d4:9c:2e:e1:07:40:69:03:61:4a:f8:d4:f0:
         c0:4a:59:c1:97:9b:46:8b:36:2a:aa:c3:6b:8c:4c:4b:ec:e9:
         28:87:1b:0b:f3:44:68:06:a6:7e:97:61:f9:0f:95:46:4e:c6:
         b5:f2:89:fc:ce:1e:59:52:4a:f0:b7:1a:f5:b8:04:6a:a8:4a:
         e5:3b:e3:bd:4d:3a:70:d6:e1:bf:e0:98:bd:09:c0:9e:23:cb:
         4f:83:5f:ca:89:04:6c:37:c7:7a:6e:82:a6:be:b7:3e:98:00:
         56:14:33:02:31:cc:77:b2:81:67:e3:f2:07:ee:16:cd:f4:4e:
         e3:97:12:37:55:e0:5d:74:ab:92:d6:06:a9:44:f3:06:1c:91:
         00:a5:14:38:f3:52:6e:ca:83:60:5a:e5:66:a0:2b:60:76:7c:
         62:79:56:d6:58:77:77:3d:55:35:85:7a:6a:86:ed:27:81:21:
         98:60:b1:ed:3b:21:cd:22:2f:13:52:05:40:95:f9:41:de:91:
         ab:28:73:7e:26:aa:81:93:5d:51:0e:e5:91:02:f2:ce:ee:39:
         44:e3:09:4e:e7:7c:f4:9c:3b:21:da:b8:0b:f0:b9:72:6a:f5:
         7d:9a:a6:5c:31:79:f3:74:25:58:e1:ef:5c:0c:5a:be:40:53:
         15:b3:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:01:12 2024 by rpki-client on console-fra.rpki-client.org