Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File:                     KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier:          wlvL6fqEZPG3eguFHnL7TWpg3nJXYNguZoOTdPUfb3s=
Subject key identifier:   1B:F1:EB:3A:46:9C:14:AD:BF:2D:8C:D8:D1:BC:87:32:44:CB:8A:53
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer:       /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial:       018F874A35821651A726F7CE18AC98D3A1D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:18 +0000
Manifest this update:     Fri 17 May 2024 16:02:18 +0000
Manifest next update:     Sat 18 May 2024 16:02:18 +0000
Files and hashes:         1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: gqTQMfm4QFypMn+Zbyk73A+B7gOQw64pUs4oHtmR0ZE=)
                          2: _oamkq9eok8JHdL8-5Lu_oYehc8.roa (hash: Oo+mMothK8yXFnsMf7FBZ2cks/k1vNFVF+z9vGxShYs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:35:82:16:51:a7:26:f7:ce:18:ac:98:d3:a1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
        Validity
            Not Before: May 17 16:02:18 2024 GMT
            Not After : May 18 16:02:18 2024 GMT
        Subject: CN=1bf1eb3a469c14adbf2d8cd8d1bc873244cb8a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:7b:a5:54:6c:a9:6a:ec:72:10:77:99:1e:
                    66:79:90:c8:76:21:5e:4d:f6:c5:33:7a:87:79:23:
                    e4:ed:42:ac:bc:b5:ed:db:05:56:7a:36:e0:98:58:
                    7f:56:76:19:e2:b1:8c:4c:a9:df:93:c4:a0:ba:18:
                    2e:8d:db:be:32:ff:1a:70:f6:90:91:29:32:15:a4:
                    ee:1e:6f:70:fd:e6:1c:03:60:bc:64:f5:2e:bf:6a:
                    f6:27:d5:e4:37:6f:86:08:9e:b7:1f:98:ab:52:c8:
                    70:9b:40:60:70:c1:04:77:6c:87:c7:30:a2:7e:ed:
                    57:d3:5c:20:7d:b9:81:b4:ae:76:4a:83:e6:7a:40:
                    b4:24:dd:cb:f5:47:4d:ac:89:a8:00:d9:ad:e6:5a:
                    ef:b2:97:e3:7c:d3:2b:f5:83:5a:2e:ad:5b:dc:f3:
                    5c:48:96:46:d0:3e:d9:01:39:2e:8c:2a:f7:1c:37:
                    bb:f6:20:e2:7a:be:55:20:dd:0d:3a:db:89:7d:b7:
                    15:3e:fd:83:e9:83:8a:01:83:ab:e8:95:3e:33:27:
                    4c:9c:c9:3c:d0:bc:51:6e:37:0c:f9:9f:97:39:8f:
                    a9:a6:16:a1:f5:1c:d8:94:4a:05:00:4c:f1:f2:e7:
                    86:78:40:9c:b2:13:7a:ca:e3:80:21:f5:f6:be:54:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F1:EB:3A:46:9C:14:AD:BF:2D:8C:D8:D1:BC:87:32:44:CB:8A:53
            X509v3 Authority Key Identifier:
                keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cf:c9:ed:30:e9:8b:41:fb:3b:3e:20:8b:a7:f8:52:12:1b:
         59:a9:96:4d:04:7d:8c:70:8c:c2:83:5c:1b:17:d1:a7:e6:88:
         5b:88:32:29:d0:d3:66:16:fc:54:56:83:4a:fc:ab:77:9b:76:
         72:55:4a:0e:6e:2f:56:17:c4:f9:ae:56:e5:b0:f5:6a:57:3a:
         25:03:67:b1:7d:e6:da:3e:e5:16:62:a1:dc:45:66:56:3c:a5:
         a1:c5:b4:d8:c1:14:d7:ce:8b:bf:02:a3:03:5c:2f:60:e8:e7:
         5f:24:9a:0a:8a:26:5c:c8:68:8a:8f:e0:4b:69:ea:2b:4d:bc:
         50:c4:a5:97:af:57:29:f5:1a:80:a3:a8:75:c6:4e:6b:6a:62:
         e8:56:76:b6:52:27:bd:c8:a0:5d:c8:4a:db:19:b4:6d:c3:39:
         41:10:7f:17:29:b1:3c:bc:df:a8:1c:75:a7:12:2f:33:a5:3d:
         bb:ea:ca:07:77:4a:a5:3e:c2:96:42:b8:42:7a:5b:00:de:ae:
         5e:58:e9:65:92:c8:f2:08:9c:14:66:ca:bb:bd:c5:57:a9:f9:
         9b:c7:08:82:96:33:c7:42:3f:31:40:4b:3b:15:2f:2c:92:81:
         56:79:f6:0c:83:4b:e9:48:02:35:93:aa:7e:bf:6c:90:ab:dd:
         dd:ee:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:32:07 2024 by rpki-client on console-fra.rpki-client.org