Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File:                     KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier:          qt5sTcieYu4AN/C1Dxeq+jLv5I3xj3VR6oa8BODRC7s=
Subject key identifier:   01:19:9F:96:34:A4:86:D5:D5:BD:5F:6E:A0:99:07:AB:EA:31:29:14
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer:       /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial:       0191FB22FBC238C58D0CB87E75B3D5166779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number:          98
Signing time:             Mon 16 Sep 2024 14:00:59 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:59 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:59 +0000
Files and hashes:         1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: Jzz+9m3Odeu/qMWxc/P/VOuE5+XNLniNYTRIy9LexFE=)
                          2: z0m6jBJrCvhOx3UUIsLn0OZ62FE.roa (hash: bzXACtdIj5XPh90avBGO/MVCxvr97eivXhwo1eDAxhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:fb:c2:38:c5:8d:0c:b8:7e:75:b3:d5:16:67:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
        Validity
            Not Before: Sep 16 14:00:59 2024 GMT
            Not After : Sep 17 14:00:59 2024 GMT
        Subject: CN=01199f9634a486d5d5bd5f6ea09907abea312914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:de:90:cf:70:c6:a4:41:db:4e:22:83:c5:
                    c6:12:c2:61:b3:cc:73:af:c5:04:9a:c2:f9:39:78:
                    ab:87:65:bc:c1:74:db:b6:66:c6:f5:93:09:b4:85:
                    5c:95:4a:e9:05:51:b4:ae:7f:c6:2c:9d:59:f5:32:
                    2e:ec:9a:9e:89:19:75:de:34:1a:7f:cc:b9:ac:31:
                    b8:09:aa:c6:57:23:63:0c:cf:7b:8a:d4:ab:52:cb:
                    55:cf:63:49:be:73:b4:4e:93:b8:38:d3:0c:bb:37:
                    91:f9:94:02:d1:64:47:21:c9:33:fa:aa:aa:fe:f3:
                    35:cb:7e:73:c7:b1:97:22:ad:6a:26:e0:49:06:74:
                    c6:87:c5:f0:5a:b7:97:9a:4b:7b:f4:91:1a:99:08:
                    07:f8:60:41:cb:31:5f:e8:72:5a:b2:ca:03:4e:d6:
                    70:d1:2c:1d:3f:01:8d:11:00:19:20:5c:b0:db:62:
                    4d:c2:f9:cb:91:b6:0b:dd:d2:2e:20:77:4c:f0:ca:
                    e5:c7:7e:4b:ad:e9:6a:93:50:22:31:44:43:f3:8a:
                    92:41:c2:b8:58:8a:cf:3d:37:5f:46:4f:14:8e:96:
                    33:4b:99:b2:ef:16:ac:af:0c:ab:98:99:02:84:27:
                    41:5f:60:7c:a6:bf:2d:8a:37:de:52:a5:59:99:07:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:19:9F:96:34:A4:86:D5:D5:BD:5F:6E:A0:99:07:AB:EA:31:29:14
            X509v3 Authority Key Identifier:
                keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:82:f5:f2:9f:aa:1a:38:2a:f2:1c:ef:9a:ea:3f:7d:0c:
         54:48:ec:3f:dd:c5:f0:70:f1:a4:34:bf:2e:f9:12:bb:76:d8:
         07:39:14:98:64:2e:54:74:8a:83:77:0b:51:66:eb:74:12:c6:
         ba:a9:d9:70:67:96:c1:00:78:db:46:24:4f:88:8c:2b:30:af:
         08:a2:c6:88:68:ae:51:81:e7:1f:21:92:5f:92:e8:81:f5:74:
         c3:5a:55:aa:cb:ef:a8:ed:97:cc:f4:97:58:e0:4c:0f:4c:6e:
         e6:d7:5c:06:02:e4:94:48:11:56:28:de:46:4d:c0:89:ca:d9:
         63:fd:5f:08:54:e1:e6:d2:e5:b2:22:04:81:88:2e:e1:6d:7d:
         dd:1c:f0:10:c1:64:28:9b:92:1b:75:38:9e:8b:df:b0:84:d5:
         93:75:36:85:bf:2c:48:79:54:73:c7:1a:eb:c2:4e:08:b2:f3:
         37:cd:57:c7:b5:15:5c:1d:1a:19:45:08:e9:d1:d6:5b:95:d1:
         92:87:42:0e:39:ba:a9:92:c0:83:e2:77:00:a4:9e:e7:2e:f8:
         0e:f8:4e:2e:1c:a8:bd:f8:d9:2d:88:76:60:1e:36:b9:fe:5b:
         f9:4e:4e:92:1e:6e:64:7a:55:5d:9a:3c:46:be:51:b5:23:ef:
         2f:74:93:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH7IvvCOMWNDLh+dbPVFmd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU0ZTI4ZjZlMDFjYTVjNzM1M2JjMzcyZjM2OWE1ZjUx
ZDliYjQwHhcNMjQwOTE2MTQwMDU5WhcNMjQwOTE3MTQwMDU5WjAzMTEwLwYDVQQD
EygwMTE5OWY5NjM0YTQ4NmQ1ZDViZDVmNmVhMDk5MDdhYmVhMzEyOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzTekM9wxqRB204ig8XGEsJhs8xz
r8UEmsL5OXirh2W8wXTbtmbG9ZMJtIVclUrpBVG0rn/GLJ1Z9TIu7JqeiRl13jQa
f8y5rDG4CarGVyNjDM97itSrUstVz2NJvnO0TpO4ONMMuzeR+ZQC0WRHIckz+qqq
/vM1y35zx7GXIq1qJuBJBnTGh8XwWreXmkt79JEamQgH+GBByzFf6HJassoDTtZw
0SwdPwGNEQAZIFyw22JNwvnLkbYL3dIuIHdM8Mrlx35Lrelqk1AiMURD84qSQcK4
WIrPPTdfRk8UjpYzS5my7xasrwyrmJkChCdBX2B8pr8tijfeUqVZmQdBZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEZn5Y0pIbV1b1fbqCZB6vqMSkUMB8GA1UdIwQY
MBaAFCiVTij24BylxzU7w3LzaaX1HZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgt
OTVjZTJjNzU1ZDQ3LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgtOTVjZTJjNzU1ZDQ3
LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmuC9fKf
qho4KvIc75rqP30MVEjsP93F8HDxpDS/LvkSu3bYBzkUmGQuVHSKg3cLUWbrdBLG
uqnZcGeWwQB420YkT4iMKzCvCKLGiGiuUYHnHyGSX5LogfV0w1pVqsvvqO2XzPSX
WOBMD0xu5tdcBgLklEgRVijeRk3AicrZY/1fCFTh5tLlsiIEgYgu4W193RzwEMFk
KJuSG3U4novfsITVk3U2hb8sSHlUc8ca68JOCLLzN81Xx7UVXB0aGUUI6dHWW5XR
kodCDjm6qZLAg+J3AKSe5y74DvhOLhyovfjZLYh2YB42uf5b+U5Okh5uZHpVXZo8
Rr5RtSPvL3ST7w==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:17:21 2024 by rpki-client on console-ams.rpki-client.org