Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File:                     KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier:          CZfBqBrt1wLtyoZnoBSzMMhwSnlEuyOyFgSpnPiBQNM=
Subject key identifier:   A7:15:BB:F3:2F:19:62:6C:3A:3C:7E:2F:11:1A:9D:8B:7B:C0:92:97
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer:       /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial:       01906B2CD08A6BF96CE890D176E07091E5C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number:          0C78
Signing time:             Sun 30 Jun 2024 22:03:37 +0000
Manifest this update:     Sun 30 Jun 2024 22:03:37 +0000
Manifest next update:     Mon 01 Jul 2024 22:03:37 +0000
Files and hashes:         1: 34WalWOVPGCQ66ivekyx5sIFFjw.roa (hash: E+wvJKOwouD+rxlL/RkmmCpbfR2Q3yE/x6lkoJz7c8g=)
                          2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: V++c4AK2qHDj4ARkPl2QIda+t+SwbxGTNegmHzCt8Ng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2c:d0:8a:6b:f9:6c:e8:90:d1:76:e0:70:91:e5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
        Validity
            Not Before: Jun 30 22:03:37 2024 GMT
            Not After : Jul  1 22:03:37 2024 GMT
        Subject: CN=a715bbf32f19626c3a3c7e2f111a9d8b7bc09297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:4c:16:38:7c:0f:37:ae:19:a0:74:83:1c:
                    b0:9e:72:42:b9:29:5e:39:6c:87:ff:70:db:46:b0:
                    33:2e:42:bf:94:8b:24:c8:3f:b5:d7:8a:e6:0e:e8:
                    61:f0:b5:66:70:65:6c:20:84:7c:05:75:e9:01:dc:
                    a4:22:88:38:aa:74:23:db:3d:4f:97:c7:0d:1e:57:
                    5b:7d:51:79:9c:76:f3:22:d7:62:8a:db:a8:54:83:
                    f3:d3:bf:1d:fe:c8:40:ee:22:d9:47:79:e8:45:02:
                    87:f1:66:ef:c2:87:aa:79:84:c5:e2:a9:0e:7f:ef:
                    c9:da:14:f5:ad:0e:28:95:f0:1b:81:9c:c4:bb:47:
                    fc:5d:77:6e:41:83:45:04:68:e4:96:55:f7:35:78:
                    2e:99:a7:20:86:c5:30:4f:1a:55:11:b1:b6:04:34:
                    e1:93:3c:1e:9e:ed:6e:32:ba:2d:dc:79:c3:66:17:
                    af:15:5a:81:91:09:93:3f:a0:06:27:90:05:19:b7:
                    bf:48:fd:fe:c3:d7:15:83:16:67:bc:9d:59:09:db:
                    46:7a:33:85:80:c6:d6:04:03:dc:4b:5f:e4:78:a4:
                    e6:73:39:ef:1f:54:bd:45:2b:12:91:c7:6a:8b:42:
                    81:24:6e:d3:7b:03:a6:55:0f:ff:a2:61:02:2e:85:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:BB:F3:2F:19:62:6C:3A:3C:7E:2F:11:1A:9D:8B:7B:C0:92:97
            X509v3 Authority Key Identifier:
                keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d5:c5:25:e3:f6:79:2a:f7:17:54:16:bd:07:8e:e5:6e:04:
         45:ff:de:ce:23:e6:ae:4c:2e:88:51:d2:20:13:b1:7b:bf:a5:
         f8:20:17:5d:4b:41:13:e0:61:fe:bf:fe:4e:ab:7f:d9:4f:33:
         48:40:2d:26:a5:ba:54:ba:dc:6d:d4:77:c1:15:a3:45:70:09:
         0d:8c:bf:98:04:40:b0:4d:5e:00:63:15:cc:26:08:87:c2:7e:
         ec:f6:8c:36:9b:ce:66:7d:3c:cc:b8:e4:b3:ec:18:27:51:1d:
         56:e8:6e:36:2c:02:77:0e:46:32:eb:cd:93:dd:af:44:47:15:
         50:f6:d2:bf:43:d5:00:e8:57:f4:7e:0d:7a:47:df:90:9a:b0:
         33:b0:f1:72:5c:d6:68:4c:43:83:aa:f6:20:83:26:aa:2b:f7:
         ec:a8:87:85:66:2a:8f:a8:f4:80:ac:7c:11:ce:ad:76:ba:27:
         e3:f2:8c:b6:fb:bb:c4:a0:90:a7:21:33:57:70:7f:c9:24:e5:
         11:e8:39:c9:9c:e7:a5:a3:79:54:cd:3b:8d:25:e8:11:15:ac:
         eb:c1:79:cf:e3:9d:63:57:46:8f:a5:a5:e6:1a:99:74:ce:5b:
         1c:ce:fb:9c:ea:68:70:f2:58:b8:76:1a:9a:bd:f4:db:b8:be:
         ff:e0:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 23:18:54 2024 by rpki-client on console-ams.rpki-client.org