Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File:                     kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier:          eMnnfFcDnKaMW2kL2ilp6yqfDXr75HW/li0wdlqnSUw=
Subject key identifier:   AF:67:BD:2E:8F:E4:3C:90:85:02:6D:5F:88:40:35:53:56:57:6D:09
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer:       /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial:       018F87B607DC02BE70869C015A160DA0FB96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number:          0311
Signing time:             Fri 17 May 2024 18:00:04 +0000
Manifest this update:     Fri 17 May 2024 18:00:04 +0000
Manifest next update:     Sat 18 May 2024 18:00:04 +0000
Files and hashes:         1: J_pS-3hod1niqk_UKiVyDDyxoS8.roa (hash: MCXsYcQlfaOOSOT/b4Ts6cKXvIrIBtOE/xWIkx1r8/w=)
                          2: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: UDi5NbZ7Wuq3zoW2YjpyYNP2VSs/U8KgeZEAIWUc/XU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:07:dc:02:be:70:86:9c:01:5a:16:0d:a0:fb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
        Validity
            Not Before: May 17 18:00:04 2024 GMT
            Not After : May 18 18:00:04 2024 GMT
        Subject: CN=af67bd2e8fe43c9085026d5f8840355356576d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:90:9d:a8:5b:65:54:2f:2f:19:da:ad:f7:
                    3f:6d:87:0a:47:d1:d5:35:29:36:e9:71:84:a1:77:
                    3d:61:6f:b1:f6:3f:8f:a2:b7:a1:82:c8:ce:fa:35:
                    d7:af:0c:c1:c8:e0:ad:e8:dc:61:fc:72:f2:04:9d:
                    f8:95:26:31:f1:1d:99:59:b4:4a:a3:6f:02:e2:44:
                    32:7c:64:63:58:57:3d:8b:17:6f:c8:ee:21:d6:8b:
                    72:52:3b:c5:91:c8:39:86:9e:65:c4:96:dd:5b:d4:
                    48:24:d5:90:5e:36:d6:4d:11:82:11:88:d2:4a:4c:
                    2b:3e:ae:9c:42:5a:cb:78:9e:17:66:50:2a:b0:f0:
                    23:0b:e7:00:eb:5f:d9:05:00:d3:59:95:53:c9:c5:
                    ef:f9:45:df:8e:32:11:3e:d5:e5:87:fa:cc:50:ef:
                    16:8a:9b:e2:63:0c:d8:bf:30:72:f6:cf:3f:a9:23:
                    13:51:14:d5:cf:39:1a:db:07:77:b8:9b:a5:83:4a:
                    70:23:64:43:ab:a7:5e:2f:11:66:0c:f7:38:d7:23:
                    f3:38:d4:e2:2a:39:d4:fe:af:a0:a6:f4:eb:89:0c:
                    0d:0d:1f:d5:51:e5:7c:4d:1e:05:18:44:35:50:9c:
                    74:57:7b:d3:83:56:65:ed:53:91:6d:80:fb:c0:82:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:67:BD:2E:8F:E4:3C:90:85:02:6D:5F:88:40:35:53:56:57:6D:09
            X509v3 Authority Key Identifier:
                keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:97:03:dc:6f:40:63:37:4a:18:c6:1a:8d:6a:b3:e8:b3:
         0a:92:0a:a4:c2:fb:e4:67:9e:1b:22:df:0c:5e:55:cc:3a:1c:
         67:87:d1:b2:99:f1:59:8a:e6:f8:76:c1:ec:42:3d:b0:05:db:
         ae:53:de:3e:4f:fc:ee:97:3d:37:d2:ac:d6:97:bf:96:15:70:
         10:3a:dd:38:bf:69:a8:cd:2d:f5:05:3b:3b:37:18:e3:ab:51:
         e7:25:41:79:03:1d:c0:7f:e2:40:4e:4e:d3:a6:88:12:02:95:
         73:30:73:b1:93:31:75:e3:b2:dd:2a:08:af:16:c3:b7:23:93:
         be:77:56:26:59:07:e5:75:02:8c:8d:ff:39:13:bc:1d:50:b8:
         fb:e5:61:03:bd:4e:8c:86:b9:ed:e3:5d:4a:6c:78:5a:80:ea:
         79:fc:d3:fd:29:2e:05:2f:40:7f:6e:7d:79:13:5e:8a:2c:36:
         41:99:de:eb:20:c8:fc:dc:f2:de:15:f1:54:58:92:94:b8:ca:
         12:eb:fe:88:c4:8e:13:36:2e:ea:75:15:89:a4:29:36:f1:6f:
         d5:1c:ec:3f:22:a7:42:7d:ff:e7:ec:86:ef:83:7c:61:a6:af:
         81:65:05:6e:50:2f:2d:6d:2f:bc:c1:0d:30:08:ec:83:02:21:
         62:b3:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:37 2024 by rpki-client on console-fra.rpki-client.org