Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File:                     KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier:          YYA2WnejV20Dlb0oH0jmy4l5VNGAuahWdh5VbId80lI=
Subject key identifier:   0C:3C:28:E1:58:E6:7F:D8:6F:E8:76:6A:DA:5E:14:78:52:4A:0C:8A
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer:       /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial:       018F59CBA58F5118B4A5C76D76E6597CAF38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number:          025C
Signing time:             Wed 08 May 2024 20:01:09 +0000
Manifest this update:     Wed 08 May 2024 20:01:09 +0000
Manifest next update:     Thu 09 May 2024 20:01:09 +0000
Files and hashes:         1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: kJi4D/tJnVsnOhCZs8CSbYlCW6ARRIrAUl7AWQSMgJ8=)
                          2: vAouYBCFeyDmySpeNAjeknivPWk.roa (hash: DCgfOeSOEd7mTa2vvDpWDLEb5XCgrRbcoX3s6CIdZHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:cb:a5:8f:51:18:b4:a5:c7:6d:76:e6:59:7c:af:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
        Validity
            Not Before: May  8 20:01:09 2024 GMT
            Not After : May  9 20:01:09 2024 GMT
        Subject: CN=0c3c28e158e67fd86fe8766ada5e1478524a0c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8d:b8:b5:36:ae:7f:41:f5:e3:a5:fe:9a:2a:
                    e6:e7:2b:b5:bc:3c:47:11:d5:95:09:c2:8d:55:fd:
                    af:be:c0:ba:30:2b:54:4b:91:c9:3f:14:48:95:fb:
                    38:bf:3c:71:3c:cd:d7:9c:ec:20:e6:4d:6a:d3:c4:
                    36:d6:76:77:28:26:f5:e8:9f:d5:e8:5f:c9:b2:53:
                    c7:6f:41:96:cd:76:72:b9:28:23:06:a5:7f:d9:0a:
                    19:60:c8:fa:8d:7d:a7:06:91:02:54:c1:c2:cf:9d:
                    fb:a5:57:76:79:ea:e7:bf:35:d4:5d:fa:f9:2b:5d:
                    d4:71:46:06:44:b9:19:e5:6b:0d:92:83:da:e1:7c:
                    ca:17:8a:52:07:43:db:a9:59:47:62:01:ac:c6:75:
                    43:5f:52:a6:58:a3:f5:54:5f:4e:89:70:45:78:55:
                    c0:63:9d:57:ba:d7:4f:9b:b2:dc:8a:29:99:14:b3:
                    ae:94:2e:17:ec:7a:f6:2c:24:74:98:01:6c:e6:9f:
                    16:e9:f4:7f:dd:b7:5c:73:1d:ea:5d:c2:b3:59:49:
                    3e:3c:4d:3b:42:ca:6e:f0:88:30:e2:82:97:58:bf:
                    08:cb:19:0e:48:a9:c1:e9:56:3f:84:71:20:5f:4c:
                    79:94:b8:dd:77:aa:b7:45:e6:88:88:ef:d3:14:c4:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3C:28:E1:58:E6:7F:D8:6F:E8:76:6A:DA:5E:14:78:52:4A:0C:8A
            X509v3 Authority Key Identifier:
                keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6e:02:ce:10:9b:19:b9:c0:11:d2:ec:e3:5c:ac:76:06:c1:
         47:e2:9b:11:b1:ff:18:76:b6:56:ab:94:f0:52:48:2a:ff:a0:
         ea:25:62:98:66:9c:1d:1a:e3:0d:1f:ce:e8:ab:15:5d:26:09:
         42:fa:c0:51:91:46:9c:fe:36:77:16:b7:b5:75:8a:53:4e:8c:
         f7:9a:5e:d5:05:e2:69:7a:fd:e8:4d:41:e4:46:fa:43:db:33:
         d7:8a:02:66:ab:97:9d:00:b1:ba:85:c5:63:3e:15:32:fe:da:
         86:82:a2:b5:de:52:01:f8:5a:32:88:86:e8:df:20:e7:2f:d3:
         3c:e8:71:12:5a:6d:65:fd:85:19:45:b1:1e:ad:65:52:51:d2:
         13:7c:c7:61:90:2a:c3:20:04:dd:80:80:a0:17:d2:c8:73:d6:
         de:3d:74:c6:04:f2:e5:97:68:ec:d4:b5:5e:eb:f1:48:2b:db:
         a2:1f:94:66:36:24:23:bb:81:11:a9:f4:cf:b9:ed:6c:a2:2c:
         b7:87:d1:99:37:e0:00:7e:14:9f:2f:d2:32:af:4e:92:50:b3:
         7f:5a:65:5f:45:f9:18:18:1d:fd:35:52:72:28:c0:79:95:79:
         84:c5:28:34:c1:75:c2:46:c3:cf:f5:2b:f2:60:6d:87:c8:c1:
         f9:54:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:39:28 2024 by rpki-client on console-fra.rpki-client.org