Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File:                     KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier:          nB6FEb9S4FI3H0r6sep8aSQ5fvIfUU+AaH7TUMOcSNs=
Subject key identifier:   15:3E:8F:D5:4D:65:E5:87:52:9F:D4:7C:73:E8:B1:B2:68:70:5B:39
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer:       /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial:       018F87B62667D28951E2B48CC79C4CED0570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number:          10C4
Signing time:             Fri 17 May 2024 18:00:12 +0000
Manifest this update:     Fri 17 May 2024 18:00:12 +0000
Manifest next update:     Sat 18 May 2024 18:00:12 +0000
Files and hashes:         1: FkWuQgtFTvG2U99urJSNKZJDqN8.roa (hash: 7ABCe7gunZNeeEfEwcUJR3Dl7Iu8T+KempoSKst3Kyk=)
                          2: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: Pqv3FKRo5Qpj4aMSDU9QcpkSzvZHQB5BpJBT+wVRt1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:26:67:d2:89:51:e2:b4:8c:c7:9c:4c:ed:05:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
        Validity
            Not Before: May 17 18:00:12 2024 GMT
            Not After : May 18 18:00:12 2024 GMT
        Subject: CN=153e8fd54d65e587529fd47c73e8b1b268705b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:60:0b:a5:0a:05:3d:f2:e3:d0:5a:6e:b4:
                    93:c5:92:b2:2f:b6:99:74:74:98:ad:1d:9d:e9:b4:
                    d7:d6:bb:60:75:6f:c2:66:36:fc:a8:be:59:87:9d:
                    ab:d4:02:ca:1c:82:c1:bf:fd:2c:cb:af:e2:c4:e7:
                    d8:00:a9:0e:fb:8b:bb:90:83:c4:54:ae:7c:5c:4a:
                    5f:90:69:5e:d9:7e:ee:d2:e0:ec:4a:2b:4b:bd:4b:
                    6c:18:9d:85:87:54:97:51:75:0c:7e:11:02:ba:9d:
                    de:bf:fd:52:b8:07:79:f7:fd:99:a1:e6:08:73:4a:
                    84:bd:bb:f9:49:a7:fe:c7:99:38:9c:f9:08:bf:9f:
                    3a:94:38:79:9b:35:d2:5f:c0:f2:d0:c6:97:ed:60:
                    88:57:e5:f7:38:a8:ef:26:3f:9f:18:b9:27:d9:4c:
                    0a:2c:6a:27:eb:b7:59:be:24:33:13:05:55:68:90:
                    fa:35:24:a5:4c:8d:2f:c8:01:0a:73:1c:d9:ea:5b:
                    1d:95:c2:5e:63:4b:a0:25:86:fa:4d:ac:23:d3:ef:
                    89:25:e3:d6:7f:44:ae:b7:2d:32:34:8b:d8:3b:f5:
                    64:23:4c:5b:6c:5e:77:9a:72:b1:3d:2e:40:80:28:
                    de:e9:a8:45:d9:b2:e5:34:80:54:5b:3d:ec:40:d4:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3E:8F:D5:4D:65:E5:87:52:9F:D4:7C:73:E8:B1:B2:68:70:5B:39
            X509v3 Authority Key Identifier:
                keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:17:77:72:61:9b:b3:98:85:20:6b:3b:37:40:91:c2:f6:1f:
         d4:ff:33:5c:84:1b:77:11:15:73:a2:e3:36:32:18:32:ac:1b:
         59:bb:81:bb:0f:61:b8:1e:4d:a2:86:d4:91:bc:4c:94:d1:4f:
         ed:33:ce:27:ff:9f:75:97:d6:a4:45:3b:59:b7:21:57:95:e5:
         c0:13:39:45:69:ba:b6:81:b4:ce:52:fc:e3:0e:58:d9:b0:95:
         88:83:c2:0f:5a:f8:e9:fe:ae:ee:68:81:5d:52:fe:e9:25:44:
         bd:d4:7a:3f:23:cc:83:31:77:04:df:cd:43:a9:9d:f8:ce:9d:
         ac:51:67:2d:0d:18:fc:01:70:e2:fc:c9:65:3c:08:70:be:67:
         78:13:44:95:75:82:2b:56:29:9a:7e:12:6e:5f:69:94:e6:0d:
         f7:ef:f8:db:6f:c8:ee:d0:39:85:27:8c:7d:be:1b:20:85:68:
         9a:bc:10:b9:41:af:7e:0f:41:17:50:e4:e3:9f:2e:f7:9f:a6:
         47:3e:5d:0e:07:be:a5:d1:0d:76:c3:89:2c:4c:fa:7d:73:33:
         88:37:e0:55:e3:26:6b:65:90:fa:c9:52:2f:23:10:0e:30:d0:
         75:38:f9:89:ba:e8:e5:81:84:96:da:d5:da:57:ab:e6:8b:c9:
         bb:20:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:39 2024 by rpki-client on console-ams.rpki-client.org