Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File:                     KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier:          z8JpkxWw4ch+bwAdcNQ8nqQxrvuaxinhiru9pEUIUC8=
Subject key identifier:   C8:DE:C7:8B:2A:A6:0B:F1:92:8F:6E:CF:D0:0C:E3:7A:0D:AD:60:C0
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer:       /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial:       018F874B11BF835ECE387C2EA0038B5A9953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number:          0D65
Signing time:             Fri 17 May 2024 16:03:14 +0000
Manifest this update:     Fri 17 May 2024 16:03:14 +0000
Manifest next update:     Sat 18 May 2024 16:03:14 +0000
Files and hashes:         1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: LNuSI2GzgpZE2jzE5hMj9s0Xj/s1MLF/QlMLfcNjbfA=)
                          2: zAlwyJLQJlEzsYUX_jVI23cr_Oc.roa (hash: iUHXYf3qyjRe6F3kjZlzTrLtdkLmE6qo0y61Wo+VWPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:11:bf:83:5e:ce:38:7c:2e:a0:03:8b:5a:99:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
        Validity
            Not Before: May 17 16:03:14 2024 GMT
            Not After : May 18 16:03:14 2024 GMT
        Subject: CN=c8dec78b2aa60bf1928f6ecfd00ce37a0dad60c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:88:82:c7:8d:c6:65:6b:b9:1e:82:0a:c1:
                    a4:86:20:25:ff:f3:37:0f:65:1a:4b:5e:e8:14:77:
                    be:77:c1:c1:fa:42:f3:02:63:64:71:ed:58:30:56:
                    21:1b:5b:25:36:40:21:f1:68:f9:65:8c:22:e6:38:
                    6f:d8:4b:e4:5a:86:70:1e:ee:4e:2f:9f:6f:7b:1e:
                    5c:f0:42:d4:31:79:67:c9:83:9a:38:6c:89:db:e7:
                    25:57:2a:a5:62:07:25:67:e1:61:60:08:55:16:89:
                    97:76:22:a9:87:5e:5c:11:f9:9c:76:14:8a:e9:51:
                    20:0c:6a:7a:d9:d8:ec:5f:c5:af:46:36:b7:87:76:
                    d5:a6:1d:91:2b:b8:b7:84:0f:d5:8d:2b:8c:7e:dd:
                    da:2a:32:8a:52:21:8d:5d:1b:b9:0f:23:88:ec:6b:
                    a1:c0:c1:69:eb:49:ca:61:b9:94:7c:cc:0f:8a:48:
                    24:a7:d6:65:ad:0a:f2:47:33:cb:93:a7:95:db:4a:
                    6b:09:c6:73:6a:6b:f0:30:d6:71:d6:44:d6:89:3c:
                    2a:d7:b6:e0:d7:de:7f:5b:9d:f6:35:99:1c:6a:85:
                    83:0b:b3:08:79:c6:5a:b5:ac:44:4f:0d:6c:2d:80:
                    99:5f:43:19:70:bb:90:b2:74:8a:75:a5:da:41:24:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DE:C7:8B:2A:A6:0B:F1:92:8F:6E:CF:D0:0C:E3:7A:0D:AD:60:C0
            X509v3 Authority Key Identifier:
                keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6a:a3:c0:71:a1:71:ba:ec:66:14:89:aa:2d:f1:4b:f9:25:
         0a:b1:8c:07:6a:45:2f:35:3c:73:02:94:8a:6a:40:a3:ac:99:
         8f:38:4a:5d:d1:5d:46:7e:16:66:a9:eb:7b:d2:75:ab:6e:ec:
         53:4b:07:9c:4f:3c:5f:be:89:61:a9:0f:21:d5:f3:57:30:3f:
         72:3d:4d:fc:62:bc:42:d2:62:6d:b0:64:2e:1e:79:5e:eb:ce:
         ab:de:d8:78:2d:54:80:3c:5b:e6:1f:75:17:12:7b:57:7f:85:
         f9:7c:48:d0:8a:f1:cf:ce:00:e2:9e:8c:13:19:58:4c:69:a2:
         11:1d:5a:4e:a6:e0:d8:ce:53:7d:66:90:8b:10:b2:89:18:a2:
         b5:e2:d8:14:1d:ed:84:0f:8b:f4:02:e7:09:13:d2:72:25:2a:
         37:bc:c7:5e:28:3c:61:d9:99:94:4f:34:da:b5:f3:91:94:69:
         59:8a:ea:d7:b3:aa:af:05:ef:00:ad:7a:94:dc:0e:41:3d:f1:
         82:e4:ca:46:b8:00:1a:c2:8d:b0:eb:5c:e3:d4:37:17:02:d4:
         47:f0:cf:4e:75:57:36:dc:9a:28:5a:3e:60:95:f9:ef:0c:16:
         e1:93:eb:3e:52:69:52:5e:41:d1:2a:88:68:9d:bf:00:25:1b:
         34:9f:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:38:36 2024 by rpki-client on console-fra.rpki-client.org