Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
File:                     KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json)
Hash identifier:          X0MxqaaBQBKUGIFBYw5AZBT/RMxEqy02zvlnKX9cxGo=
Subject key identifier:   92:62:14:3C:FC:D2:2A:59:3A:93:BB:7B:E2:21:31:66:2C:24:0E:43
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Certificate issuer:       /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial:       018F871145A1B4B800113A95BBC7EB40F00E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
Manifest number:          FD
Signing time:             Fri 17 May 2024 15:00:07 +0000
Manifest this update:     Fri 17 May 2024 15:00:07 +0000
Manifest next update:     Sat 18 May 2024 15:00:07 +0000
Files and hashes:         1: Dic1dtqj3FXNBiLZQ0zWEfamTbk.roa (hash: KLJFWsmzj/fin+zKMExrFIc3Q1K8IrJad5FbhVVqCHs=)
                          2: GLz4AV49UQIjgMDQ9ecaNiR4QU0.roa (hash: vNGrCnC5pYYZnYGphPPMEBcpIiCud/3sSn1a3L7hlxk=)
                          3: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: McdEH8rRRFO79euJ0qgi5geyWWuGKxmMoRh3N/EZBWk=)
                          4: YNkLywXoRtaOnDZMtXd34ZsOdJw.roa (hash: SkTU0pD+MT77uv/VQXWZIfFu+VWbSU6bQSq2AXb8uqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:45:a1:b4:b8:00:11:3a:95:bb:c7:eb:40:f0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
        Validity
            Not Before: May 17 15:00:07 2024 GMT
            Not After : May 18 15:00:07 2024 GMT
        Subject: CN=9262143cfcd22a593a93bb7be22131662c240e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:ae:ff:0b:13:e1:3b:e0:6d:88:e6:28:d3:
                    c0:8d:62:8e:32:42:7a:61:fc:2f:49:e4:3e:c7:c3:
                    57:1f:fd:0d:03:c4:f7:df:89:13:1f:64:00:bf:45:
                    80:a3:43:b5:1e:12:8f:af:79:db:53:bb:0a:76:9c:
                    d2:88:fe:ff:d2:fa:2f:1e:1f:1d:b1:9c:5f:cf:fe:
                    06:9e:4e:4b:a1:73:ed:33:ad:bc:a9:98:99:a8:02:
                    d6:d3:6a:41:aa:35:0d:3a:c6:ac:c5:4c:61:1c:eb:
                    32:7e:ec:1c:c6:e3:c0:85:c7:de:06:f8:9e:2e:04:
                    43:f1:2f:a3:7f:1c:07:01:71:e8:ef:ca:91:ed:a8:
                    72:86:08:78:e8:3f:1d:ea:dd:da:4d:9d:43:56:7b:
                    6d:36:5c:0b:3e:7e:68:dd:2d:bf:27:78:4c:b4:89:
                    da:c8:ee:b0:07:41:63:99:94:41:a8:cb:af:c4:41:
                    12:e5:5a:c9:9e:6a:a8:e8:a2:2c:12:98:e1:86:03:
                    2e:76:f3:8c:1c:27:95:b7:5e:05:2c:b2:a1:b9:65:
                    0e:8f:a7:88:f9:cd:c2:0a:e8:f3:fe:3c:e6:a8:26:
                    2d:73:28:96:97:c5:a8:54:f5:5d:c8:d0:bc:89:cd:
                    46:6a:af:32:2b:1f:83:1a:5c:f7:5a:35:71:d8:7c:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:62:14:3C:FC:D2:2A:59:3A:93:BB:7B:E2:21:31:66:2C:24:0E:43
            X509v3 Authority Key Identifier:
                keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:cc:fb:9d:0b:d4:3e:d5:c8:2c:02:9f:85:ef:50:5d:6a:76:
         b6:e7:81:1e:b6:4d:fb:c5:1f:7b:59:a6:8b:10:c9:63:f4:d4:
         08:49:01:22:d3:c3:40:14:40:bd:07:9e:20:87:1a:1b:90:b4:
         e4:f0:d2:76:2c:1b:b9:bb:11:2f:9d:26:cf:2c:ec:e6:a5:34:
         68:81:da:30:d4:d5:bc:68:68:2e:4b:17:e7:7e:05:a2:d9:44:
         9f:d0:ac:0b:d9:10:8d:61:5c:78:52:a6:17:e5:e4:6f:b2:b6:
         81:92:5e:46:32:30:4b:2b:c7:82:39:d3:72:d7:d0:51:ef:8f:
         46:77:57:78:83:89:9f:0e:bc:72:fe:8a:5a:84:40:60:23:fb:
         51:0f:1e:8c:dc:32:ea:52:e1:61:ed:65:27:41:2c:ff:1b:31:
         d0:be:3a:30:f3:c3:4b:7c:b0:3d:88:8e:da:22:dd:cb:93:f9:
         32:e2:c4:4b:05:2c:df:30:84:6e:33:94:57:90:33:e8:33:2e:
         6c:fb:32:ce:ca:0c:17:70:f0:f1:01:92:f7:9c:05:9a:4d:e5:
         29:a1:a6:67:be:05:2f:a6:58:74:d5:b7:22:6c:19:d4:22:a5:
         b8:8f:84:f2:f0:7b:3c:65:64:cf:59:00:17:5d:25:01:6b:79:
         75:98:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:33 2024 by rpki-client on console-ams.rpki-client.org