Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
File:                     KYm1iRINOeoU_1OWO_IxV9Mkleo.mft (raw, json)
Hash identifier:          v9+Tnjs2gVK+PVy40jG3Qd3t8MuqnQcEuhGaEzfivwo=
Subject key identifier:   29:05:8A:8E:DB:88:1C:86:D6:7D:BC:7E:41:76:5F:76:BE:FB:8D:6D
Authority key identifier: 29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
Certificate issuer:       /CN=2989b589120d39ea14ff53963bf23157d32495ea
Certificate serial:       018F8749DE8A53FD100C1E4E7EB074F202FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:56 +0000
Manifest this update:     Fri 17 May 2024 16:01:56 +0000
Manifest next update:     Sat 18 May 2024 16:01:56 +0000
Files and hashes:         1: KYm1iRINOeoU_1OWO_IxV9Mkleo.crl (hash: VbICCF+WbK7HDEQxAlABYDyRcUnPEPn1PB/GcZRBORg=)
                          2: hxvqiu5LinXGS2qaHQyKf-cF4vk.roa (hash: XWSwIo4PFCngWctJrJ/wBxrXOrppItCSdQng+cqQftU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:de:8a:53:fd:10:0c:1e:4e:7e:b0:74:f2:02:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2989b589120d39ea14ff53963bf23157d32495ea
        Validity
            Not Before: May 17 16:01:56 2024 GMT
            Not After : May 18 16:01:56 2024 GMT
        Subject: CN=29058a8edb881c86d67dbc7e41765f76befb8d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:fd:2d:b7:ae:f9:a0:70:f2:80:27:ec:23:
                    cd:35:60:1b:57:8f:85:dc:fc:a6:37:d6:fd:b1:61:
                    6f:6e:73:af:b5:1c:9b:0d:7f:3f:bb:53:e5:a3:af:
                    50:97:07:01:cd:6b:2b:f1:01:17:a2:df:e1:83:25:
                    64:3c:90:56:77:99:de:6a:cc:fa:3d:a7:8a:5f:26:
                    47:8f:85:0a:12:c9:59:86:24:68:5c:ba:a7:02:ab:
                    c0:cd:2a:bc:5b:2b:e6:c2:b5:4c:b0:3b:c9:fb:28:
                    23:3c:31:ea:03:7b:17:b8:39:84:47:a5:a7:ff:1f:
                    17:9f:a1:70:10:01:22:71:6a:fd:53:79:15:2b:27:
                    27:f4:47:2c:84:c1:d8:07:65:40:2c:cd:2d:61:a9:
                    4c:29:1f:b5:b9:fc:5f:7d:85:45:6c:70:12:8b:6f:
                    b8:c0:98:22:37:aa:59:12:66:1c:82:18:13:f9:cb:
                    d2:e6:70:9e:b6:6d:3c:14:a8:50:a2:7c:0e:0d:00:
                    15:55:34:29:15:8a:76:bf:f5:ac:20:55:ee:73:bc:
                    77:ad:a4:5e:06:bc:a0:e9:aa:81:cf:c7:3d:86:ad:
                    1d:ac:78:71:34:4a:4d:b7:d9:a3:54:df:95:2e:c7:
                    f1:55:bf:ad:ac:79:48:1f:83:6f:c5:b9:eb:e1:8a:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:05:8A:8E:DB:88:1C:86:D6:7D:BC:7E:41:76:5F:76:BE:FB:8D:6D
            X509v3 Authority Key Identifier:
                keyid:29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cc:3b:ff:65:aa:2c:0e:a9:de:9d:27:56:ab:d9:4b:2b:57:
         f9:e1:b5:a1:1b:d2:ab:56:94:a0:e8:2f:e8:12:3c:bf:de:f1:
         9b:b9:bc:39:f0:d7:c0:6e:4f:22:70:49:51:b4:d6:f4:85:99:
         03:a5:ec:2b:a6:64:e3:fd:68:cf:da:a8:e6:18:54:f6:eb:0d:
         84:b2:b0:e1:3f:c5:74:71:3e:4c:b8:26:8f:7d:2a:59:1f:df:
         48:cf:20:02:e0:cc:6e:e8:21:b8:5f:5d:8e:ea:e8:7b:90:54:
         fc:20:99:af:31:a9:02:37:a1:b2:c5:94:d4:f7:fd:fd:00:9a:
         80:a1:52:6f:1e:1f:f7:97:47:d0:ff:2c:02:76:f5:ed:f7:c6:
         00:e4:fb:56:09:4b:fc:fa:6f:16:a6:04:e0:c6:10:82:40:51:
         5c:13:02:0c:e6:65:9e:25:d3:97:51:af:a3:81:91:e8:90:02:
         d2:83:5d:ec:7a:65:88:42:30:f9:33:fa:92:87:78:29:4e:b4:
         cc:e0:05:9c:c3:b6:90:d8:f9:17:db:f9:d8:49:8f:11:d7:b3:
         47:36:f9:e6:0d:77:72:e8:4b:02:5b:fb:ee:86:c2:ff:c5:ad:
         98:b5:18:ec:dd:34:1e:0f:c6:6a:be:df:7f:fc:c2:2f:52:9d:
         6f:94:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:35 2024 by rpki-client on console-ams.rpki-client.org