Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File:                     kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier:          o91zdagSrlv34hL7IIzAJ607XxI6VRneSkthrdsA1LQ=
Subject key identifier:   9E:CD:52:E2:DF:EB:BC:FC:94:BE:11:E6:99:D6:60:D8:8F:3A:9A:E1
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer:       /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial:       018F8748DE5932D70F4E3DED41BA4B5C20EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number:          0513
Signing time:             Fri 17 May 2024 16:00:50 +0000
Manifest this update:     Fri 17 May 2024 16:00:50 +0000
Manifest next update:     Sat 18 May 2024 16:00:50 +0000
Files and hashes:         1: gz1neCZ7yaZGLOZTRpS6_DqN568.roa (hash: /gJWKD/YvuKj3Q1J82zlj7LirC9h8rd/TIzu9wVRH7c=)
                          2: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: qTNBw83U2/wFI2b+hUvje7nJaWlNbO7Wqwa1lorsaKM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:de:59:32:d7:0f:4e:3d:ed:41:ba:4b:5c:20:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
        Validity
            Not Before: May 17 16:00:50 2024 GMT
            Not After : May 18 16:00:50 2024 GMT
        Subject: CN=9ecd52e2dfebbcfc94be11e699d660d88f3a9ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:86:28:ee:e5:ec:92:10:12:8d:59:77:86:
                    1d:79:a8:63:b9:5e:aa:32:06:f9:d0:00:82:26:02:
                    e3:e7:16:87:a9:75:8d:34:67:9d:0a:5a:ac:98:18:
                    ad:5c:d4:cd:cc:7a:c7:13:a3:04:91:10:47:76:bf:
                    ba:d4:0f:7f:1b:c4:07:dc:c2:57:6c:45:68:79:e6:
                    6a:8b:2e:05:0a:9a:59:a7:d9:85:e9:8e:5a:80:0e:
                    1e:3c:4b:c1:b8:7f:c5:3a:54:5d:ca:92:9a:a9:fd:
                    0b:c4:fd:47:c0:2b:e0:2b:22:4d:35:2f:48:f7:53:
                    4a:b6:55:ad:1a:65:66:51:42:65:a3:07:36:0b:dd:
                    f5:71:57:02:2b:d3:cf:53:bc:4f:8c:3f:f2:66:4a:
                    2d:dd:5a:da:56:71:78:8d:20:70:d7:6d:0b:c2:aa:
                    34:6e:1f:8b:46:41:5b:60:5e:d9:e2:22:b9:b5:84:
                    ab:84:c5:aa:32:1d:a6:a1:de:30:e7:98:d1:c8:32:
                    ee:22:90:17:bf:79:0a:80:18:7d:ee:99:1a:62:96:
                    5d:da:81:76:6a:e8:24:06:7e:20:7f:37:90:98:0c:
                    96:7f:e3:a2:bd:c4:98:78:f6:9d:18:24:23:51:cc:
                    82:49:b3:e7:5c:99:43:22:61:a2:7a:19:2d:44:ad:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:52:E2:DF:EB:BC:FC:94:BE:11:E6:99:D6:60:D8:8F:3A:9A:E1
            X509v3 Authority Key Identifier:
                keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:99:c4:d7:ab:e5:31:23:e1:7d:92:78:1c:0c:8a:3c:a8:
         58:da:6e:eb:b8:4c:0d:8b:c8:2f:7c:bc:13:2d:ba:e7:20:a2:
         fb:84:02:55:27:38:ea:5f:08:9a:95:62:32:68:04:2f:31:71:
         78:ca:54:73:55:fd:ee:69:36:f5:68:f1:3b:b2:bd:80:5a:ab:
         9e:ba:d7:b5:ed:44:31:fd:59:ed:5b:67:18:97:63:d3:0a:bf:
         5d:81:50:79:f8:eb:c6:cd:b2:79:cb:a7:92:2f:3d:92:08:78:
         4d:4c:54:0b:dd:0b:d6:78:14:3c:f4:67:10:d8:96:e5:b1:8d:
         f1:96:6a:65:15:ec:8e:73:fa:a5:12:28:0d:bb:f4:04:17:dc:
         84:df:01:41:d2:af:e9:da:2c:03:08:ea:cb:ea:e8:82:1a:57:
         e4:f1:69:c9:95:34:11:d0:7c:54:d8:2c:03:7a:f3:4c:83:7e:
         f2:21:1e:53:10:60:3a:da:10:38:84:55:c7:a7:ec:8f:15:c8:
         b5:7a:87:72:1e:24:6c:2e:ec:08:26:77:0b:59:15:a7:b3:e0:
         07:9b:ad:86:10:04:1c:31:ee:b9:e1:24:8e:32:01:7b:69:2f:
         38:a9:b3:49:9d:d5:ca:c2:5f:88:f8:bb:55:be:5d:bb:81:d1:
         44:55:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:28 2024 by rpki-client on console-fra.rpki-client.org