Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
File:                     pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json)
Hash identifier:          903otPmdfr7PBS8w0nevL5/jO4Yxl4g2/u3R2kbT1mo=
Subject key identifier:   69:A1:8E:7A:A4:F4:35:57:74:75:E3:89:9E:67:6C:36:D3:9A:1D:00
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Certificate issuer:       /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial:       018FB26A6476B5FC5AEC242E376B783D6727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
Manifest number:          118D
Signing time:             Sun 26 May 2024 01:01:07 +0000
Manifest this update:     Sun 26 May 2024 01:01:07 +0000
Manifest next update:     Mon 27 May 2024 01:01:07 +0000
Files and hashes:         1: D0GxtAQGtf0PtTuC9BvY0X3CfPI.roa (hash: io9awGDaSI2F3j3lYq6dyEBMZ2N1UBN3ar287HiAHyE=)
                          2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: 7s9WQ2ppbALumVGDsdk+Pp8oT2RYpJ4eYdVMimxpkqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:6a:64:76:b5:fc:5a:ec:24:2e:37:6b:78:3d:67:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
        Validity
            Not Before: May 26 01:01:07 2024 GMT
            Not After : May 27 01:01:07 2024 GMT
        Subject: CN=69a18e7aa4f435577475e3899e676c36d39a1d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:66:1c:37:ef:8b:c1:5c:3d:93:ef:6b:59:
                    6d:d9:3a:74:a9:80:ec:4c:ad:be:d2:26:16:d9:ba:
                    5d:5f:fc:39:69:be:c6:29:9c:ec:08:83:93:01:14:
                    98:17:b5:0e:14:a2:9a:ad:5a:78:a2:da:cc:bc:3a:
                    6d:28:76:91:a5:6a:bd:ac:4b:7c:a6:4e:97:28:cb:
                    04:03:78:1d:36:36:34:f3:90:66:d1:2c:56:dd:ba:
                    18:84:c9:08:6c:c4:74:e6:d8:9f:c9:fd:66:17:78:
                    c0:a5:71:49:d5:bb:74:ca:71:82:eb:b3:fb:9a:35:
                    e2:df:43:aa:76:a5:a2:65:c3:95:28:64:5c:03:5d:
                    e8:76:ba:5b:37:d9:f0:be:18:af:fe:55:78:e6:d3:
                    83:9a:c5:04:8b:ca:33:4c:56:c9:7f:be:d0:50:4c:
                    62:34:6a:fc:b4:da:08:4a:39:80:f1:9c:c2:9a:a8:
                    e8:19:0b:d6:74:f5:a3:15:80:38:98:53:6d:5a:ca:
                    c0:ac:78:cb:0d:5f:71:22:ec:d2:4b:65:34:76:b3:
                    bd:d0:22:18:e1:9f:85:af:92:ba:94:db:a7:e6:b3:
                    6f:bb:6a:15:62:33:01:9b:6d:1c:1a:e7:1c:22:5b:
                    d4:8b:94:af:92:14:ab:7a:2f:e9:55:f6:c8:f6:7f:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A1:8E:7A:A4:F4:35:57:74:75:E3:89:9E:67:6C:36:D3:9A:1D:00
            X509v3 Authority Key Identifier:
                keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:3b:fb:4f:ea:e5:3c:af:85:2b:e8:b8:8d:59:57:36:34:
         b7:20:f4:98:83:c7:7c:24:a5:bd:ac:c8:56:5d:f8:2d:aa:48:
         a1:62:04:da:0a:5a:e3:83:f7:0b:1d:cd:70:2c:7c:aa:2d:63:
         2b:26:66:f2:05:e9:8c:f2:ba:29:43:1e:8e:b0:3e:a9:9a:37:
         be:3e:04:a4:ca:aa:13:76:39:f6:11:2d:58:f7:f6:b5:1a:1c:
         3e:5f:80:07:8b:91:37:71:c8:5c:d3:46:5b:10:8d:bc:81:19:
         f5:02:c4:e6:75:75:f5:9d:f0:d4:d8:fb:59:3e:f5:05:d7:bc:
         1d:85:7d:70:16:28:b5:02:8b:33:e3:9d:0e:87:e0:54:31:27:
         32:b9:b4:f3:1b:d4:3e:a1:73:f6:47:d3:af:1e:f9:67:85:0e:
         26:da:58:36:8d:75:7d:e8:d2:d3:10:40:78:70:0e:c4:66:d8:
         32:fe:39:7e:b1:d2:e0:f7:a5:e4:eb:7c:d8:b1:5c:f5:4f:3d:
         6d:6d:40:f9:4e:fe:dc:41:98:44:2c:d4:11:d5:d8:b2:d6:19:
         b8:90:38:2a:24:b9:73:44:69:5a:95:9d:79:be:b3:7f:e7:d1:
         2e:30:27:94:f8:e8:da:22:b6:9a:af:ee:98:85:84:34:ef:16:
         c6:1e:ef:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:59:34 2024 by rpki-client on console-ams.rpki-client.org