Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File:                     KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier:          JmATGOL232vT2UQctyq2LYVoKEoLKeILQIUD9KiCIak=
Subject key identifier:   8A:D5:46:CD:AE:71:3C:59:81:B2:FF:9C:EB:CA:12:37:E6:CC:C5:72
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer:       /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial:       018F874A9EB14B3BC898A07D4012FB22FB67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number:          0B98
Signing time:             Fri 17 May 2024 16:02:45 +0000
Manifest this update:     Fri 17 May 2024 16:02:45 +0000
Manifest next update:     Sat 18 May 2024 16:02:45 +0000
Files and hashes:         1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: 0kDIx+v/lQ3R1+iXUWc+G/7IfOk63ZnfJq6k9j37mjE=)
                          2: vX83YQ5vkwYraUg8VxFXDRWyhpo.roa (hash: 1AYjgK9Zm4xI2RYHcK0pubrtB3/FxzWGObHJwFaWCKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:9e:b1:4b:3b:c8:98:a0:7d:40:12:fb:22:fb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
        Validity
            Not Before: May 17 16:02:45 2024 GMT
            Not After : May 18 16:02:45 2024 GMT
        Subject: CN=8ad546cdae713c5981b2ff9cebca1237e6ccc572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:97:e8:8d:1c:fb:f0:a5:5f:63:ff:4c:ce:
                    42:89:d1:b6:b2:bb:62:7e:72:c9:1c:76:a6:9a:c8:
                    9e:19:27:8d:e4:1e:24:33:62:b8:3e:5a:b8:18:9b:
                    60:5d:08:e9:f8:69:68:50:ba:7e:42:e0:5b:aa:45:
                    de:32:5b:40:9a:b0:2a:60:c8:c4:8b:f7:85:60:4f:
                    78:c7:29:3a:fd:02:6d:af:a1:6d:8d:62:de:04:25:
                    fb:15:5c:ea:cc:f8:53:c0:20:de:57:df:46:ff:92:
                    c6:cb:fa:01:01:30:e4:09:68:87:db:09:ad:9d:89:
                    9d:a4:eb:0b:9a:74:e2:e7:68:ee:8d:9c:c7:60:01:
                    15:16:42:ce:d3:50:8b:96:b9:48:d4:73:a3:38:8e:
                    bb:18:ee:09:72:7a:b4:6d:61:77:e2:fb:c5:ef:f0:
                    1a:c4:20:6d:7e:05:74:4b:ac:46:c1:77:58:ef:a7:
                    9d:62:7e:de:9f:6b:ca:24:8b:fa:eb:f9:ea:e4:ca:
                    1d:ee:78:5b:0a:03:33:b5:a0:0b:be:10:a9:55:7d:
                    53:56:87:47:27:0d:90:95:5e:1a:9b:6a:57:79:58:
                    3f:9d:f2:ab:b9:59:0a:4a:8c:6c:4b:a3:35:76:27:
                    31:45:47:4e:2c:cb:a7:2e:b6:08:b6:9d:a8:a0:da:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D5:46:CD:AE:71:3C:59:81:B2:FF:9C:EB:CA:12:37:E6:CC:C5:72
            X509v3 Authority Key Identifier:
                keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:72:3f:c5:65:c2:e8:fd:99:af:a5:eb:bd:dd:3f:98:f5:c1:
         ba:0d:dd:dc:8b:65:c9:67:41:06:57:71:61:43:70:7d:7e:d8:
         2d:25:2f:23:d0:42:97:9a:7c:0b:e7:da:14:61:01:93:b3:af:
         89:18:15:e6:a7:eb:bf:b2:2f:50:73:ea:58:a2:13:d4:f8:0b:
         b0:97:d0:96:47:83:05:f6:b9:59:62:29:df:d7:ef:5b:e6:35:
         00:b4:6e:8e:80:2c:98:f0:cd:a8:ef:43:93:60:86:03:b1:0b:
         b8:d7:86:a4:0b:d5:8a:cd:af:fb:ff:b0:4d:55:25:29:4c:2b:
         c8:55:f7:4e:5d:25:88:a4:3e:df:e9:01:6c:c8:4d:e0:2f:d0:
         c2:7a:0b:d1:24:b8:d5:bf:2f:26:d6:2a:d5:59:08:73:a2:d7:
         08:23:8e:a9:8b:7f:ff:5c:6b:fd:58:92:fd:53:f1:33:77:d3:
         49:76:ca:c5:ef:67:e3:41:03:06:07:32:03:82:b8:55:4c:12:
         6a:44:b6:6a:ce:08:e0:09:7c:b4:71:05:38:d4:c4:39:2b:28:
         bb:e4:bd:55:11:ae:8a:87:2b:c4:f2:8c:a4:13:6c:b5:de:3e:
         dd:b1:53:a6:c6:9a:ed:38:2b:e6:a7:86:d8:96:90:67:9a:6b:
         a9:5d:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:19:48 2024 by rpki-client on console-ams.rpki-client.org