Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File:                     Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier:          pGG/HGqilNUkinqs/D4Gfx5aosBvkATpO2nCY6I4eGY=
Subject key identifier:   DC:4B:38:7B:E8:73:22:4D:A6:58:C4:A9:DE:05:60:CD:92:15:E8:76
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer:       /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial:       018F885B5BA3CBA18E2DBAD6C854C494D2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number:          019C
Signing time:             Fri 17 May 2024 21:00:39 +0000
Manifest this update:     Fri 17 May 2024 21:00:39 +0000
Manifest next update:     Sat 18 May 2024 21:00:39 +0000
Files and hashes:         1: 6Gm-rqGkONk0D269h6e6dpbiV9I.roa (hash: qrp15iXFeaYYmDjBRT0BjCpne7HuI20sUV2Y9DLALGc=)
                          2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: 6NEO06gaKHoIMpP7tFrPSjmzZ9VraoGGMb6eXHAdGmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:5b:a3:cb:a1:8e:2d:ba:d6:c8:54:c4:94:d2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
        Validity
            Not Before: May 17 21:00:39 2024 GMT
            Not After : May 18 21:00:39 2024 GMT
        Subject: CN=dc4b387be873224da658c4a9de0560cd9215e876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:16:f3:95:d6:78:83:f3:68:d4:31:56:ea:
                    84:9c:07:73:65:30:07:b0:f8:a6:12:1d:88:66:af:
                    cc:42:8e:af:df:0d:ea:f0:2b:35:1f:87:21:af:0a:
                    1c:34:1a:73:a4:cd:b5:a8:0e:cc:c5:dc:a2:83:25:
                    76:23:a6:23:5a:d7:78:dc:3c:fd:06:52:23:d7:54:
                    80:3e:07:6c:b9:d0:a9:07:c9:a3:15:93:36:b9:2d:
                    0d:0d:bd:80:3f:a0:26:24:0e:9b:56:44:ba:4e:33:
                    f8:45:b0:fc:3b:8e:41:2a:50:42:04:10:98:d8:48:
                    9a:af:f3:a4:6f:d5:a7:32:4c:11:45:97:f1:a6:11:
                    66:c1:10:7e:7b:d7:e8:49:c9:a3:4e:30:a2:57:58:
                    64:15:d6:d0:23:fa:fe:43:ef:ff:bd:b7:3b:4d:97:
                    41:44:29:7f:af:b2:44:99:00:05:14:59:b8:9f:96:
                    37:2d:87:7a:b4:94:75:1f:5d:10:43:dd:31:8e:37:
                    26:57:f2:a6:19:8d:b2:f5:6c:06:9d:a3:94:ef:d4:
                    ea:11:5b:30:58:df:4f:b4:ca:e2:b5:ae:e8:15:55:
                    f9:a9:2e:a9:8e:d1:3b:3e:33:82:6c:6f:e1:18:74:
                    2a:af:f5:a2:c3:8b:2d:e7:e4:fb:63:29:83:50:1e:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4B:38:7B:E8:73:22:4D:A6:58:C4:A9:DE:05:60:CD:92:15:E8:76
            X509v3 Authority Key Identifier:
                keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:97:8a:7b:89:96:99:ba:1d:b2:c9:a6:2f:15:81:97:ca:2e:
         9c:64:d6:5e:ba:1f:f0:14:57:33:a3:f7:2b:49:95:f4:fb:51:
         ac:04:11:38:1e:58:b0:00:09:80:63:5d:bd:bb:91:ea:95:55:
         2b:9e:c1:e7:2a:90:fa:e4:54:07:4a:70:67:42:f6:15:1f:e5:
         37:ea:0d:50:db:95:06:a7:e0:87:59:86:f9:6d:fb:79:a6:c9:
         d6:7d:97:71:69:5e:2b:1f:dd:00:c2:c8:6a:37:6b:ba:8f:8f:
         3f:0f:b0:e0:2d:f1:96:2b:7b:c6:cd:c1:0a:3b:e5:ad:da:5c:
         5f:30:81:dc:d6:87:f7:2a:b9:cc:d6:d4:2f:4e:5b:b8:dd:f6:
         3d:63:1b:40:67:aa:8a:46:a6:6e:1f:53:c3:e5:08:f4:d1:1c:
         01:1a:55:d7:8b:dc:54:51:5c:6c:e6:7c:fb:70:75:53:8e:23:
         f7:15:0d:c0:5f:72:9d:2e:b4:30:70:28:25:79:5f:78:e4:c1:
         df:39:bf:14:a8:12:f8:5a:6c:79:1a:2b:b9:20:33:d9:a4:a3:
         fb:cb:44:92:c6:7c:21:67:15:45:60:32:3d:b0:b9:cb:4c:b7:
         57:0e:5e:27:88:7c:48:2b:63:a6:0e:9d:77:05:3d:56:09:0c:
         ff:46:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:06:15 2024 by rpki-client on console-ams.rpki-client.org