Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File:                     kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier:          3AzhkWHGp2rxGagLGwtbH6wSxJCWzyX26UxTTclKH6s=
Subject key identifier:   15:B5:A0:21:6A:D3:C7:3E:0A:A9:26:25:14:CE:73:96:E0:72:C7:AE
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer:       /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial:       018F88241B716C3F876FA8ECF510783BFDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:18 +0000
Manifest this update:     Fri 17 May 2024 20:00:18 +0000
Manifest next update:     Sat 18 May 2024 20:00:18 +0000
Files and hashes:         1: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: A57FQyFno2JZgKiXT0cGrFctE8UZbfboYaLV92w0+BA=)
                          2: pXcvgW3KR18dQYa76pAwbIUplRA.roa (hash: JczkL4LmP5kHAzCUIfCKOoqxdIjN11op+zsaoCesCIc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:1b:71:6c:3f:87:6f:a8:ec:f5:10:78:3b:fd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
        Validity
            Not Before: May 17 20:00:18 2024 GMT
            Not After : May 18 20:00:18 2024 GMT
        Subject: CN=15b5a0216ad3c73e0aa9262514ce7396e072c7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:16:be:68:4c:d5:d8:77:3b:dd:a4:bf:33:3a:
                    06:8b:97:a8:3b:e3:42:07:75:b8:e8:2e:78:ae:ac:
                    d1:c0:d7:8d:9a:83:4b:7c:01:e6:53:8f:1a:49:14:
                    50:01:1f:e2:32:ee:ec:f9:35:29:50:cb:11:9a:0d:
                    01:fb:62:b1:31:27:98:f5:b5:98:11:27:9b:b4:5f:
                    fa:36:1a:38:a4:fc:86:d2:30:09:23:b5:d7:95:24:
                    91:65:74:bb:50:4b:75:3a:9b:14:20:19:ec:9f:cf:
                    bc:9e:c4:05:95:26:08:f0:01:74:d2:6c:8d:1b:f0:
                    92:54:1e:ea:d7:a7:a0:02:ca:82:d0:60:09:aa:5e:
                    aa:e8:2f:f0:68:99:85:ba:dd:75:5b:2b:26:b3:7b:
                    03:27:32:7a:e5:6a:b0:b4:f7:82:3b:8d:cd:92:ba:
                    09:ff:d3:db:a1:1e:35:71:4f:9d:c1:7e:78:d3:6b:
                    1d:6a:ad:ef:f6:30:f5:4a:16:1b:b8:33:87:0a:da:
                    09:8b:e9:c3:14:78:c8:d4:34:46:6c:26:9f:88:3f:
                    43:fa:3d:a3:57:3c:a0:8d:18:21:05:db:3b:90:e4:
                    70:ae:f8:2e:f9:db:d4:8a:c6:cf:3d:a9:a5:7f:e6:
                    61:60:c3:43:ad:f3:c8:66:1a:e4:a6:17:9e:79:ba:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B5:A0:21:6A:D3:C7:3E:0A:A9:26:25:14:CE:73:96:E0:72:C7:AE
            X509v3 Authority Key Identifier:
                keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:2d:14:24:52:27:d6:08:c7:be:83:db:cd:c7:6f:ae:2e:
         32:63:3c:8b:5c:8c:2c:5c:2d:8b:6c:e0:d5:e4:c7:2b:8d:2a:
         5a:96:81:c7:5c:a5:d3:68:bd:d2:85:50:0a:0f:dd:af:4e:1f:
         40:c4:a1:4a:0b:78:a5:6d:26:2c:18:4e:dc:28:ac:7e:14:8d:
         16:5d:15:11:f0:b2:00:e1:e7:a6:1f:da:43:0a:90:be:37:83:
         af:26:06:58:a3:ae:af:61:7e:5a:82:5d:1a:f0:5d:e3:b0:d0:
         83:60:e4:16:6c:a6:64:1f:e8:1a:a0:74:80:e3:fd:7c:e6:2e:
         19:7e:f6:0f:1c:7a:02:2d:60:e3:8e:8c:c1:c8:e8:52:26:63:
         29:08:1a:9e:a2:35:44:df:2c:91:09:2b:57:40:9e:38:b2:98:
         c8:92:68:d3:c2:95:56:f6:b9:6e:89:cd:93:6c:d0:21:7f:98:
         eb:27:51:82:8d:d0:e7:45:0f:8a:d0:91:19:8b:19:bb:46:7a:
         01:0f:50:8c:21:1d:de:0c:30:32:1f:9e:46:f9:46:b3:d9:9f:
         7a:6a:18:36:0b:ce:d7:1a:23:3c:64:81:b5:1c:7d:ad:71:09:
         f0:a1:88:6b:88:cc:69:58:01:e8:93:4a:94:a2:70:9a:d0:3b:
         b3:6e:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:44 2024 by rpki-client on console-ams.rpki-client.org