Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File:                     kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier:          iNLfmmw8yr5z2GdRKbTqC5k23v8sbTR+DBAq0gOcWxI=
Subject key identifier:   BB:B8:37:5A:0E:3F:7C:E1:57:DB:BD:7B:B2:93:C9:16:53:A1:65:C0
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer:       /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial:       019053FF25D02FD106EF43BFEFA661171435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number:          04D7
Signing time:             Wed 26 Jun 2024 10:02:28 +0000
Manifest this update:     Wed 26 Jun 2024 10:02:28 +0000
Manifest next update:     Thu 27 Jun 2024 10:02:28 +0000
Files and hashes:         1: 5fATlOoxVMRxRyp1KsLsqXvu3qY.roa (hash: wNFY8s5JI3q7QhZ/d5rgJXFUjgC1L689lkIqr1UyTJw=)
                          2: YjQRbGXQNkyJ4u9GsJ4aQwWyHVg.roa (hash: D42BZO2//ShDG4ZBJaUrO0hH4Q+XHzJ6IQV2bvg3Myw=)
                          3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: ZA6MoNe91eTUHjKisLl7GI7/ZxO8LtYPqzaptdmtDgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:ff:25:d0:2f:d1:06:ef:43:bf:ef:a6:61:17:14:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
        Validity
            Not Before: Jun 26 10:02:28 2024 GMT
            Not After : Jun 27 10:02:28 2024 GMT
        Subject: CN=bbb8375a0e3f7ce157dbbd7bb293c91653a165c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:a6:c6:d3:ea:18:b9:f7:80:d6:a3:7a:0b:
                    00:cf:c1:aa:6e:a6:c2:09:a9:94:dc:ab:07:23:6c:
                    fe:03:85:d8:44:9b:37:7d:11:29:01:49:c3:3b:72:
                    bb:f3:dc:13:48:ec:62:82:d6:47:a5:96:07:e7:c4:
                    ff:e2:59:b2:57:2f:3b:ec:6d:54:a1:bc:89:58:75:
                    52:97:a1:7a:8f:a8:2c:8f:bf:98:e2:65:32:89:a8:
                    ac:91:b8:c4:ab:c8:5d:6b:f2:b1:c2:0e:f3:0d:75:
                    06:c7:ef:5a:8a:16:43:50:a9:e9:91:b5:f2:b9:50:
                    34:15:56:12:e2:af:5d:86:26:c2:e3:7b:2b:57:ad:
                    a9:d7:41:3c:bc:f6:59:82:03:17:83:6f:49:62:dc:
                    f6:b9:d9:e9:14:44:a5:64:c8:b1:be:5d:4c:5d:c0:
                    fc:d4:a4:27:48:86:c7:c5:3d:01:80:9c:cf:a8:75:
                    8d:5c:d0:8f:1e:39:22:89:b8:57:c8:0f:e4:b8:5c:
                    7d:02:9e:be:e7:d6:e6:4c:a7:da:33:67:2e:b9:af:
                    fc:ef:dd:e2:45:82:94:88:b4:e2:c3:31:e8:fc:90:
                    9a:41:bc:8f:1f:74:e1:48:03:8c:2a:cc:a1:b3:79:
                    75:4c:3d:e2:3e:8c:91:fa:b1:be:cd:e3:26:20:7a:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B8:37:5A:0E:3F:7C:E1:57:DB:BD:7B:B2:93:C9:16:53:A1:65:C0
            X509v3 Authority Key Identifier:
                keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:0c:f4:a8:b3:e7:52:8d:84:6f:41:c1:f7:86:de:30:da:
         5e:f2:cb:3c:b0:6c:ce:9c:8b:87:2c:aa:12:d4:1d:9b:1e:3b:
         80:1b:27:5d:87:43:e0:b4:31:26:b8:5d:f6:aa:96:a4:47:2d:
         0f:a5:b1:68:43:18:6c:46:78:01:ac:d8:05:d8:56:83:51:47:
         d0:6e:b9:81:62:c2:81:65:67:f6:ab:8a:68:36:76:f7:1d:2d:
         3c:3b:da:ee:a8:fc:26:19:6b:33:84:5b:68:94:65:22:9d:57:
         b8:b7:21:ce:8a:23:20:34:3e:85:30:02:a7:bb:ee:1f:05:73:
         5e:2f:9c:d1:f0:68:b0:b5:00:ad:aa:6c:e1:69:80:3a:dd:52:
         cf:51:f7:eb:b5:24:4e:eb:25:ae:22:1f:1c:36:af:23:78:9b:
         e2:54:ac:54:58:fd:c7:4a:3c:ee:13:b6:ac:21:8d:e5:4e:20:
         bb:8e:65:1d:49:57:3d:f8:01:c2:89:45:63:6d:71:e1:fe:e3:
         ee:aa:88:1c:a2:01:01:d7:d8:66:29:60:2e:3b:1d:06:85:08:
         48:e2:aa:d4:69:2c:6f:f2:a8:03:30:f0:44:dd:0a:9a:3c:19:
         f9:1b:e3:2d:83:0f:ae:9f:03:00:44:b1:d0:f8:ae:52:f9:4a:
         48:86:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:55:30 2024 by rpki-client on console-ams.rpki-client.org