Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
File:                     Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json)
Hash identifier:          sFTBR9PT9SRCJ4MO0Pkyrjeyg7SZq3/37Qm3xd0cWyo=
Subject key identifier:   33:1C:12:5F:54:25:DC:C6:AC:F8:CF:C7:50:AA:C8:82:88:4A:33:E1
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       01905358C06B3BF6AEF05C2587B8D0515F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
Manifest number:          8A
Signing time:             Wed 26 Jun 2024 07:00:43 +0000
Manifest this update:     Wed 26 Jun 2024 07:00:43 +0000
Manifest next update:     Thu 27 Jun 2024 07:00:43 +0000
Files and hashes:         1: AANJlOmt3Y5QyeNQxYyXSgI3bkE.roa (hash: ZD7AbXhhkg6luGVvPg8yhCsGF+h78gozqiqJr22GXzI=)
                          2: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: 1xhxKTDeWqS4gETBftCNfNRozP+gSRCDaBJCTl6OJok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:58:c0:6b:3b:f6:ae:f0:5c:25:87:b8:d0:51:5f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: Jun 26 07:00:43 2024 GMT
            Not After : Jun 27 07:00:43 2024 GMT
        Subject: CN=331c125f5425dcc6acf8cfc750aac882884a33e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:b3:81:ec:ff:bd:15:c6:31:c1:98:4f:0c:
                    fb:41:48:c8:c7:24:b7:7b:74:02:52:0a:d2:bf:04:
                    81:f0:10:c0:9d:bc:c2:ef:42:cd:58:59:a6:92:15:
                    b7:5e:b1:83:a7:6b:04:1a:de:cd:25:e7:6b:3e:57:
                    34:8e:f9:79:cf:d3:98:e5:ea:b0:a8:15:48:08:0f:
                    8b:f1:e9:8b:d3:c1:eb:1d:c4:5f:ed:04:07:86:ad:
                    4f:5d:a6:09:b4:d8:11:48:ad:74:09:1c:f1:09:66:
                    d2:9d:bc:6d:3f:96:15:05:3b:80:a5:dd:36:d9:4b:
                    07:54:78:d0:2a:c7:2a:14:0a:9e:98:0c:dd:97:f8:
                    7f:c6:88:67:41:28:c7:d3:71:9b:6a:5f:83:6a:92:
                    48:03:b8:72:45:ff:66:69:b6:08:d6:04:ca:88:4a:
                    81:a4:73:2c:2e:58:16:44:72:ee:ad:51:9b:e8:49:
                    00:df:92:c9:03:8c:98:28:57:ee:47:67:16:df:8c:
                    91:69:29:a5:f9:74:4b:8a:a8:e1:71:30:9b:54:0e:
                    10:71:d4:25:55:ef:41:64:34:01:9e:f7:e1:fc:77:
                    fa:0a:8b:d8:51:3b:22:d4:5e:83:91:a4:f6:cf:cb:
                    85:19:90:73:aa:07:92:6b:2d:e5:59:a4:a0:fb:5e:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1C:12:5F:54:25:DC:C6:AC:F8:CF:C7:50:AA:C8:82:88:4A:33:E1
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d3:47:c2:63:e6:d8:3c:ff:03:66:fd:75:d3:35:e3:ee:5e:
         78:1d:63:21:79:e2:ad:12:85:ba:c5:13:5a:94:e9:44:69:f9:
         c3:20:dd:11:a0:15:75:f0:89:65:f5:fd:86:7c:91:d9:fb:d2:
         64:c7:1b:3e:fe:6a:d1:4f:17:b3:8e:22:89:8e:b5:6b:51:0a:
         11:2d:1e:35:0b:d5:d8:f7:96:72:96:24:d0:72:ce:ab:95:fa:
         9b:ae:6d:65:42:70:f8:25:9b:ee:43:46:f5:a3:b7:22:a0:4b:
         8d:53:04:2d:e2:09:10:04:5e:e9:12:52:5f:76:19:fa:9e:61:
         22:5f:13:a9:7d:13:ea:cd:aa:77:82:4c:71:0e:61:43:3f:b3:
         7e:16:3b:22:39:6d:96:cc:c8:86:7b:85:bb:ec:3b:64:d9:c2:
         89:c8:a2:ba:4f:a4:a8:bc:a8:7d:b9:92:a4:81:cb:5e:7a:ef:
         a0:89:07:63:a3:f6:05:b7:99:81:5e:ba:20:81:2e:df:1d:d6:
         39:f3:2a:93:58:b0:68:5b:0f:c5:9d:e8:9b:8a:8b:9a:cc:64:
         70:a2:c0:f5:ee:88:47:ce:84:17:6d:1c:88:3a:b8:08:75:ef:
         81:3e:28:a3:73:e6:2b:da:14:7a:a6:7e:0e:9f:d1:34:4c:62:
         64:17:27:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:08:38 2024 by rpki-client on console-fra.rpki-client.org