Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          xYNQsc8ZUrPNbLwbmuKHoZ/iLie/aQn4Xd66KmSTtjw=
Subject key identifier:   84:A2:DD:E6:58:BC:9D:C9:E5:00:C9:34:72:0E:4D:81:15:C4:65:98
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       01920A960D6355F5C06BE02FA5C5FCC0AA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          74
Signing time:             Thu 19 Sep 2024 14:00:58 +0000
Manifest this update:     Thu 19 Sep 2024 14:00:58 +0000
Manifest next update:     Fri 20 Sep 2024 14:00:58 +0000
Files and hashes:         1: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: pK3GvgSHZyPOs/iI5wzgmEMHB1IBpfcenLePdffHtRE=)
                          2: Ku6XMsqQA_kFDYVqVjxChxYSBZY.roa (hash: pXnRlmxITNF3VidUei1MBouSPcglkUZKCh+HofZVUX4=)
                          3: hIob5To274fAjehq0AwMGr3UEqc.roa (hash: hw+Q/TxC5+ykZBYqAmyf+tysb/cdlyf6YfnhtNq3SA8=)
                          4: pGIGN4cDFJ67yUNet2nNWJRD9vg.roa (hash: wi8h4Hwi4V0wyPY9DNXxV+HO8hs53dM7NxGdlKDPhWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 13:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0a:96:0d:63:55:f5:c0:6b:e0:2f:a5:c5:fc:c0:aa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Sep 19 14:00:58 2024 GMT
            Not After : Sep 20 14:00:58 2024 GMT
        Subject: CN=84a2dde658bc9dc9e500c934720e4d8115c46598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:aa:d5:8e:af:73:55:b9:79:98:da:9b:81:
                    05:c8:9f:42:9a:33:c3:40:bc:14:43:ed:d5:a1:1f:
                    ca:0a:d2:e6:51:4f:47:53:b6:c0:a3:60:05:96:81:
                    09:28:4a:b9:30:d6:f6:c2:97:65:31:9d:66:95:a7:
                    fe:83:89:41:f1:f8:5a:db:4f:49:92:a0:99:bf:98:
                    f2:4d:c1:1b:59:80:f4:fd:b8:6c:a0:f2:ee:f6:ec:
                    79:5d:8a:e8:ff:5d:f3:d7:57:c5:65:f7:9f:8f:3d:
                    c6:60:21:44:3e:86:2a:e9:c1:dc:51:0b:21:4c:7c:
                    4c:4b:37:d5:3e:3b:d4:f3:94:a5:ab:e6:d9:7a:9f:
                    b9:b2:18:80:36:95:df:06:cf:ab:28:f7:ee:00:08:
                    97:ed:b2:80:be:e9:89:0f:9c:bf:6c:4e:d7:d5:f2:
                    b2:bc:73:94:2a:26:09:ee:34:00:14:84:72:77:7a:
                    b2:cb:b9:74:21:b8:cb:de:02:d7:cb:04:76:64:68:
                    ee:b1:ba:83:a8:39:27:e0:a4:78:73:bd:0f:1f:b0:
                    b5:0c:2f:83:87:e0:9a:25:14:8f:52:3f:c3:70:94:
                    c7:24:85:c8:ca:c1:b8:92:26:10:a4:5c:e5:47:ce:
                    3f:c7:ee:28:15:8f:ed:5c:e1:d1:3a:32:a4:17:37:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A2:DD:E6:58:BC:9D:C9:E5:00:C9:34:72:0E:4D:81:15:C4:65:98
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8e:21:23:af:ea:6d:b1:4f:5f:f8:5b:44:f5:69:15:d2:72:
         8b:d0:ca:02:01:05:b2:07:34:73:36:65:b3:b3:3d:db:d7:a0:
         e5:09:45:74:a3:56:10:a3:8a:38:5b:63:c8:d2:ec:19:2d:ae:
         07:20:76:bb:07:93:0f:23:d9:9a:7c:72:01:08:60:6a:79:fb:
         a2:3a:b7:ec:cd:f4:45:9f:5e:36:fc:bf:43:f1:ca:47:94:9b:
         a8:78:5a:a2:d1:11:ef:8a:61:4f:15:aa:f0:a3:4f:ac:49:b2:
         6b:d4:6c:9c:3b:0a:e1:08:5b:76:88:7a:be:12:e1:fa:fb:b6:
         d8:5d:9a:b2:c0:7c:d7:8f:cd:ab:a5:45:40:01:2c:09:67:70:
         cb:b5:4d:09:a9:bf:e3:42:91:72:3f:e3:22:8b:70:17:1b:75:
         b8:d7:b1:08:d9:01:b6:3d:ea:0d:5d:11:1c:10:c4:8a:6d:50:
         d4:b9:44:26:2e:de:41:54:e0:6c:09:f8:ec:a9:45:48:f2:62:
         0e:7f:cc:a5:07:5c:96:ec:1c:33:db:de:c6:3f:78:ae:39:12:
         18:b9:05:96:1e:ca:4a:89:5f:4b:ec:cf:d6:a8:da:d2:a5:75:
         c5:4e:76:3a:57:c4:9d:3a:2e:a3:33:03:21:14:25:65:e1:f0:
         1b:1f:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:50:39 2024 by rpki-client on console-ams.rpki-client.org