Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          DjycWLrHaASUcj+a8xU+ieh8Q7hMQ8RsuX3cve7np8s=
Subject key identifier:   D4:08:D9:B8:0C:2B:7A:1E:79:BD:C2:E5:41:ED:37:84:09:8C:9D:7C
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       018F874B1387F701A0019686D7C724CA82E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          0FFC
Signing time:             Fri 17 May 2024 16:03:15 +0000
Manifest this update:     Fri 17 May 2024 16:03:15 +0000
Manifest next update:     Sat 18 May 2024 16:03:15 +0000
Files and hashes:         1: BArZQwi0O2Fn5tAP6Tvj8QRlKQQ.roa (hash: 8Xx+Wt+4YmStmRMjZ6gm7f7h73Xvfc2hmsd1Cfp3Jg8=)
                          2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: p03kdFILvxQ/9ze7Ow39HUc95tcBYld+r9WGD7KTmfk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:13:87:f7:01:a0:01:96:86:d7:c7:24:ca:82:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: May 17 16:03:15 2024 GMT
            Not After : May 18 16:03:15 2024 GMT
        Subject: CN=d408d9b80c2b7a1e79bdc2e541ed3784098c9d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:8d:69:5c:83:ec:f2:74:9e:af:f2:93:f9:
                    71:aa:92:a1:f4:b8:08:c3:a5:64:ef:9b:55:db:17:
                    27:a8:f5:69:9e:89:be:35:c3:3c:68:b2:a0:0e:41:
                    89:35:0c:d7:f0:74:6a:8d:7a:df:a9:2b:3d:64:f4:
                    f2:23:fe:67:00:86:a7:35:06:96:08:c8:3d:9c:db:
                    57:ae:69:98:62:2b:a5:06:2d:c6:9e:1c:62:65:65:
                    d4:f3:e0:94:5e:56:06:6d:fe:b8:bb:a9:42:77:fe:
                    91:bf:8a:48:34:ce:b4:83:ca:4b:39:1d:00:14:26:
                    f7:f7:33:e1:0c:8d:da:43:ff:25:13:79:e1:5a:01:
                    c5:89:76:31:87:62:46:3e:cb:7b:99:cd:9c:65:5f:
                    92:06:64:03:30:10:0c:31:07:0f:dc:1e:98:81:fc:
                    a4:7e:29:64:5a:91:ec:22:ba:a6:2b:e9:c9:c3:fa:
                    73:92:0f:90:4a:ff:5b:ae:d1:7d:4a:92:40:89:4a:
                    cc:4a:46:9e:d0:94:9f:4b:58:c2:b3:13:6e:b8:fc:
                    1f:3c:a6:77:35:06:79:33:3c:b8:e2:1e:cf:4e:c6:
                    74:2d:c4:a7:62:72:a3:c9:52:d4:3b:4f:06:c6:1d:
                    e9:a8:40:4b:04:ed:59:db:a1:d7:09:f2:fe:01:55:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:08:D9:B8:0C:2B:7A:1E:79:BD:C2:E5:41:ED:37:84:09:8C:9D:7C
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:43:24:27:ec:60:2b:2b:e5:06:c9:50:10:8a:d8:36:77:2c:
         99:26:3e:45:0e:15:2e:e9:81:af:1a:ab:2a:83:a0:45:aa:3c:
         ac:f1:9c:73:f8:a2:e2:aa:c2:c8:57:f1:ec:4c:27:3c:3e:91:
         30:65:ad:90:d4:0e:df:e2:ab:e1:31:42:39:ea:84:59:d6:e3:
         56:64:c3:b3:b8:de:5c:f9:05:79:41:50:2e:f3:c2:be:0f:d7:
         66:4a:a3:fc:fc:5e:de:83:01:40:dc:3d:44:2b:16:96:af:fe:
         68:b3:b1:93:e8:54:e4:48:af:b0:73:79:74:3f:1c:39:78:ee:
         88:0b:db:f4:33:a6:98:00:51:ae:ae:45:9a:0d:80:98:a8:42:
         f5:76:b8:27:06:b0:3e:5b:2f:4a:22:61:98:56:28:10:0d:0f:
         52:bb:0c:4e:dd:96:10:0f:2f:b1:7b:2c:6a:1f:e1:e5:e7:96:
         32:4d:7b:93:b1:32:ec:3d:61:05:53:65:ec:a0:d4:5b:05:f7:
         56:05:13:48:4d:50:88:d1:ee:b0:71:0f:b0:d1:7f:18:5f:19:
         fc:88:49:b6:f1:6d:99:c4:1e:53:21:42:6b:d1:db:7c:d6:58:
         d6:57:f8:51:75:56:a1:9c:ee:f3:72:a6:5e:fd:96:a2:ef:a8:
         7e:b8:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:43 2024 by rpki-client on console-ams.rpki-client.org