Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File:                     koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier:          vrBM6eTc1DkL8rw01AMPziqKNhV4JScRjfuEWpDt8Hs=
Subject key identifier:   4D:D4:A9:B1:76:25:66:08:F4:CE:5F:BE:7A:E1:1F:B4:C7:E7:08:EB
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer:       /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial:       018F893726B948561A7E3B40FD13832F45EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 01:00:44 +0000
Manifest this update:     Sat 18 May 2024 01:00:44 +0000
Manifest next update:     Sun 19 May 2024 01:00:44 +0000
Files and hashes:         1: W6J95Ol1lJbAnqs4X7yWNje2KhY.roa (hash: LZwGPXWMi6s2TEKP9XIUIS3IZpwD20QCDPJES7+kri4=)
                          2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: LktXrvXFTaI4mTXeP1QnKKrj+ODSvYHDf1jkHBizeAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:26:b9:48:56:1a:7e:3b:40:fd:13:83:2f:45:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
        Validity
            Not Before: May 18 01:00:44 2024 GMT
            Not After : May 19 01:00:44 2024 GMT
        Subject: CN=4dd4a9b176256608f4ce5fbe7ae11fb4c7e708eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:84:e7:e9:e6:ac:0f:8d:fd:68:49:24:03:
                    c5:44:fe:66:25:11:fb:f0:86:e9:71:e7:d0:f6:43:
                    e3:d9:7d:5a:a0:30:34:60:be:ab:20:2f:54:dd:eb:
                    53:04:16:82:db:d4:fc:4c:54:be:40:05:d6:04:29:
                    ef:27:24:31:5b:51:44:ac:bb:aa:e5:e3:90:13:70:
                    b4:eb:03:16:57:45:d5:2f:e2:54:e4:16:14:68:b4:
                    08:75:d6:c0:1f:8b:dc:eb:cb:49:52:5d:0f:8d:37:
                    d2:6a:5d:ac:a8:4d:be:cd:89:be:30:7d:c4:08:b2:
                    c3:ef:1b:58:71:6e:4c:01:3c:f2:20:34:f7:30:17:
                    2c:bf:e7:fe:1c:31:34:a7:4e:4e:a3:5e:a2:18:39:
                    a8:2d:c4:a8:03:82:88:85:40:a7:1e:53:80:73:3a:
                    f4:fe:04:9f:33:0b:27:03:f5:cb:c9:89:19:ba:c3:
                    fe:1b:9e:d1:5a:30:7c:c4:02:dc:93:b1:5a:7c:2b:
                    c4:b3:a2:4f:50:a8:2d:3e:21:f9:b3:17:a3:72:c3:
                    03:3e:47:9c:86:b7:0b:53:13:24:c1:5b:ac:dd:67:
                    85:ef:6a:e7:c7:d3:58:6d:65:09:02:f4:07:c0:11:
                    f1:97:b2:21:c5:23:ae:58:7e:92:c6:06:07:77:f0:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:A9:B1:76:25:66:08:F4:CE:5F:BE:7A:E1:1F:B4:C7:E7:08:EB
            X509v3 Authority Key Identifier:
                keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0d:7d:fd:d5:ba:ba:a2:3e:b0:27:5f:72:83:43:3b:b5:7a:
         55:5d:b1:1f:b5:53:85:1b:52:58:fc:e3:4c:79:5e:aa:be:f1:
         21:2f:97:33:d7:38:5b:b8:ba:35:46:94:b8:15:c6:65:de:66:
         a5:fe:b7:04:0a:93:4a:8d:6d:b1:8f:f6:e2:6f:b0:c3:ea:81:
         aa:36:a2:23:05:8b:18:19:c5:76:04:f2:5f:3b:96:3f:81:11:
         0a:a7:6e:2c:49:64:88:71:75:a5:56:2d:02:97:73:7e:4b:7d:
         d2:23:56:1c:01:a3:6d:b7:3f:0d:84:dc:3f:c1:88:33:c0:65:
         03:bc:49:e2:d9:98:57:02:b2:fd:21:db:80:ac:02:8f:b9:6a:
         da:bd:40:3a:1a:d7:3c:11:2a:d5:3f:de:25:75:ad:4a:80:eb:
         82:46:02:05:6f:0d:6c:33:8c:ea:88:74:01:a8:68:3d:65:54:
         b5:de:02:ec:93:b3:2c:4c:cb:27:7d:32:0a:e9:0c:96:b2:95:
         1a:4c:69:f8:21:68:ea:25:c2:ef:37:ec:9a:15:c4:12:b9:43:
         81:58:78:c7:27:19:b7:80:8f:04:88:b6:b3:91:2e:d5:b2:11:
         51:7a:4a:c2:2b:70:f8:ca:b0:eb:fd:9f:a7:9a:62:dd:b7:b7:
         64:40:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:51:26 2024 by rpki-client on console-ams.rpki-client.org