Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File:                     KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier:          VsFzLsDfoTVYzEjHHCjuDL9plcaV3WRP2E0xiag5Tus=
Subject key identifier:   23:3D:8B:44:93:FF:40:2E:59:23:35:17:C3:55:EF:1E:B1:84:79:F7
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer:       /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial:       018F8936E26AD795BA5FCAFE69BF19010D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number:          0224
Signing time:             Sat 18 May 2024 01:00:26 +0000
Manifest this update:     Sat 18 May 2024 01:00:26 +0000
Manifest next update:     Sun 19 May 2024 01:00:26 +0000
Files and hashes:         1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: ZdiQGLyR1p/UyBZChZlqc1EsfTllG05tTKGjgBw4QHA=)
                          2: UinKlJEuaGaXD7NgfXQekgTGK8Q.roa (hash: FUzeKZUq9DWkZI//mzfW48jXf69JKABsurDNx2IB4s4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:e2:6a:d7:95:ba:5f:ca:fe:69:bf:19:01:0d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
        Validity
            Not Before: May 18 01:00:26 2024 GMT
            Not After : May 19 01:00:26 2024 GMT
        Subject: CN=233d8b4493ff402e59233517c355ef1eb18479f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:ce:f4:9e:19:2e:fa:dc:37:76:31:4b:da:
                    d3:4f:c1:5d:d2:79:3b:26:ae:d2:05:c3:60:c5:c1:
                    0e:12:8b:72:05:3c:96:a2:a7:31:ea:02:92:eb:85:
                    31:c5:d0:27:e8:07:a1:a1:01:fa:a4:73:33:8b:50:
                    68:fb:f0:16:ae:50:af:89:37:12:07:a5:19:7e:fa:
                    25:9b:a2:33:b3:2e:39:03:78:6a:3c:42:97:f7:b5:
                    0d:c3:e1:0d:b3:e2:8e:0b:bc:48:dd:68:52:0c:0d:
                    54:67:a4:56:18:a3:02:10:62:76:ea:29:83:a7:97:
                    6a:07:6e:91:30:5e:3c:0e:64:83:b5:f7:e9:90:0f:
                    34:20:23:1d:40:0a:f9:88:1c:48:db:61:db:fc:14:
                    42:2a:b5:8b:a9:01:51:24:0d:0b:d8:a4:f6:11:90:
                    e0:7f:1e:09:fd:6b:3c:3d:f6:ab:66:30:79:29:a0:
                    ed:4e:9c:9d:a6:e8:7e:c2:8f:2a:c5:6f:71:d7:4d:
                    9c:5f:6c:6d:cc:6e:33:f2:5d:bd:dc:91:47:af:58:
                    64:23:74:da:ed:46:17:95:f5:3c:a6:96:38:77:4f:
                    d7:d2:b3:0b:83:46:8a:9c:a7:80:7b:19:2b:72:4e:
                    e6:6b:4f:b8:b3:d9:38:7e:f5:12:21:c4:29:ca:c5:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3D:8B:44:93:FF:40:2E:59:23:35:17:C3:55:EF:1E:B1:84:79:F7
            X509v3 Authority Key Identifier:
                keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:dc:36:18:d1:ca:ff:6a:ec:26:6c:a9:50:b5:3c:c9:38:6b:
         38:89:eb:b8:19:aa:61:3e:7b:69:93:c3:a5:51:0d:a6:21:2d:
         94:59:b9:3b:d4:2c:8a:0b:50:79:91:e5:d2:f0:4f:7f:a9:4f:
         e7:a3:56:bd:46:ba:c5:bd:13:0a:4f:bd:41:e3:35:bb:05:b7:
         f6:19:70:41:ca:af:6d:7e:06:d4:a4:11:e3:34:f2:09:11:91:
         12:43:54:bb:93:a9:35:bf:65:ac:b6:b9:5e:bd:60:0c:66:67:
         08:fd:86:f1:17:97:85:3d:2f:69:14:28:43:af:62:e5:eb:f8:
         3d:9a:12:e4:15:5c:4c:9a:44:84:d4:45:8a:5d:97:1f:1e:43:
         05:74:33:cb:12:26:c3:f3:95:d1:04:42:8e:a5:a5:03:0f:71:
         cd:e3:ef:88:18:4c:19:f8:a6:a2:ee:91:fb:7e:b3:cc:a8:c3:
         53:8a:02:19:ca:da:f7:ab:9b:b1:38:54:00:d5:43:87:45:86:
         66:28:37:4a:cc:11:3f:ff:f1:17:d2:35:30:0c:0d:4e:15:09:
         b9:30:40:b8:8f:f2:47:ca:66:f7:9f:cc:12:6a:af:2e:7d:53:
         9b:91:d0:6c:3e:54:b1:0b:06:dd:e2:3c:52:9c:bf:bb:38:d2:
         ca:41:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:37:29 2024 by rpki-client on console-fra.rpki-client.org