Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File:                     KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier:          jSJXa2hAr2/XR+agX1vHd5uESbCojYV/mKgx2BeHrH8=
Subject key identifier:   2A:75:91:FC:E4:5D:51:84:D0:0A:D8:68:67:D0:A4:DC:AC:9F:C8:70
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer:       /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial:       018F86A42A1D15A4C2620C3F111EDC1DED0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 13:00:56 +0000
Manifest this update:     Fri 17 May 2024 13:00:56 +0000
Manifest next update:     Sat 18 May 2024 13:00:56 +0000
Files and hashes:         1: 1PrDc34ymc0esPW5-DHXDo8ijGI.roa (hash: gqszA+5UBcV1CZif3ET3u8dbYxKdfrTSbS35G0yDDPU=)
                          2: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: EYqUghLpL1WYD9WZ5lPsc4tFQqZAF/j5L0xWxPtL44Q=)
                          3: rHxtg2T9xiMBrInVtNCZcROEVVA.roa (hash: UAF9iP/lVsWcP4FjW5sDTH0p2cf2OWJauOgFEAp0UNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:2a:1d:15:a4:c2:62:0c:3f:11:1e:dc:1d:ed:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
        Validity
            Not Before: May 17 13:00:56 2024 GMT
            Not After : May 18 13:00:56 2024 GMT
        Subject: CN=2a7591fce45d5184d00ad86867d0a4dcac9fc870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:eb:ea:c9:6e:25:52:00:d2:d2:28:ac:7f:
                    e4:8d:5c:b8:df:58:d7:95:d2:20:6b:2d:e1:96:8e:
                    ea:9a:27:d9:8c:db:01:55:f6:de:30:89:c2:e9:c7:
                    dd:3d:ab:a1:26:bc:c2:f7:3a:09:de:2d:0c:47:f8:
                    4d:d4:09:0c:32:53:13:84:79:fd:8c:91:fb:12:70:
                    7d:96:ff:35:29:69:ad:24:e8:7f:97:c7:f0:f2:a2:
                    26:61:7d:cb:af:72:f6:7c:34:0e:da:c5:06:78:8e:
                    7f:dd:8c:d1:5d:39:f6:a9:69:f0:c3:8f:71:8b:f6:
                    c0:fa:2d:fa:65:9b:96:b3:4b:02:19:ac:42:28:58:
                    1e:7a:99:d5:14:a9:fd:04:cb:ac:e8:e6:01:dc:73:
                    af:d3:3c:a5:95:8e:25:a7:c3:88:2b:0a:b7:36:b1:
                    08:f9:16:b0:76:c7:11:ee:82:ce:2c:cf:19:43:19:
                    17:ff:ec:bc:d9:de:8c:56:69:aa:50:8d:c6:f6:cc:
                    d4:5b:2f:dd:b6:15:a7:3b:f4:c3:55:88:3b:42:48:
                    48:11:61:a4:26:5b:41:a3:89:9f:cd:99:b4:af:4b:
                    76:eb:96:28:ce:2b:fc:19:82:1f:d8:c9:cc:eb:89:
                    4d:77:9e:35:ba:90:83:e3:be:f4:47:b9:3f:68:bb:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:75:91:FC:E4:5D:51:84:D0:0A:D8:68:67:D0:A4:DC:AC:9F:C8:70
            X509v3 Authority Key Identifier:
                keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:14:1f:4a:f4:96:7d:3e:3d:57:81:a1:a1:52:d0:c0:60:9d:
         ac:fa:96:d4:fb:99:73:d9:52:f5:27:41:12:c0:ea:a8:e6:6d:
         34:80:a2:97:dd:8c:ce:f9:e2:87:12:26:b7:5f:e9:24:ca:7f:
         bd:4a:50:33:31:d0:a7:dd:99:4a:42:60:de:e7:84:bd:1a:b9:
         12:2d:f6:fe:ca:81:c7:fd:ac:61:f3:aa:5c:68:4d:b8:49:be:
         cf:bc:dd:46:df:25:b6:23:7f:c5:6f:e1:58:35:7f:61:a1:29:
         5f:c6:52:e5:77:dd:7d:4e:62:04:98:a2:a8:a8:60:80:8a:d3:
         5c:e8:2b:02:4d:47:45:b9:98:cf:b2:57:41:3e:8f:31:3d:0e:
         26:43:bd:b1:e1:ab:12:c7:81:69:5e:6f:12:2e:ea:30:23:87:
         f6:8f:34:85:be:94:1f:40:89:22:03:28:ad:a7:dd:38:c5:a0:
         39:3d:5c:32:da:17:9b:27:63:4c:24:99:2c:8f:5d:8d:a4:53:
         13:f9:72:56:c0:58:10:38:98:65:42:b9:74:3f:f9:a8:d5:47:
         a3:43:a6:89:0f:b6:9d:c6:c3:2d:37:a5:91:7a:4b:a1:45:6e:
         a0:de:3d:fa:b7:a2:ff:f8:d1:26:95:59:ca:0a:28:fb:16:6b:
         13:ad:f6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:25 2024 by rpki-client on console-ams.rpki-client.org