Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File:                     kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier:          Ehs2rEU57S4aybMR9AF4hNdCoSysAFfjGR0nuy+mEKw=
Subject key identifier:   0C:AD:26:0D:2D:23:AA:34:5C:24:21:C3:C9:1F:D5:A5:58:49:2E:37
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer:       /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial:       018F8939AC4B8EE149E407DDD341A3551638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number:          04EA
Signing time:             Sat 18 May 2024 01:03:29 +0000
Manifest this update:     Sat 18 May 2024 01:03:29 +0000
Manifest next update:     Sun 19 May 2024 01:03:29 +0000
Files and hashes:         1: NwelQmGBAMZcThRWzbBtK5nMQuA.roa (hash: sx0OIReb0wEF2fhVsKRVp7OMN2FzE8pyeu/7ECiPdmk=)
                          2: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: uoJtp6dUtS3QNha9kSRMlqDJRG4S426C+yLbojMG0d4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:ac:4b:8e:e1:49:e4:07:dd:d3:41:a3:55:16:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
        Validity
            Not Before: May 18 01:03:29 2024 GMT
            Not After : May 19 01:03:29 2024 GMT
        Subject: CN=0cad260d2d23aa345c2421c3c91fd5a558492e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:09:72:07:21:43:5f:11:c2:b2:d3:fe:0e:
                    76:eb:fa:f9:bf:cc:a4:8d:0c:4f:f4:9a:3a:c8:c8:
                    50:b1:f5:c0:46:f5:70:c5:a8:5d:d0:0e:ec:af:4a:
                    8d:9c:26:1b:f9:10:e9:93:d0:79:af:db:7e:fd:1a:
                    f5:f2:29:36:7d:7b:ab:49:47:ad:68:a9:dc:d9:db:
                    ab:1d:26:83:fd:a1:ef:92:db:a3:a9:c3:d2:26:7e:
                    ca:3d:76:dd:56:b2:a1:d4:87:ab:af:0c:d0:09:13:
                    98:2d:45:51:7f:e6:ad:07:a2:38:73:8d:b4:b7:b8:
                    89:e0:d9:cb:71:04:44:bf:06:76:7f:b7:e8:c7:7e:
                    c9:2d:34:2c:0b:5d:18:46:1f:47:b4:e0:16:56:04:
                    f8:46:53:5c:85:7e:25:40:92:fe:91:9e:f0:50:cc:
                    00:ee:5c:93:45:d6:da:f5:3f:de:a9:66:d0:8f:ee:
                    20:71:6a:e7:d6:88:86:2f:d9:7c:a6:c3:99:71:f8:
                    09:f1:70:99:a4:ec:d4:2f:6c:dc:27:45:17:5f:37:
                    7a:2e:d1:fc:a2:87:73:ca:d4:b9:5e:11:61:8a:29:
                    95:16:35:cf:b9:68:af:6d:56:bc:60:2c:db:a9:ef:
                    93:21:8f:06:e1:c0:a3:17:81:de:57:22:00:81:84:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AD:26:0D:2D:23:AA:34:5C:24:21:C3:C9:1F:D5:A5:58:49:2E:37
            X509v3 Authority Key Identifier:
                keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:03:b4:d6:59:55:04:31:37:23:41:53:cf:a1:a8:bb:af:33:
         c6:01:6d:86:8d:5c:e2:97:4f:0d:d6:a7:af:81:87:34:b8:f8:
         01:cd:ad:16:18:5b:e0:64:11:4b:9a:61:e5:9e:0c:fe:d4:1b:
         f1:ac:e3:22:2f:c9:2c:b7:1d:b8:a8:d1:7d:fc:fc:75:9f:5b:
         91:48:58:d8:4f:91:2e:37:48:78:cc:22:bc:e8:be:5d:aa:da:
         f9:db:84:8a:4a:62:c7:66:ae:79:d2:da:c5:08:34:bf:77:a0:
         b6:71:75:9a:87:83:3c:d3:cb:5a:db:29:f0:49:b1:b1:bf:d8:
         63:51:ad:9d:6a:e2:ad:e0:f0:aa:82:02:96:8f:6c:c7:43:ff:
         b0:0f:be:c4:74:50:dd:f2:56:86:92:65:25:62:e3:6a:cb:7f:
         44:92:9a:53:aa:45:34:1b:2d:bb:b9:96:b2:76:a3:8d:48:02:
         ca:a9:ff:9f:9e:8c:0d:e3:a8:42:3c:8a:07:4e:4d:5d:57:31:
         7b:3b:87:8c:94:ca:60:93:b1:7d:05:b9:31:9d:22:69:49:59:
         31:5f:5b:fa:d9:c5:56:38:cf:37:2d:b8:7d:b2:ba:a3:3e:82:
         8c:38:67:a7:05:d9:d1:f4:49:a8:d8:50:e4:98:08:34:17:a6:
         d0:62:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:54:22 2024 by rpki-client on console-ams.rpki-client.org