Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File:                     KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier:          e6qwHXkB8gA9avECyKophN+qIytFDhlLC4hkpDfvjrw=
Subject key identifier:   74:E1:0C:D2:44:AA:01:C4:AE:6B:D7:18:89:1A:22:94:CD:96:BB:F7
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer:       /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial:       018F87B6B98D0DC0530C10B43D02CEACD682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 18:00:50 +0000
Manifest this update:     Fri 17 May 2024 18:00:50 +0000
Manifest next update:     Sat 18 May 2024 18:00:50 +0000
Files and hashes:         1: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: IgtPddPyAaJXRUd/RbcsY/WC3v7kqZ3OpHFNA/iWQUs=)
                          2: dqiXa-_ZV52hke_US630uJBHSGI.roa (hash: F9K5U7zF3pm61pfHNh8BT6LB+njv608OXqzIPhgvNM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b9:8d:0d:c0:53:0c:10:b4:3d:02:ce:ac:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
        Validity
            Not Before: May 17 18:00:50 2024 GMT
            Not After : May 18 18:00:50 2024 GMT
        Subject: CN=74e10cd244aa01c4ae6bd718891a2294cd96bbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:b0:5d:c3:37:c3:8b:84:93:15:4c:6a:bc:
                    36:d6:29:9e:3e:e3:b5:7c:d5:3f:1d:2f:27:e8:d4:
                    3b:28:4c:5e:01:be:02:f3:83:42:cb:2c:55:b9:c6:
                    07:6c:44:fb:45:16:b6:9d:4e:d2:5d:d6:b9:43:e9:
                    74:83:16:5d:3a:b4:f5:7e:d5:15:c6:ee:1f:77:91:
                    46:e5:2c:a1:51:b6:a5:74:a4:f2:24:4b:27:72:51:
                    5d:d2:5d:91:34:0a:a2:10:e7:0d:64:e1:75:14:60:
                    7c:f2:27:33:9e:cb:ab:a1:3d:d2:05:e5:c1:e6:d5:
                    f4:2b:4d:ec:ab:a5:6a:4c:27:bd:58:28:56:88:dc:
                    88:cc:b8:11:4e:24:e7:a2:74:71:cd:68:c1:0f:48:
                    f4:b6:fb:41:91:e8:cf:df:60:9c:1e:78:5c:fb:46:
                    7e:3b:4c:b5:d6:54:69:54:67:ff:2e:40:c9:09:28:
                    ba:9f:63:ef:ea:24:10:20:c3:9a:2e:bb:1d:5f:d0:
                    bc:47:81:f1:58:cb:c4:bc:af:53:e4:f6:46:aa:fe:
                    06:8b:df:47:e2:3a:15:2a:86:3c:ee:05:b6:e5:7e:
                    24:7b:1e:33:69:b3:6a:72:db:fc:7c:39:44:f4:6c:
                    ed:f6:70:d0:fe:52:4b:1c:52:61:5f:35:c1:1a:77:
                    fd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E1:0C:D2:44:AA:01:C4:AE:6B:D7:18:89:1A:22:94:CD:96:BB:F7
            X509v3 Authority Key Identifier:
                keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:b0:94:94:0c:b0:68:ef:50:61:f6:eb:57:d9:b1:6d:40:
         77:1c:6e:c0:5e:1d:35:7c:ca:75:fd:f5:39:96:67:32:bc:da:
         9f:d1:52:53:9d:be:7f:aa:6c:36:3d:7c:fc:75:c0:e9:33:94:
         d4:91:56:74:72:62:c9:51:59:50:d4:57:fd:1e:b1:c1:a2:b9:
         6c:f9:d4:9c:0c:af:88:63:e2:a6:f9:21:ba:74:c7:20:dc:61:
         bc:9e:b0:67:2b:f8:8c:64:41:86:7f:e1:d8:1e:c1:b3:76:a7:
         df:f0:ec:60:50:4b:31:ee:2d:93:30:af:fe:97:fb:30:b7:0b:
         c4:da:c6:3c:b1:53:40:35:34:50:c2:c7:d8:19:ad:de:12:9f:
         42:69:31:73:22:27:8a:e5:76:9c:c1:49:d6:a2:ad:40:b8:4d:
         8d:ea:2b:35:ed:e4:0a:a1:44:db:9b:5b:cd:43:f6:1f:bd:2a:
         d6:d8:f5:09:81:6e:ed:a0:f7:3b:31:91:44:9d:25:ae:7f:1a:
         06:e0:0b:4d:ff:33:d6:a9:39:5f:e3:a2:65:66:c7:6c:13:43:
         6c:fa:80:6b:2f:d8:86:79:64:93:bd:52:a8:01:1c:f7:a7:29:
         3c:ec:81:85:6d:54:52:07:e7:98:58:67:e2:02:45:03:8c:1d:
         0c:cb:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:32 2024 by rpki-client on console-ams.rpki-client.org