Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File:                     K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier:          NnCHF7nzfPS/L+knZVorm5jXbGoh8Ylob6lcQexC3A4=
Subject key identifier:   B8:3E:C6:13:E4:19:8D:DF:C4:BF:42:5C:C0:65:55:8B:1C:55:40:1D
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer:       /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial:       018F87484F02BBCFD632906F3A31349AEA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number:          0942
Signing time:             Fri 17 May 2024 16:00:13 +0000
Manifest this update:     Fri 17 May 2024 16:00:13 +0000
Manifest next update:     Sat 18 May 2024 16:00:13 +0000
Files and hashes:         1: 1uT0U-OBMjtzpddsJ6jfsq-SE9M.roa (hash: /f0vrr808ifIDtJxA5PEwWMeOaFuwEhM/WlsbfyWdpM=)
                          2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: ha3TCLLK+qEFZPYU3q5FNXf4isPYuRiBzU0B/eY+y1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:4f:02:bb:cf:d6:32:90:6f:3a:31:34:9a:ea:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
        Validity
            Not Before: May 17 16:00:13 2024 GMT
            Not After : May 18 16:00:13 2024 GMT
        Subject: CN=b83ec613e4198ddfc4bf425cc065558b1c55401d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:0d:91:dd:df:85:4e:bf:da:5b:f3:b3:31:
                    7c:62:ba:ef:7f:3d:17:38:92:6d:9c:8d:7c:20:1b:
                    92:cc:d5:5e:b3:26:f4:fb:46:17:ae:33:7f:9c:7f:
                    5f:c7:f9:e9:cb:e2:fd:c5:5c:01:36:8e:48:26:6d:
                    93:1a:a9:4a:04:8a:30:20:d2:4b:8d:e7:5b:c0:c6:
                    ca:11:fa:c9:f9:1b:45:d8:7b:0e:48:ca:a3:ac:69:
                    14:8f:a2:51:38:56:2f:43:31:5d:58:3f:fc:ba:0e:
                    16:2e:f4:8f:55:62:d8:bd:66:b6:92:6d:a7:12:4a:
                    be:14:4c:6f:3b:e5:80:14:e1:1f:77:69:47:43:28:
                    44:6a:32:15:ea:a2:a1:d3:12:9e:d7:00:93:7e:8f:
                    b0:d2:2b:59:d7:aa:36:aa:80:3b:19:a2:2d:3b:60:
                    31:a8:a7:27:7c:5d:9f:c1:47:1f:db:1c:f0:da:cb:
                    58:3d:98:8f:42:8d:09:35:63:65:b3:19:f3:8e:66:
                    64:42:f7:40:0a:e6:6a:8c:7c:16:e2:8a:49:eb:59:
                    d2:fc:22:59:13:d9:34:60:51:a6:99:90:10:43:69:
                    2a:f1:d2:b5:b0:2f:3a:ef:38:9f:87:5d:2a:93:49:
                    42:20:91:44:6b:9b:43:bd:8a:ff:47:e8:ac:9d:18:
                    d6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3E:C6:13:E4:19:8D:DF:C4:BF:42:5C:C0:65:55:8B:1C:55:40:1D
            X509v3 Authority Key Identifier:
                keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:43:02:f9:58:1b:be:80:d4:c2:33:66:21:79:46:61:2b:43:
         00:f8:55:92:e8:9a:e7:d0:2b:f1:37:2d:a3:27:36:ac:98:1e:
         fb:5b:74:f2:2e:06:d8:3d:5b:ac:88:bc:21:a0:80:df:ea:11:
         18:75:f8:25:be:96:ce:a1:f4:25:8b:a2:dc:13:1f:08:4e:d4:
         af:e2:46:2f:c3:ba:12:a0:6d:73:03:28:51:91:1b:2d:48:35:
         7b:f6:aa:84:84:4f:d0:ac:aa:4f:f5:0e:55:85:01:de:be:c5:
         51:50:41:07:62:cc:69:4d:ab:ce:53:20:46:89:04:ed:4c:25:
         1e:52:2f:94:43:c1:b6:96:f4:13:c2:ba:80:fa:20:b8:9f:e0:
         dc:38:e1:30:80:18:69:c9:ef:f7:50:67:e1:53:ae:80:31:6b:
         ea:ae:bc:cb:e1:cb:cb:cb:e1:cb:ea:3f:b7:80:30:9f:b0:c2:
         69:48:c8:1e:34:0e:8b:a5:0b:7f:e6:a9:25:4b:9f:25:86:c4:
         e3:43:9d:4c:9e:cc:35:97:09:ba:f3:6f:7f:9a:1e:59:13:83:
         f4:31:07:9b:2d:13:02:8b:78:0a:f0:d0:b3:1d:54:74:77:56:
         e9:3f:d6:e2:95:cd:fb:4d:ac:04:9c:db:6e:b2:d2:24:86:ad:
         42:91:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:10 2024 by rpki-client on console-fra.rpki-client.org