Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File:                     KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier:          NFD2ba/4l7xqw8IbpVZVU2Fz3G7pkuPH9khbGQdSCDE=
Subject key identifier:   80:6C:37:96:17:DB:ED:EB:6A:3B:61:68:4A:FD:19:15:BF:64:54:45
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer:       /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial:       018F95A91A8AC0889D0434FFAF1987AD8DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number:          117F
Signing time:             Mon 20 May 2024 11:00:38 +0000
Manifest this update:     Mon 20 May 2024 11:00:38 +0000
Manifest next update:     Tue 21 May 2024 11:00:38 +0000
Files and hashes:         1: Eg010foeDidjHbdv48-mVS6XCRs.roa (hash: vhrQj8SQCqEiL5/P6CdLUGBUG5oQ/GSfkJQdpuo/ABY=)
                          2: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: 5eeZu6+4WoSbkNSD39bsxdNXilEnIQcG15kMAz2r5bk=)
                          3: xMbA30gBKjHeRgfO5JswW1Q1v7M.roa (hash: CpKopsson8WBUi48FP9qQeFxgZeCChJEhAIfnOECrAo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:a9:1a:8a:c0:88:9d:04:34:ff:af:19:87:ad:8d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
        Validity
            Not Before: May 20 11:00:38 2024 GMT
            Not After : May 21 11:00:38 2024 GMT
        Subject: CN=806c379617dbedeb6a3b61684afd1915bf645445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:5a:ef:02:98:3e:58:33:b4:3e:cf:0e:8c:
                    cf:c4:17:07:cb:b3:cb:1f:a8:03:a2:84:d0:38:30:
                    ba:5f:8f:d0:e2:ee:07:2d:60:de:df:d0:c4:04:88:
                    e2:0e:e5:8d:d7:f0:d1:5f:cc:2d:16:d8:e1:a6:d0:
                    b8:57:63:a6:6a:bc:10:a0:69:64:67:f8:d8:27:b9:
                    f7:96:f9:3b:61:f7:c3:1b:f4:52:38:bf:cb:f6:b1:
                    34:82:40:d5:cc:a3:52:77:46:28:a7:eb:66:78:23:
                    87:37:d0:d7:83:ce:8f:61:52:46:3a:3b:a0:b9:5e:
                    07:25:fa:85:dd:30:77:4d:4d:e9:a5:f4:f1:2e:a4:
                    e6:fd:19:39:f8:7c:db:ab:d9:25:c3:e8:8c:4c:e4:
                    5f:c7:08:2d:42:98:90:8a:9b:17:b3:f5:22:81:37:
                    8b:60:8a:01:e1:f0:cc:fe:0b:ec:d5:dd:79:fb:51:
                    7b:5a:68:62:57:d4:06:61:ba:85:f9:02:dc:8c:74:
                    84:bd:4b:50:2b:f0:5e:4e:7c:1f:02:6a:da:9e:84:
                    63:18:a5:ee:16:d2:bd:03:b8:db:ed:54:c7:a9:3b:
                    24:c5:c4:4c:53:66:93:72:a4:7a:7e:ee:51:2f:18:
                    f3:dd:41:c4:c5:9c:f4:02:7f:80:4a:ce:d3:a1:97:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:37:96:17:DB:ED:EB:6A:3B:61:68:4A:FD:19:15:BF:64:54:45
            X509v3 Authority Key Identifier:
                keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:82:26:6a:ad:74:6e:06:f7:ba:87:19:dc:b6:cc:d7:5f:56:
         04:fd:61:52:c6:76:91:e9:26:ed:f4:d6:19:95:11:a6:74:14:
         cc:a5:44:10:7c:78:6e:07:bc:25:86:4a:17:74:d7:34:0d:93:
         5b:c7:73:5e:6a:bb:67:28:9c:9c:f9:b7:e7:2a:26:93:89:4e:
         46:95:41:82:c9:73:98:65:1e:6c:e3:80:a1:64:30:7b:55:ef:
         5a:97:e1:7a:4e:fd:0a:41:2a:43:48:0b:cb:7f:17:ae:45:83:
         4a:79:f9:74:e0:54:e1:c9:c7:57:ca:a0:25:9e:6c:6e:70:0b:
         3b:b8:1a:f9:00:7c:71:76:8f:47:ec:2e:e5:68:92:87:da:84:
         ef:07:4b:da:b7:1f:52:ad:fa:ae:03:04:7a:70:57:b9:51:54:
         0d:a2:2e:b2:ae:08:1a:87:3e:f2:e0:18:3c:6a:07:b6:ca:4a:
         79:6a:57:4d:7a:d0:94:4f:28:8f:f4:d3:c9:80:eb:55:d5:03:
         2d:05:fd:34:63:99:50:ff:ab:a9:7f:92:0d:19:04:af:49:45:
         65:b0:fc:5b:82:e5:44:cb:73:5b:d2:cb:c6:ca:17:9c:f1:75:
         12:dc:22:f4:df:74:1f:d9:54:60:10:b1:0d:88:26:1e:16:fe:
         81:02:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:01:43 2024 by rpki-client on console-ams.rpki-client.org