Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File:                     KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier:          ZECeHWNHy0ZPnhX/wa89meoQwSy5bk1XSiWHgC4lOsk=
Subject key identifier:   EF:EC:45:DC:EC:CC:1E:40:8A:78:AD:FD:9F:5F:31:56:02:19:F0:B9
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer:       /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial:       018F874A89467273F0A89F12227AE89B787A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number:          024E
Signing time:             Fri 17 May 2024 16:02:40 +0000
Manifest this update:     Fri 17 May 2024 16:02:40 +0000
Manifest next update:     Sat 18 May 2024 16:02:40 +0000
Files and hashes:         1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: nhubh26xrbP4JeSnk+tCk8ufdKEeKJJhERYm8SbUQsg=)
                          2: y__nUVcHLbIFOKEDH1O2SMvYy2E.roa (hash: B+5tA5HEK2x9Gqju86J5DnlPE4z1Kj0uZdWbEpdg60Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:89:46:72:73:f0:a8:9f:12:22:7a:e8:9b:78:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
        Validity
            Not Before: May 17 16:02:40 2024 GMT
            Not After : May 18 16:02:40 2024 GMT
        Subject: CN=efec45dceccc1e408a78adfd9f5f31560219f0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2e:b9:99:b8:95:3d:61:a0:5d:a4:99:de:da:
                    f2:6c:6d:48:1d:13:4b:b3:f1:69:f7:f1:27:ea:7d:
                    73:58:94:de:4f:f4:d3:5b:81:7d:75:53:99:e2:eb:
                    fe:09:c5:1f:3e:59:f2:1f:69:50:d0:78:96:e5:c2:
                    33:98:b9:d3:3f:d9:7a:ef:0a:de:18:65:34:d1:1e:
                    67:29:6b:87:0a:71:b3:21:cf:96:18:c4:2a:67:04:
                    2f:be:e9:20:19:03:b4:27:d8:c4:6e:a8:cc:56:2e:
                    6c:b4:f5:e7:5b:c0:92:b4:55:b2:75:53:2c:09:96:
                    f0:58:ab:bc:2b:52:1f:2a:a7:87:13:40:a4:c4:cd:
                    f9:d9:61:de:e4:6b:88:49:52:54:2c:e5:8a:d1:f6:
                    a1:b3:6b:c8:34:b5:01:3c:0b:a0:25:78:5a:46:d6:
                    32:4d:d0:cf:34:47:1b:0d:a8:12:52:96:25:29:0a:
                    af:60:4d:da:bf:1a:c5:07:ec:50:c0:bc:04:b3:a4:
                    0d:19:5d:44:88:98:7f:14:2b:a3:3c:22:5a:57:8a:
                    cc:92:75:a2:d1:8d:85:31:2e:30:89:c1:c5:b6:82:
                    a0:ba:36:9e:87:21:b1:28:50:a8:d5:9e:3b:55:5a:
                    85:28:53:41:c6:37:6a:6d:9e:18:85:e7:da:bd:20:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EC:45:DC:EC:CC:1E:40:8A:78:AD:FD:9F:5F:31:56:02:19:F0:B9
            X509v3 Authority Key Identifier:
                keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e2:4f:03:a0:b9:aa:74:af:ed:21:2c:24:8a:53:8e:58:e3:
         39:d0:72:87:6e:3c:8d:91:b5:25:a6:00:32:ea:ef:35:ef:ae:
         14:21:3e:a2:fd:b9:1f:ed:e0:3e:7b:c2:4b:df:fc:dd:4e:9c:
         3b:00:b6:87:4d:d6:b9:49:6c:20:85:59:72:7b:90:bc:0f:29:
         ff:97:1c:d5:d8:68:32:18:e6:d2:bc:9b:46:d0:2a:1a:bd:f6:
         f1:85:41:a7:3b:d7:fc:8b:97:44:83:09:50:a2:60:76:4d:d5:
         74:23:39:cf:63:26:15:37:3b:e0:c7:07:50:79:52:44:bf:94:
         2f:bd:dc:c5:41:dd:ec:59:22:d6:58:7c:81:5d:5f:75:d6:61:
         b5:d2:02:f8:c2:15:5f:e9:54:a0:b4:1f:90:66:51:30:6c:a5:
         81:4b:82:9b:94:4f:e8:5d:30:68:9c:7f:a5:0e:00:42:14:90:
         bd:54:45:ec:5d:fc:c2:f9:ff:a6:75:e7:61:1a:c4:ad:16:a0:
         14:6c:6c:eb:fe:7d:34:e9:35:65:bc:36:de:d5:76:af:41:00:
         40:c5:2b:c7:f7:1e:a2:3a:be:cc:c4:ce:53:99:a6:49:d0:81:
         55:20:b1:5b:71:08:ff:e6:87:55:4e:2f:a5:6f:17:26:84:2f:
         64:ca:2b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:50 2024 by rpki-client on console-ams.rpki-client.org