Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File:                     KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier:          Avntaxrc0TSz/tN9+JWmPJSQM1tkAmHq06RgFzfVyMI=
Subject key identifier:   56:AF:B8:71:18:0C:0F:F1:E3:39:B7:10:A4:D4:AC:8D:16:F8:AB:87
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer:       /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial:       018F8938CF0F171923743F5B2674389E5DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number:          0111
Signing time:             Sat 18 May 2024 01:02:32 +0000
Manifest this update:     Sat 18 May 2024 01:02:32 +0000
Manifest next update:     Sun 19 May 2024 01:02:32 +0000
Files and hashes:         1: IDWCNBQQFEnbye7uGg_fkl-BR20.roa (hash: dSFRXZ0ZiNA8FLCAgC5blFKKzz7II9TRZXP+5twNJaU=)
                          2: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: D1KKVkjoJrP+jQqsR5FdV5iDqpcDRtfS1EFbvaOeqzE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:cf:0f:17:19:23:74:3f:5b:26:74:38:9e:5d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
        Validity
            Not Before: May 18 01:02:32 2024 GMT
            Not After : May 19 01:02:32 2024 GMT
        Subject: CN=56afb871180c0ff1e339b710a4d4ac8d16f8ab87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:73:2f:91:8a:6a:f2:08:ca:ac:53:6a:99:
                    28:66:22:83:04:12:49:69:15:e5:b4:d4:8c:e8:c8:
                    2d:e9:7f:ae:21:73:64:86:e6:bd:b1:a7:fc:03:b8:
                    78:77:c1:87:f1:dd:af:70:f7:2f:7e:1d:c8:4c:cc:
                    9e:ac:c6:9d:24:de:d3:ee:52:63:0f:76:db:49:22:
                    a8:7f:4b:b0:3b:2a:91:c8:61:35:81:c9:73:f7:72:
                    c3:56:7a:e4:56:a9:bf:db:05:92:62:aa:67:c7:cf:
                    f8:2a:38:40:be:48:69:be:97:1d:bb:7a:72:3b:cd:
                    de:94:fb:2b:3e:98:31:37:41:a6:62:03:38:fe:b6:
                    b5:ab:77:b6:a8:9f:79:e3:42:de:cf:79:fe:43:5a:
                    35:39:b9:d6:57:38:ec:d6:0b:53:34:85:1d:d4:36:
                    ac:a5:f1:ec:6f:12:00:a5:d0:f5:44:ef:d5:42:10:
                    95:25:c6:30:56:59:9c:d3:d7:8e:a8:81:90:8b:bf:
                    59:be:13:7a:29:3c:ab:e7:65:c1:48:20:4e:7a:3b:
                    fc:b6:fa:3f:de:91:8b:07:b3:e6:ff:e6:b2:32:1c:
                    66:12:c4:10:93:04:f1:91:cb:c5:25:29:40:73:e5:
                    e6:dd:6b:bb:09:35:d4:2a:5c:a1:c7:8a:52:02:44:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AF:B8:71:18:0C:0F:F1:E3:39:B7:10:A4:D4:AC:8D:16:F8:AB:87
            X509v3 Authority Key Identifier:
                keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:0f:74:c7:c9:68:b9:2e:eb:cd:e7:9d:f7:10:44:7d:b3:
         bc:df:1d:d4:58:42:1c:d0:8c:60:d6:5c:8a:99:28:b2:28:17:
         cd:81:aa:fd:ad:7d:89:10:f4:e4:0a:86:68:85:09:c8:24:87:
         1c:44:c3:92:53:96:87:de:a3:1d:7c:28:0f:75:de:cd:b7:87:
         58:ef:fc:87:be:cc:7e:21:85:0f:dc:34:46:6c:7d:cb:37:47:
         2b:b5:49:bf:ed:29:9e:63:4f:7b:78:b9:24:a7:b7:ff:f0:eb:
         dc:bb:ec:5e:6a:d1:07:31:27:a1:3e:68:3b:d2:e8:ed:e1:88:
         1a:42:b8:04:ee:0d:81:dd:aa:ee:46:a4:cb:dd:02:3b:e3:07:
         a9:fe:62:87:34:79:ec:3e:d8:75:a2:15:4b:b8:cb:65:97:29:
         f4:50:3d:f2:5c:41:33:81:da:a1:ef:95:9e:7b:9a:c8:6c:0c:
         72:a9:f1:19:e6:fc:dd:69:92:f8:ac:36:79:27:63:c3:a1:ad:
         90:51:5e:e9:19:ab:80:41:dc:d4:70:9c:54:e7:5a:50:0c:56:
         a7:a0:cd:84:48:5d:71:de:fd:78:94:42:82:57:a5:bd:3f:ba:
         f6:7f:f1:91:46:d3:52:27:b4:53:b5:dd:54:b1:27:1a:64:12:
         4e:2a:39:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JOM8PFxkjdD9bJnQ4nl3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDU1OGUyNjU2YmY4OTczMzM4OTU5NGRmMTQ0ZDIxZDFk
YzAzMTMwHhcNMjQwNTE4MDEwMjMyWhcNMjQwNTE5MDEwMjMyWjAzMTEwLwYDVQQD
Eyg1NmFmYjg3MTE4MGMwZmYxZTMzOWI3MTBhNGQ0YWM4ZDE2ZjhhYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspJzL5GKavIIyqxTapkoZiKDBBJJ
aRXltNSM6Mgt6X+uIXNkhua9saf8A7h4d8GH8d2vcPcvfh3ITMyerMadJN7T7lJj
D3bbSSKof0uwOyqRyGE1gclz93LDVnrkVqm/2wWSYqpnx8/4KjhAvkhpvpcdu3py
O83elPsrPpgxN0GmYgM4/ra1q3e2qJ9540Lez3n+Q1o1ObnWVzjs1gtTNIUd1Das
pfHsbxIApdD1RO/VQhCVJcYwVlmc09eOqIGQi79ZvhN6KTyr52XBSCBOejv8tvo/
3pGLB7Pm/+ayMhxmEsQQkwTxkcvFJSlAc+Xm3Wu7CTXUKlyhx4pSAkTqqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFavuHEYDA/x4zm3EKTUrI0W+KuHMB8GA1UdIwQY
MBaAFCpFWOJla/iXMziVlN8UTSHR3AMTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzkt
OTA1NTI4M2YwZWFlLzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzktOTA1NTI4M2YwZWFl
LzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCwPdMfJ
aLku683nnfcQRH2zvN8d1FhCHNCMYNZcipkosigXzYGq/a19iRD05AqGaIUJyCSH
HETDklOWh96jHXwoD3XezbeHWO/8h77MfiGFD9w0Rmx9yzdHK7VJv+0pnmNPe3i5
JKe3//Dr3LvsXmrRBzEnoT5oO9Lo7eGIGkK4BO4Ngd2q7kaky90CO+MHqf5ihzR5
7D7YdaIVS7jLZZcp9FA98lxBM4Haoe+VnnuayGwMcqnxGeb83WmS+Kw2eSdjw6Gt
kFFe6RmrgEHc1HCcVOdaUAxWp6DNhEhdcd79eJRCglelvT+69n/xkUbTUie0U7Xd
VLEnGmQSTio55g==
-----END CERTIFICATE-----
Generated at Sat May 18 02:58:50 2024 by rpki-client on console-ams.rpki-client.org