Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File:                     K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier:          ac+O5D5oLm1ojw16sBcFzRj0P+e+JBCBNhBAkcwVku4=
Subject key identifier:   1F:7A:A4:A6:A8:38:F3:26:A4:43:F8:80:60:04:AC:93:53:67:A2:09
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer:       /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial:       018F87487F08723FEB57206FD1C82BF3AC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number:          0957
Signing time:             Fri 17 May 2024 16:00:26 +0000
Manifest this update:     Fri 17 May 2024 16:00:26 +0000
Manifest next update:     Sat 18 May 2024 16:00:26 +0000
Files and hashes:         1: DN3ecQDL_wDqjYyctywV8GMnmPc.roa (hash: Sba2vmMLjAdudedpAXgOE5log/eieSdseSgB+8M2ep0=)
                          2: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: 9quvPw8XGZPCLrK1EbBL3a3Z4VplFbysWXIcejuIwSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7f:08:72:3f:eb:57:20:6f:d1:c8:2b:f3:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
        Validity
            Not Before: May 17 16:00:26 2024 GMT
            Not After : May 18 16:00:26 2024 GMT
        Subject: CN=1f7aa4a6a838f326a443f8806004ac935367a209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:10:d3:86:c5:ea:3a:03:0c:21:76:55:08:
                    bf:35:a8:79:b8:d6:ce:1f:fd:c1:d7:a2:bf:6b:05:
                    6f:33:2f:52:73:d4:ab:35:6e:04:a4:64:1c:e0:af:
                    f5:75:49:4f:e7:45:37:9b:33:8f:24:02:19:d6:de:
                    75:0b:f6:c9:8e:53:52:cd:dc:71:6d:a5:3a:71:6b:
                    72:e9:8a:3a:c0:bd:f9:48:b6:23:25:70:97:ea:75:
                    83:fa:45:1a:84:86:b2:10:e4:50:c3:13:1a:f2:d3:
                    aa:04:ac:0d:9a:cb:e3:83:bc:dd:aa:cf:9e:28:68:
                    2b:75:f2:d6:de:55:98:65:ab:75:f4:13:ad:ea:60:
                    ed:6a:4f:fe:d9:91:61:63:99:11:c6:c2:4c:d8:9a:
                    a6:74:b8:a6:be:4f:55:14:63:f6:10:b5:54:58:ab:
                    d7:58:59:a6:dd:c9:b0:3e:33:05:eb:9b:f3:ef:a6:
                    4d:fb:76:34:b6:4b:d6:e3:f6:11:49:09:eb:ca:e8:
                    49:c0:60:12:5d:d9:4a:07:dc:5b:9f:9f:21:bc:81:
                    44:ab:77:79:57:21:78:25:4d:35:1d:27:81:f0:aa:
                    d4:15:45:04:47:40:99:23:18:1c:d0:39:b4:2c:67:
                    a7:1d:fb:e2:09:91:ba:32:24:ef:7e:61:0e:30:b8:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7A:A4:A6:A8:38:F3:26:A4:43:F8:80:60:04:AC:93:53:67:A2:09
            X509v3 Authority Key Identifier:
                keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:67:fb:c6:89:53:55:5c:91:81:32:cc:c3:ab:b8:18:f3:
         26:91:99:b6:3e:48:c6:1a:b9:2c:11:b0:96:97:af:67:b3:9f:
         ba:9b:e0:79:12:04:a8:3b:fd:91:0c:df:3b:c4:a7:76:7c:41:
         97:3a:a9:17:5a:e9:f7:73:05:b3:cc:e2:0a:ec:1e:2f:b0:d7:
         4a:3c:f3:54:0a:e3:16:db:9a:3a:88:3a:00:aa:bd:77:ab:a8:
         ab:ef:ce:0e:38:19:e2:86:6c:aa:02:36:7d:c2:26:9d:9e:4f:
         c6:14:23:d2:eb:e7:83:3f:cf:90:d3:26:f1:f1:11:62:8a:d2:
         ab:98:1f:1a:a6:0e:89:5a:d0:4a:eb:28:12:b8:1f:97:cc:0c:
         8a:eb:15:47:31:5f:ca:00:b7:7a:b7:25:0e:c1:b5:45:78:db:
         e3:e4:e1:74:44:33:aa:9e:c3:2e:4f:19:23:8b:25:2d:8e:ab:
         05:87:de:75:a4:78:3a:6d:20:8a:10:86:01:11:f0:65:bc:9d:
         fa:c3:75:6c:f1:44:c0:33:6d:42:b4:c8:91:18:a4:ae:f9:3b:
         c4:c6:1d:66:43:68:30:dc:0a:c2:50:8a:3b:16:0b:5f:55:be:
         fd:13:fc:e3:40:4a:9c:58:e3:7c:95:4f:7d:98:79:ec:bd:d7:
         7e:16:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:27 2024 by rpki-client on console-fra.rpki-client.org