Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft
File:                     K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft (raw, json)
Hash identifier:          mNcD8ujDg2WQX+k3yCI0hIYDyvBBQp6McxZVdNRzyXs=
Subject key identifier:   44:FC:36:D2:57:34:3E:55:E3:E6:46:62:F8:06:61:3A:C3:5D:DF:8F
Authority key identifier: 2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
Certificate issuer:       /CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Certificate serial:       018F88241241508567893473871139A0B24E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 20:00:16 +0000
Manifest this update:     Fri 17 May 2024 20:00:16 +0000
Manifest next update:     Sat 18 May 2024 20:00:16 +0000
Files and hashes:         1: K13Ozxnbp1IJK7w9J5rBzE8eNjc.crl (hash: XFOPuRDfxE8BKNwJuiScxKZOTrtrygZPsM3qZQy/QoA=)
                          2: Zgja7FrKgu0kcg8xx1mDcSFePI8.roa (hash: Iyya5REQVgs2HbJBf2ezyby/rsaLnBalqBOLiOu9Je8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:12:41:50:85:67:89:34:73:87:11:39:a0:b2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
        Validity
            Not Before: May 17 20:00:16 2024 GMT
            Not After : May 18 20:00:16 2024 GMT
        Subject: CN=44fc36d257343e55e3e64662f806613ac35ddf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:8b:74:f2:ff:a9:2b:12:d9:af:d6:02:84:
                    c6:79:8d:64:6d:de:d6:1d:35:b2:dd:36:7c:d7:35:
                    68:80:2a:43:59:a2:79:fb:f4:18:c2:bc:cf:7b:ce:
                    25:37:d3:e6:6d:60:3f:0b:0b:6f:dd:a0:58:18:0b:
                    c9:66:63:f8:7f:74:21:9e:c0:b5:a5:43:06:45:d2:
                    1d:e5:df:d8:72:13:a7:a3:9f:be:24:9d:57:06:8f:
                    94:c6:24:bf:64:8f:c0:ac:dd:1f:3f:87:ac:9b:62:
                    9b:d9:14:9f:80:1e:0a:40:e8:31:1d:df:6f:e5:1e:
                    6d:3a:97:3d:72:b2:15:7b:af:38:d8:8b:b7:35:4e:
                    73:ed:73:d9:b1:e0:e5:36:4e:3a:d7:7d:7c:f5:bd:
                    8c:49:53:f3:04:58:22:cd:72:5d:76:93:80:05:20:
                    ba:dd:e6:de:60:69:dd:de:a2:60:f0:f2:b9:55:f4:
                    e0:f0:53:5f:24:b9:a9:3a:60:87:0e:ea:bd:42:3f:
                    f0:8c:fb:da:41:d8:17:15:d2:4e:57:b6:e3:46:e9:
                    db:94:7c:cd:39:ad:8b:11:09:50:36:2f:7c:14:4f:
                    12:3c:04:8b:4c:19:0f:c8:0a:3c:45:81:63:b8:4e:
                    0c:fd:00:1a:5a:67:00:fb:30:5c:1a:4f:ef:ab:23:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:36:D2:57:34:3E:55:E3:E6:46:62:F8:06:61:3A:C3:5D:DF:8F
            X509v3 Authority Key Identifier:
                keyid:2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6d:e3:83:f4:10:4d:41:81:ce:72:af:da:af:6a:9a:2c:01:
         5e:a3:59:fa:7b:59:51:d4:b5:03:b2:73:ec:ea:1f:69:30:74:
         d3:df:91:f9:e5:a9:d7:a3:69:f3:ca:36:32:11:6f:e7:21:8e:
         67:f7:2a:f9:20:5c:6e:83:28:30:2f:ee:bc:b1:94:4e:c8:fe:
         62:5a:7d:3e:df:eb:e4:f2:41:96:d6:c5:9c:4b:ba:54:cc:99:
         9d:8a:f5:4a:77:59:2d:8a:c5:f8:c9:2a:d7:a4:72:78:41:d5:
         85:e8:01:ae:3c:4c:82:25:1e:44:e8:54:1c:23:16:2c:47:69:
         b3:a6:11:1e:2f:67:dc:79:31:06:a3:00:d2:7d:14:d8:9d:23:
         91:f5:07:bc:02:8d:42:c7:c3:9c:f1:7b:1e:ec:52:13:3d:de:
         7f:c2:7d:cc:11:7a:05:aa:78:34:7c:a1:2f:c0:94:dc:01:90:
         5d:27:e1:ef:0d:85:d3:aa:15:a3:36:55:71:c8:29:d7:80:b9:
         4b:19:5e:71:38:cc:84:0f:eb:11:d3:58:a8:6c:d1:39:4c:ef:
         42:66:63:b8:ef:4c:6a:bf:71:3a:ec:13:97:85:4a:86:b3:99:
         84:82:f1:31:80:f2:b5:e1:9b:ee:24:cd:94:c4:86:77:6e:36:
         d9:09:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:48 2024 by rpki-client on console-ams.rpki-client.org