Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File:                     Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier:          UUuyfaaOmGUwLZwD/7pK4urqebTPBwmSKYnWt1Hg9n0=
Subject key identifier:   C3:F9:40:73:E9:ED:76:A7:67:CC:24:59:20:1B:B1:B1:57:8F:AF:21
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer:       /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial:       018F87ECF89D34C1C47CAAAE54A655E7558C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number:          09C5
Signing time:             Fri 17 May 2024 19:00:05 +0000
Manifest this update:     Fri 17 May 2024 19:00:05 +0000
Manifest next update:     Sat 18 May 2024 19:00:05 +0000
Files and hashes:         1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: 8yywbfkLZKnP2qeRTKwbqRacActBZqwXMkSfTdg4/Zc=)
                          2: MGUxPLxmQbSwHsgzk7XVBIBzEH0.roa (hash: KQjYGSGr29tW2gEfeRq7keHVn2KdKz1LIbb9rZC/wts=)
                          3: XzZ_eDvQudMjfrVt71MhBN20qFo.roa (hash: vWJnS4bVH9zSypK0qkycP1U2oX/uSpILb8Pat5uosaI=)
                          4: Ywm7NOBdz15EBQMtBjDlJDbL_vA.roa (hash: Tir6LHxWbnVFDyczAccPcscGVjEjU0bGz7Z+TNJR93I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:f8:9d:34:c1:c4:7c:aa:ae:54:a6:55:e7:55:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
        Validity
            Not Before: May 17 19:00:05 2024 GMT
            Not After : May 18 19:00:05 2024 GMT
        Subject: CN=c3f94073e9ed76a767cc2459201bb1b1578faf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:94:15:95:67:a8:8d:c6:fa:71:95:36:97:e0:
                    c8:68:98:b3:b7:cc:3d:15:4f:75:2d:48:b0:18:32:
                    5c:0a:37:b0:0d:dd:52:cb:9c:bd:12:17:3e:fd:98:
                    c8:1f:07:e6:47:09:e3:71:91:27:67:3e:95:f8:73:
                    d3:c1:56:eb:53:46:04:24:e7:da:18:44:25:8d:e7:
                    d9:1a:fb:ca:31:b9:ae:d3:2d:f7:2f:ea:03:7c:a2:
                    2f:71:93:be:0a:22:ca:2c:8b:f6:33:d4:9a:cd:3b:
                    af:38:c9:a3:6d:75:e8:f4:b0:b6:5d:3e:72:58:d1:
                    07:a7:28:19:9c:16:d2:a1:71:46:55:ca:9c:6a:11:
                    3b:b0:12:3a:54:fb:8b:ed:0f:23:a4:5b:a7:ce:19:
                    6b:89:c1:d0:2c:8c:ef:5c:44:66:06:cf:c6:43:c6:
                    1e:76:e4:7a:ad:c3:1e:2c:cf:5d:6a:eb:21:91:53:
                    f8:2d:1a:2c:e9:4f:fc:c8:ae:58:04:37:26:7c:f2:
                    d6:91:24:bb:1a:05:58:9a:0e:4f:9c:24:22:ce:f3:
                    b8:59:b4:2c:25:be:81:ab:a4:95:18:6c:88:1d:9e:
                    d9:c3:01:69:e4:cc:62:f7:dc:ee:04:46:a3:88:79:
                    b3:a9:3d:7a:6e:6d:38:8b:a0:5c:89:fd:26:70:d8:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F9:40:73:E9:ED:76:A7:67:CC:24:59:20:1B:B1:B1:57:8F:AF:21
            X509v3 Authority Key Identifier:
                keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:b8:7a:54:0d:a9:90:70:a4:2a:ce:f4:e9:d7:54:9e:57:
         2d:00:74:4d:98:20:6f:8d:36:5f:18:5b:89:a7:93:03:b9:b2:
         fd:d3:53:9a:5d:29:d6:07:b5:e1:cb:07:6f:86:a2:c9:d3:ff:
         08:7b:36:71:ae:c4:fb:db:d2:4f:54:10:22:c8:0e:2a:06:b0:
         e4:a2:b9:d7:fe:6e:9b:a3:d5:f6:31:18:31:95:91:69:90:71:
         eb:01:e7:ca:3d:fa:3c:d8:fd:27:00:08:b1:98:40:28:71:da:
         75:66:1a:9b:50:cb:09:1a:12:7b:54:03:ba:44:ae:dd:75:d8:
         0e:bb:8f:92:9d:54:29:7f:8e:91:3d:2a:02:03:ea:60:e5:8f:
         da:41:06:37:ce:73:f4:39:5e:8a:0d:46:6c:22:1c:59:76:63:
         49:45:a7:95:82:1e:07:8f:c5:00:4f:cf:d8:64:04:09:7e:d4:
         fc:f7:d9:43:ae:38:08:16:8d:e7:86:58:22:e3:eb:51:70:f8:
         24:59:99:5c:80:14:1b:ae:eb:45:a0:83:29:a9:92:b3:9d:04:
         a2:06:8b:f7:c5:98:4e:92:8c:75:76:9c:2d:d1:05:e4:03:bd:
         13:99:ee:51:0d:c9:6d:f4:fe:50:69:3f:de:a2:f9:c2:22:68:
         04:ba:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:32:35 2024 by rpki-client on console-fra.rpki-client.org