Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File:                     kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier:          dYq3EefDrgJYdrqnhFjJGTP1n9Tn8MVay1HihnrDToc=
Subject key identifier:   54:FE:DE:C6:C1:D9:0A:48:A5:0B:46:05:D7:62:09:0A:5E:52:3B:B4
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer:       /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial:       018F885AEB8CC4C0C1570AFC01DAA4CCCC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number:          0123
Signing time:             Fri 17 May 2024 21:00:10 +0000
Manifest this update:     Fri 17 May 2024 21:00:10 +0000
Manifest next update:     Sat 18 May 2024 21:00:10 +0000
Files and hashes:         1: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: zUjuMGcCeUURX/hoEKQ8dy2WJfIza32nlEuzyW/bWeI=)
                          2: yfaCoEQGZ1B5vI35ePi2mj6CCsc.roa (hash: 4dtWlU+THt08+uD9+UM94CJzz5rDBT7irahl7TkEhdk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:eb:8c:c4:c0:c1:57:0a:fc:01:da:a4:cc:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
        Validity
            Not Before: May 17 21:00:10 2024 GMT
            Not After : May 18 21:00:10 2024 GMT
        Subject: CN=54fedec6c1d90a48a50b4605d762090a5e523bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:e3:31:0a:5f:a0:66:3f:e2:2f:c7:08:e6:
                    00:9a:4b:dc:c6:64:d7:1d:bc:64:3a:97:3d:19:10:
                    d6:f1:9c:59:04:44:93:e7:81:e5:1c:f3:15:8f:22:
                    ce:02:1b:ca:87:30:c8:af:bd:bb:66:dd:8b:01:29:
                    9a:bc:f3:0a:7d:95:97:96:0b:f7:d1:2f:65:b1:33:
                    5a:0b:be:f5:3f:4d:68:57:66:87:83:2c:46:e2:45:
                    e7:b1:81:47:ce:35:e8:5a:02:ce:d5:2d:61:d4:ed:
                    cc:3b:f8:15:3e:dc:89:6d:77:a0:da:ad:2e:01:c0:
                    3c:1c:62:0f:40:b4:07:8e:32:9b:87:90:a0:bc:47:
                    2c:9d:58:5b:2f:ce:c8:f5:78:c9:76:a6:81:67:fe:
                    6f:bb:de:03:d8:d0:e9:c8:44:d9:c5:25:b4:55:00:
                    ec:d4:4e:82:37:0b:2e:f1:24:3a:fc:34:99:4b:b2:
                    7e:06:dd:6d:79:69:f7:6d:ce:5c:35:a4:85:2f:00:
                    06:8b:aa:f4:79:b7:a1:eb:60:c1:d0:6a:06:83:b4:
                    6c:64:0e:a9:f8:7b:b3:bd:90:24:2a:80:ab:97:a0:
                    65:e7:c4:91:df:d0:1b:c1:39:5e:ed:f4:4a:16:3c:
                    cb:89:3e:a6:1b:e6:0f:c8:98:74:6f:66:f1:2a:00:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FE:DE:C6:C1:D9:0A:48:A5:0B:46:05:D7:62:09:0A:5E:52:3B:B4
            X509v3 Authority Key Identifier:
                keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:40:b4:3d:81:85:db:58:fd:c9:7b:ac:13:cd:c1:67:c0:46:
         4f:27:26:c4:d3:f4:b6:86:f2:9c:c9:60:cf:8c:b3:aa:de:c7:
         69:17:40:28:0f:7e:c1:4c:72:27:91:8f:27:11:5b:69:6e:50:
         1b:aa:c7:fb:b6:2a:9e:07:a7:38:36:db:9a:90:66:59:32:bc:
         b5:88:cf:c2:df:50:6d:ff:36:6e:ef:22:ee:f3:d8:1b:a3:66:
         a3:81:44:35:30:e6:b3:1d:39:be:52:58:7b:0f:4f:14:bb:8a:
         41:78:e3:05:a4:7c:3b:b3:59:0c:42:71:f2:64:3f:2a:0c:78:
         d1:ff:40:73:61:e1:8d:1f:87:2c:86:e1:2f:89:df:85:5b:f8:
         d1:5f:8d:a6:4f:a3:f1:d0:95:3e:b3:ce:c4:d4:da:5d:24:e2:
         10:3e:80:f5:78:45:17:77:22:56:38:94:51:f2:43:c0:8b:99:
         ee:4b:88:ba:1b:c4:be:00:53:f5:b2:af:15:b6:20:3c:7b:4b:
         40:2f:54:48:f0:5f:91:4a:4c:36:5c:09:2a:75:34:5d:7c:3c:
         e6:f7:18:20:bc:86:78:c2:ad:96:24:75:b0:06:8b:c5:cf:40:
         06:5e:66:63:4e:24:46:8a:9f:24:a7:84:b6:2f:56:92:3c:1d:
         db:69:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:32:44 2024 by rpki-client on console-fra.rpki-client.org