Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File:                     KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier:          3N6O63PwE+vgNf3xjhLx+C6zldLjkWYpTWIMU95P1gc=
Subject key identifier:   0C:2C:6B:48:F4:D1:0B:DB:00:05:28:9E:E9:CA:12:4F:8F:3D:8D:B7
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer:       /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial:       018F87ED402A46430076EDA9918C2C976B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number:          0A83
Signing time:             Fri 17 May 2024 19:00:23 +0000
Manifest this update:     Fri 17 May 2024 19:00:23 +0000
Manifest next update:     Sat 18 May 2024 19:00:23 +0000
Files and hashes:         1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: 03bMPl+0B3PqLv2Q2k2NyJ26ZPXOjHBBoJueags93QY=)
                          2: bhnkYjS33mhKJahynyppH990EvY.roa (hash: kHrqeF85TNkmzRi6YVepzW+YfnKIfoRJ4H2GvBWrwb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:40:2a:46:43:00:76:ed:a9:91:8c:2c:97:6b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
        Validity
            Not Before: May 17 19:00:23 2024 GMT
            Not After : May 18 19:00:23 2024 GMT
        Subject: CN=0c2c6b48f4d10bdb0005289ee9ca124f8f3d8db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:46:5b:ec:4b:cc:af:f4:20:d7:26:80:d3:
                    e9:bd:c8:e0:18:1d:b3:7b:cb:a5:19:ea:3c:d8:d8:
                    cb:02:12:12:59:89:ed:34:42:ee:82:23:1e:02:3d:
                    24:ba:e7:38:98:61:0c:01:0d:e0:11:6d:e6:2f:69:
                    7e:8d:35:44:d4:ee:ca:1f:44:55:07:69:7a:71:1f:
                    3a:ac:d7:ba:84:62:ef:d2:3a:6d:2d:48:a3:b4:f4:
                    07:99:c3:51:59:48:0c:c2:b4:5b:55:b1:86:ae:2e:
                    48:9c:d1:25:06:7b:a5:94:22:16:46:92:b3:aa:13:
                    92:a3:1d:3e:09:94:19:fe:91:73:9b:4a:32:fe:bb:
                    87:50:ec:d7:05:a4:99:12:7e:c3:12:f7:58:c5:7b:
                    fb:67:7e:c6:8c:89:f3:38:15:8b:57:0a:3d:13:d4:
                    46:56:5a:b1:08:e3:58:a6:d2:23:11:0c:78:8e:75:
                    04:5f:bd:3c:50:44:7f:26:57:4b:fd:2d:60:c4:e7:
                    90:1d:7d:99:fa:94:9e:24:a1:47:a0:9d:a3:00:22:
                    a4:f4:77:cf:c3:12:2c:53:6c:ce:3c:d2:5c:e5:2c:
                    92:43:52:46:e5:ee:48:e4:cd:ea:b7:88:4d:bb:14:
                    76:9b:f3:12:e3:a8:c9:97:e7:bf:4b:8f:56:74:e2:
                    ef:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2C:6B:48:F4:D1:0B:DB:00:05:28:9E:E9:CA:12:4F:8F:3D:8D:B7
            X509v3 Authority Key Identifier:
                keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:19:c7:4f:84:9f:7f:ce:5b:bd:7f:b4:c3:4e:e8:62:99:
         8e:7b:f4:db:5b:ea:3c:b9:1a:90:d8:14:e7:0c:dd:5a:4e:8f:
         c8:91:66:24:4f:38:be:3e:87:55:ec:d8:ac:79:f7:a9:b2:93:
         25:83:51:e2:e6:6f:31:0a:1b:34:88:14:4e:ed:77:8b:ad:88:
         44:ed:90:5e:81:74:1f:71:95:c2:7f:19:7a:ae:e4:26:67:81:
         f7:1c:db:fd:e8:9f:e3:df:1b:a6:68:24:5d:27:8f:36:de:20:
         83:07:a1:52:91:27:2d:01:4c:9e:ca:b6:b4:ba:16:f8:62:14:
         c4:86:94:a7:5b:e5:6b:6f:f3:9a:10:c9:ad:29:ad:62:bb:25:
         c9:e7:27:46:b0:91:e8:41:0c:51:97:70:63:10:d6:5f:46:11:
         08:d3:a9:a2:1a:ae:85:94:c8:20:6b:91:13:0a:dd:90:a9:f7:
         98:4d:21:e6:b2:e9:63:cf:df:f5:6f:01:fc:04:75:c4:dd:1f:
         48:35:7d:13:dc:12:28:d2:14:7c:ca:55:9f:e4:98:ab:c0:ab:
         c4:88:9e:d0:e9:0a:ee:a6:e9:44:ff:40:f5:23:55:0c:90:bb:
         0a:cb:e5:d5:dc:f4:6b:b5:61:ef:11:6b:7f:73:b6:d9:55:31:
         83:50:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:14 2024 by rpki-client on console-fra.rpki-client.org