Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File:                     k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier:          alYyQgHplUHgNDGffON0gADXeMrDPWAUaMXcbXstWC4=
Subject key identifier:   51:88:E1:01:85:42:A3:2C:49:FD:EE:6B:88:5C:98:27:DC:12:99:F9
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer:       /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial:       018F874ABCF14590F19EFEBFA858E384A1F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number:          0B72
Signing time:             Fri 17 May 2024 16:02:53 +0000
Manifest this update:     Fri 17 May 2024 16:02:53 +0000
Manifest next update:     Sat 18 May 2024 16:02:53 +0000
Files and hashes:         1: JKy8F4d38oVfzDE_4lfKq7dEGBg.roa (hash: QRm3MSiqL3PWJo+Pyi9GoknJPDKHAE7TafHXCgu7igA=)
                          2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: lV05FUcwp2D2Dxkq8isDOw24wJl2bQsTeifdDj9TzUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:bc:f1:45:90:f1:9e:fe:bf:a8:58:e3:84:a1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
        Validity
            Not Before: May 17 16:02:53 2024 GMT
            Not After : May 18 16:02:53 2024 GMT
        Subject: CN=5188e1018542a32c49fdee6b885c9827dc1299f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:66:1e:39:2f:80:23:03:6a:ae:e6:7c:91:
                    fc:4d:4d:2e:ff:f8:1b:b1:8e:fd:73:e2:00:e3:f1:
                    75:7c:2d:dd:4d:cb:e8:8a:97:79:3d:37:c8:24:64:
                    fd:fe:8d:62:4d:e9:52:16:16:b7:b5:f2:2b:9f:31:
                    64:59:b2:e9:3c:1a:f6:e7:1e:f5:e1:13:a5:60:57:
                    01:bc:84:fe:a0:8a:d7:86:cb:74:1c:a7:26:ff:7d:
                    ce:56:b2:3c:22:2d:9a:ed:69:68:72:f4:bf:53:b1:
                    27:b9:ed:8f:11:d6:21:ea:99:4a:3e:ff:00:26:94:
                    d7:35:1e:20:35:d7:c6:d9:35:20:6f:1d:bc:70:bb:
                    d8:97:e3:3a:af:91:94:17:4a:c3:8b:65:87:24:99:
                    b2:9d:a1:48:5a:21:fa:0f:b8:49:85:e4:68:6e:39:
                    0f:8d:aa:98:06:d9:70:5b:c2:f5:4b:c0:00:84:73:
                    d7:ba:0c:45:98:e7:1c:bd:19:f0:48:b1:8a:7f:d5:
                    3a:00:6b:22:df:18:f7:db:b7:5e:f1:ef:02:b8:d8:
                    3b:b2:85:1d:55:f6:62:9f:e2:3d:6d:e9:db:fa:16:
                    ee:90:5e:69:87:0c:1e:fb:06:40:83:a7:5d:ba:34:
                    d7:d0:61:1e:38:ee:0b:11:be:e2:b5:f5:0d:16:cb:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:E1:01:85:42:A3:2C:49:FD:EE:6B:88:5C:98:27:DC:12:99:F9
            X509v3 Authority Key Identifier:
                keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:98:3f:ba:15:5a:21:65:3d:d4:71:2a:cb:b8:92:03:c6:62:
         c1:ca:71:9e:af:77:de:32:5e:5d:95:88:eb:9d:72:19:7b:93:
         7a:09:fa:98:b5:b0:67:b2:a9:47:9d:6e:5d:80:e4:ae:a4:6b:
         70:56:6a:4b:4c:fc:ea:2e:e2:dd:96:e0:77:2b:e8:21:7c:cb:
         67:3e:ea:b2:8b:82:24:40:c4:dd:f0:2e:1a:13:0c:41:90:73:
         89:2f:96:26:97:03:9a:56:40:e7:4c:c3:f6:f9:df:b3:b8:b5:
         7a:58:e9:b1:5a:cc:f9:56:47:c6:06:47:f9:37:0b:d3:73:45:
         8e:77:41:d5:50:68:68:95:5d:bc:c3:fe:40:b5:bb:8b:33:0f:
         2d:1d:74:18:1f:e7:a6:97:b7:1a:b9:6a:40:1a:b7:f1:e0:e8:
         cc:b2:f8:98:6a:da:79:46:43:15:f2:33:6a:55:bf:a8:69:c6:
         d7:d4:a5:3c:e3:92:91:6d:ad:0b:f6:fd:ec:70:a9:e0:05:56:
         c4:9c:82:7b:20:e1:3f:74:a0:94:6f:0a:59:14:79:6b:f0:e9:
         fc:9f:b2:6b:ee:81:49:67:8f:8c:d9:36:40:9d:cd:26:60:93:
         0c:6b:bb:53:4c:77:60:09:fb:5c:be:38:1a:b6:98:85:82:b7:
         00:b4:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:54:28 2024 by rpki-client on console-ams.rpki-client.org