Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
File:                     kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft (raw, json)
Hash identifier:          F/U/+4DmAS0/F8n6PO47Cwzl2pbcVK9nhu0G57buuB4=
Subject key identifier:   8D:DB:7C:9B:1C:BB:99:B1:6E:26:98:54:CA:F4:A2:89:5A:88:C5:7D
Authority key identifier: 90:6D:4F:BF:6D:DC:6F:5C:B7:45:A6:8C:C6:81:8A:94:2E:AE:E2:0E
Certificate issuer:       /CN=906d4fbf6ddc6f5cb745a68cc6818a942eaee20e
Certificate serial:       018F874ADA4761D48C3EEC043476B7189E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kG1Pv23cb1y3RaaMxoGKlC6u4g4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
Manifest number:          0590
Signing time:             Fri 17 May 2024 16:03:00 +0000
Manifest this update:     Fri 17 May 2024 16:03:00 +0000
Manifest next update:     Sat 18 May 2024 16:03:00 +0000
Files and hashes:         1: RF9QRv_nthb6879WFhGPsdQ9MmI.roa (hash: GCFhg+T7Rw3ZTCDXjmbchktvqH5/hdoMYfM1UAi+19o=)
                          2: cpUzrFftGrfPIn9ahbAU4PTZMeo.roa (hash: 9n55AsvD5FA6Z1UN5fmc/o54vvWCfnS/crH5y8Y8X5Q=)
                          3: eIHZIm2NQhGi6jjKdapLXAB8-hA.roa (hash: Y4q1lYuGbB+acMdi5WiqB8wpAZTT48XyS8csgL6j/1o=)
                          4: kG1Pv23cb1y3RaaMxoGKlC6u4g4.crl (hash: z8+R0KUPh4i5maE2ENUD+mzJJCHDBEJpaMUVPeHbC5g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kG1Pv23cb1y3RaaMxoGKlC6u4g4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:da:47:61:d4:8c:3e:ec:04:34:76:b7:18:9e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906d4fbf6ddc6f5cb745a68cc6818a942eaee20e
        Validity
            Not Before: May 17 16:03:00 2024 GMT
            Not After : May 18 16:03:00 2024 GMT
        Subject: CN=8ddb7c9b1cbb99b16e269854caf4a2895a88c57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:03:fe:99:55:a8:ac:bc:5f:9b:7e:9c:e8:
                    fe:48:c9:15:f8:78:51:39:93:ae:80:3f:7a:49:aa:
                    45:36:50:ff:43:32:cc:09:fc:a6:02:d2:43:2b:d4:
                    33:8d:c8:7e:6a:84:4e:6b:11:32:86:f6:78:6b:e3:
                    ea:1f:4a:52:e5:63:11:5c:ab:5a:dc:b1:93:d3:05:
                    64:ae:a6:53:b8:d8:db:04:37:1d:5f:e5:45:8b:fa:
                    af:d8:de:cd:60:1e:35:c7:e9:9d:ff:0a:aa:9d:0f:
                    ed:6e:2d:c1:0d:f7:14:d2:a9:06:2b:df:8d:14:04:
                    46:34:42:6d:0c:b3:d6:13:dd:2b:79:c1:44:a2:d0:
                    a5:b0:00:e0:76:25:2b:94:01:a7:cf:c1:70:10:f6:
                    b8:86:12:83:ae:f6:0a:c8:ef:8a:83:81:9a:56:31:
                    21:87:e3:54:e1:2f:6b:81:8f:70:0b:13:8e:e1:09:
                    20:88:78:f2:b6:78:c4:f8:fd:b2:c4:b2:54:28:89:
                    a2:29:ac:83:2a:e4:92:c6:02:55:80:e5:73:75:1a:
                    1d:28:85:a0:84:9a:5b:eb:a8:2f:92:71:0a:8a:a9:
                    58:12:b2:3c:10:5e:98:1b:b0:46:46:52:5c:d0:ef:
                    b2:36:64:11:b6:24:da:83:80:60:2b:34:d3:0a:cb:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:7C:9B:1C:BB:99:B1:6E:26:98:54:CA:F4:A2:89:5A:88:C5:7D
            X509v3 Authority Key Identifier:
                keyid:90:6D:4F:BF:6D:DC:6F:5C:B7:45:A6:8C:C6:81:8A:94:2E:AE:E2:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kG1Pv23cb1y3RaaMxoGKlC6u4g4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:d2:8d:f2:97:9d:ce:d6:98:2b:91:0e:7c:f7:8f:fd:6e:1c:
         5c:19:cc:21:79:69:26:5b:49:ef:11:98:77:7e:bc:e7:40:6b:
         9a:ea:90:66:ce:01:16:ce:ed:3a:68:d1:0c:f3:ea:c8:a7:9c:
         c7:26:2d:43:dd:2b:2e:d9:50:1d:d8:5a:74:c7:48:5b:12:32:
         fc:cd:cd:1e:16:4e:ce:26:a2:e7:69:e9:64:a3:16:4d:7d:41:
         bc:f1:6e:74:b2:28:c6:33:81:4f:07:b1:e1:6c:02:15:96:69:
         ae:db:63:0f:d1:a0:4c:cb:a5:54:fb:ea:15:95:8a:a7:59:0e:
         da:50:5f:2b:22:6d:88:77:ab:d6:68:5a:22:20:08:d3:03:28:
         4c:1a:4a:dc:95:07:2b:72:b9:0d:8d:c3:aa:08:f0:33:87:e8:
         c9:0e:9c:27:43:b5:da:ff:27:84:8b:06:f6:44:98:e6:59:bc:
         5b:7e:de:ea:b9:07:73:0d:76:87:34:b6:f5:fc:fa:40:9d:13:
         4a:b9:9e:1f:4a:a1:2d:e4:fb:c2:59:a6:6f:b3:cc:d8:68:1d:
         22:6a:cd:89:4f:3b:b0:3c:87:66:80:f7:78:f6:5b:e3:fe:e6:
         7f:f0:c3:95:8d:19:0d:28:97:7f:95:a9:c8:ee:4d:bf:6a:f7:
         86:6d:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:28 2024 by rpki-client on console-ams.rpki-client.org