Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File:                     KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier:          G7nzjMuv/sbgnBI989Ch8WOueXVy1vm0VfBGY0z0k2I=
Subject key identifier:   9F:40:CA:4D:F8:F9:2C:F3:36:5B:54:B5:C5:CA:30:E0:F4:FD:A4:4E
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer:       /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial:       018F889280428056B57C5A73CDEECC431DBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number:          0DC5
Signing time:             Fri 17 May 2024 22:00:53 +0000
Manifest this update:     Fri 17 May 2024 22:00:53 +0000
Manifest next update:     Sat 18 May 2024 22:00:53 +0000
Files and hashes:         1: 06qSC5z-wufAcMKAS9cpcamZlgs.roa (hash: sacbpgcPog8FHq/TN5YtCBj9ayn+2Z1n7rttcBVJ+K4=)
                          2: 5hKAlrgIa_5iHmR8B3PVVoiA5so.roa (hash: y4/ADLzBFPVtnMEb6z6UUVbCTzFR0YE+EEbTtAalGKw=)
                          3: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: L+eUQF4fjJH8Nx5iuIXDl8BmXqXcaOYAcg7BMowxmjk=)
                          4: PzCEDVVQM0jV3R9673QD9zL5hm4.roa (hash: lYdWLRU+F1cNeQ/EQokR1DQF+RO63nAHXzLyOhnuAz0=)
                          5: VcmeKjNn7gzMqQGIDYLR-pJ3L_Y.roa (hash: ONhUoEQjJdSArCPbwbDZSBR24r0FOp2gqRSvS5NkmAc=)
                          6: ZUKCIrXuZXAAUPDwcAa7lqWNo00.roa (hash: NtsbPqZXBtjVPPB0z2D23Ray/sKIxGUU6KGgM4+9rZw=)
                          7: eTjNynz1qLjGJfnUwiT2KMwWNCw.roa (hash: tputQesCngXGUh9d/ljflRG2Q40trVm0qjQ90QzvTYc=)
                          8: i5c-c1Bzu_pEgimt8a3K9Fvk_yU.roa (hash: Xz52JSofQJ0gLwHUittNqhEcilzKk07bsFqgkHtOt80=)
                          9: qKHvHs8r9yPwx-f7fmm4-79rOr4.roa (hash: dLJtXyBzPRiENM0XCJ8qr4ug0Sqle26fZPW/dxuZpQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:80:42:80:56:b5:7c:5a:73:cd:ee:cc:43:1d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
        Validity
            Not Before: May 17 22:00:53 2024 GMT
            Not After : May 18 22:00:53 2024 GMT
        Subject: CN=9f40ca4df8f92cf3365b54b5c5ca30e0f4fda44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:54:0a:30:b0:43:11:ad:d0:b6:c9:69:0c:
                    df:24:71:5b:51:d8:06:35:25:08:a0:96:38:ca:41:
                    19:13:38:fa:21:8f:ec:c8:08:25:03:fc:28:02:9a:
                    93:c8:3c:19:1b:5a:a6:e8:8d:37:74:49:b6:b6:16:
                    78:9d:40:bc:f2:92:e5:86:37:84:41:43:2d:c2:60:
                    d0:57:a6:81:80:ce:c7:5a:f0:6e:ce:8f:2b:43:69:
                    e7:36:a7:de:9b:2e:14:e8:f5:d2:ce:b2:80:a8:bf:
                    bf:dd:01:d8:0a:d1:c6:16:bd:77:92:c8:c7:de:e4:
                    32:10:1f:08:dd:c7:af:8f:0c:4d:7e:6e:ff:f5:12:
                    d2:eb:22:8f:ce:4e:f7:d3:f6:5c:4c:bd:16:2e:c9:
                    d7:2b:9f:65:ef:9f:67:d1:51:20:8a:7f:98:53:94:
                    bd:d1:8a:b2:5b:e3:3b:a0:80:27:05:2c:a2:f6:78:
                    49:18:69:40:e7:01:ac:5a:0b:e4:d5:fa:f7:f0:57:
                    13:fb:c8:37:d0:00:77:c8:65:1c:4a:73:5f:f5:72:
                    e6:01:ee:cb:b6:88:51:fc:d9:03:05:db:8c:37:e2:
                    f8:bd:ab:cf:08:9c:0d:7c:bf:0f:c4:c7:0c:08:dd:
                    fc:cd:c1:84:9d:b9:df:48:f7:48:76:59:7f:88:db:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:CA:4D:F8:F9:2C:F3:36:5B:54:B5:C5:CA:30:E0:F4:FD:A4:4E
            X509v3 Authority Key Identifier:
                keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:f0:94:35:cb:b2:ef:4a:6c:21:56:30:68:7f:f0:9e:0f:
         aa:d1:59:b1:c5:3a:81:89:77:8e:cd:8e:6d:7b:13:73:57:af:
         26:50:69:ed:64:3b:3c:90:79:d4:99:af:64:8d:37:5a:10:78:
         3c:fb:4e:00:f8:6e:ca:36:95:d3:60:e8:0c:69:57:db:d1:87:
         9d:ee:cb:4a:93:96:a8:70:23:6c:79:be:d9:b0:fd:2d:b3:1b:
         5a:eb:8b:5b:cf:66:61:89:f0:d7:10:86:cd:73:03:62:3c:a6:
         31:b5:be:e9:13:11:b4:4f:fd:35:db:a6:2f:4d:e8:f9:cf:a0:
         4a:50:0e:26:4d:4b:49:dd:03:8d:01:49:c9:d2:a4:28:d3:0f:
         92:96:ca:27:26:42:41:23:f4:29:5f:3f:f2:b4:ed:5b:c5:67:
         32:5e:44:8c:ee:c1:2e:75:08:4a:0d:8f:24:98:7c:87:fc:43:
         a7:87:e0:5e:8c:d4:78:7c:0c:ed:38:1f:12:8c:d1:55:f6:be:
         cc:d5:2d:ae:a2:62:7b:66:b6:19:59:90:f3:e8:32:79:0c:52:
         7a:01:5e:c7:31:3b:34:5f:5f:56:ad:8e:00:78:35:8e:27:be:
         b7:73:cd:78:60:04:e6:27:15:46:fd:e1:f7:f8:50:00:ff:f4:
         eb:7d:13:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:41:14 2024 by rpki-client on console-ams.rpki-client.org