Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File:                     klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier:          T4Poo+/VpRCjoldDSamvXHqAloRp/0zXIJ8Be40yM0Y=
Subject key identifier:   C9:C0:AC:1B:93:55:74:C8:50:9E:04:1C:E1:81:CA:BA:2A:DD:67:9D
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer:       /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial:       018F546E5FE5A07669C0C42EDBDA5814131A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number:          115D
Signing time:             Tue 07 May 2024 19:01:10 +0000
Manifest this update:     Tue 07 May 2024 19:01:10 +0000
Manifest next update:     Wed 08 May 2024 19:01:10 +0000
Files and hashes:         1: C3RXy6n7ahBGWmHMmAeBoTEM4Us.roa (hash: 6focqh+cK6/xOOqYNotWg9mye0yrMp3dklTf1GFNElM=)
                          2: HSF7pY3557mPnbE3ewSoCLAPoAg.roa (hash: gIQfdh0iNQqKvmVZAtgu3FJQDbrNSggMG63FMaheLc8=)
                          3: PyhwpqWc97EgUJX4ODB5w8DXyyw.roa (hash: kenO6+v3RkJBWhBI8cLAoi9yAF2UmQChqTDKmPXD21E=)
                          4: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: fs3XYP1Mr6n5CEh0LU7kE/qtEioDrkMR0zHu6O0oDsU=)
                          5: pzUsRfakD7uCfIoXXGbclIVCAkQ.roa (hash: KNz2QAbCWPscqkNrjFETXLbwJ4PsgeRkKkFao8/hupY=)
                          6: vEay-AZ8E7wCoM-88DA7haJjigc.roa (hash: 3FN0x989VnBGQWgqlcX7aXKMcBlND21gHzZTg8ePLs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:6e:5f:e5:a0:76:69:c0:c4:2e:db:da:58:14:13:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
        Validity
            Not Before: May  7 19:01:10 2024 GMT
            Not After : May  8 19:01:10 2024 GMT
        Subject: CN=c9c0ac1b935574c8509e041ce181caba2add679d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:bb:bd:0a:2b:f0:a3:d7:ba:d7:e5:ab:9c:
                    20:c6:50:04:f5:10:33:b4:81:36:0a:3b:d8:34:a1:
                    6f:1e:fe:79:65:80:ff:f0:c1:95:d1:4d:60:44:ca:
                    d4:7b:59:57:7a:21:1f:d6:55:b5:5f:2a:a7:0a:58:
                    78:2d:19:05:9a:6c:a0:ef:cc:a0:f1:a9:ba:eb:3a:
                    bf:65:9e:66:d5:61:14:9a:48:56:db:e2:67:14:7c:
                    34:82:d9:94:a4:c8:34:69:ae:88:b2:ae:8b:f9:86:
                    2e:2d:01:01:83:60:89:cc:ac:8b:aa:be:eb:10:a8:
                    ff:99:3a:81:f0:2c:84:8b:95:e8:c9:d7:40:e3:88:
                    be:2c:58:d7:f5:3e:24:95:c0:5e:3c:c4:a3:22:8f:
                    83:d1:3e:8e:88:42:00:eb:0e:16:f5:64:91:f4:e4:
                    a0:68:66:5a:c7:b2:70:0a:d8:75:fc:38:60:7d:40:
                    0e:d9:db:09:a6:4c:49:01:9e:7a:86:ec:c2:a2:8a:
                    d9:33:13:fc:3d:8a:aa:d1:99:ed:cd:cb:6e:32:1e:
                    1d:17:c6:c2:79:4e:23:39:08:8a:9d:1c:25:36:a2:
                    51:40:c7:45:f9:b4:36:ba:3a:6c:23:ba:e4:7a:97:
                    9f:f3:d7:bc:3d:ee:8b:47:ad:17:09:2d:3c:c9:8c:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C0:AC:1B:93:55:74:C8:50:9E:04:1C:E1:81:CA:BA:2A:DD:67:9D
            X509v3 Authority Key Identifier:
                keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6a:59:d2:20:78:c3:b5:d5:9f:59:59:35:51:3d:1b:7a:9e:
         53:43:75:8d:a7:f8:e7:2c:49:be:19:93:74:27:ea:c0:6b:43:
         7a:61:a5:46:2e:f6:4a:7a:74:c0:db:4b:66:20:40:31:5a:06:
         74:53:25:50:b6:35:33:16:df:17:7a:e3:60:ff:0d:bb:39:c3:
         cb:12:1d:df:c7:6b:ae:5a:72:4a:ea:0d:0e:d4:dc:20:14:f5:
         bd:15:55:1a:37:6c:68:87:a0:36:4d:7f:1f:64:fa:af:fa:49:
         31:9a:3f:f0:de:36:06:6d:d2:57:31:8b:a0:95:f6:64:e6:7f:
         b7:b1:a7:09:06:39:06:26:cc:6f:44:16:71:46:df:5c:68:52:
         92:df:76:d3:6f:49:8c:30:47:fd:fa:fc:b4:a2:71:d3:73:ab:
         f2:1b:85:2f:97:d0:ed:17:f8:82:14:bd:23:e9:9e:94:f8:51:
         c2:13:d1:e6:6b:80:09:c7:9b:d5:e6:ce:d9:d8:5a:04:9d:06:
         dd:48:36:da:86:94:a8:83:6f:c6:a1:b4:32:62:4e:4d:db:b6:
         3d:53:83:11:e7:2e:c6:a5:ac:2d:65:11:3a:eb:c6:1b:bd:27:
         b4:5e:14:67:68:55:5c:33:7e:91:26:1c:4c:ff:d6:d8:69:68:
         e9:e8:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:48:43 2024 by rpki-client on console-ams.rpki-client.org