Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File:                     kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier:          BY0o9rlfLm2tGY5k9QgchDXPt1pfV9WJIJhLs3kuD6E=
Subject key identifier:   77:D0:17:B2:E6:3D:C5:46:B8:A8:65:AF:91:86:DF:3E:EB:C2:88:3B
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer:       /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial:       019067BBC10D1DEAB8273E872A5B62B4703A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number:          11EE
Signing time:             Sun 30 Jun 2024 06:01:16 +0000
Manifest this update:     Sun 30 Jun 2024 06:01:16 +0000
Manifest next update:     Mon 01 Jul 2024 06:01:16 +0000
Files and hashes:         1: 8x5L90kCkESv5KlAwqJb8ye9k2o.roa (hash: CVknCGQwNJLlnZDAIh23H/ekkDG9kYIdmBaKzSHyHn8=)
                          2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: 6j3x0n0Zt9iv1C1NRGMJDdZbYI0QF5EXIDC1/JqgjNc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:67:bb:c1:0d:1d:ea:b8:27:3e:87:2a:5b:62:b4:70:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
        Validity
            Not Before: Jun 30 06:01:16 2024 GMT
            Not After : Jul  1 06:01:16 2024 GMT
        Subject: CN=77d017b2e63dc546b8a865af9186df3eebc2883b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:a4:23:c7:00:e7:66:8e:e3:71:01:9d:a2:
                    c7:d1:7a:51:52:1f:3d:c8:db:67:93:f8:8d:9d:9e:
                    d9:d0:70:55:9e:3f:d2:36:7c:92:1b:de:31:ea:a7:
                    b6:da:7c:03:3a:63:71:9b:5d:7f:fc:1d:ce:8e:9d:
                    60:29:62:a0:78:f3:8f:9c:86:34:ca:ff:53:f7:51:
                    b6:0a:ab:e0:af:98:07:83:3f:df:ff:ef:0b:74:c4:
                    21:f2:ce:43:e1:ce:29:57:31:e3:dd:13:e1:c6:8f:
                    35:46:3a:99:68:6f:2a:c4:71:93:4a:d0:31:91:cd:
                    08:1d:8b:26:e7:d9:73:da:17:b0:b8:00:d4:bf:28:
                    60:28:8f:6a:17:8d:e6:7b:58:b6:dc:be:18:18:83:
                    20:38:de:5e:86:72:a7:c7:1d:58:bc:0c:63:f1:7d:
                    60:79:76:fd:53:e8:69:e1:64:46:16:8d:e2:0d:7a:
                    09:cc:f3:ca:d7:9b:08:8e:d7:89:d6:e1:9f:b9:a5:
                    0b:cd:41:89:11:40:c6:cb:1d:31:e8:d9:0f:a9:32:
                    12:d3:10:69:6b:f9:d0:b3:dd:94:25:4f:17:db:15:
                    7f:64:e4:8d:98:f5:1d:c3:2d:32:63:21:4b:e6:97:
                    0f:1a:39:0e:a7:5a:d3:bb:e6:15:18:1d:fa:11:d7:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D0:17:B2:E6:3D:C5:46:B8:A8:65:AF:91:86:DF:3E:EB:C2:88:3B
            X509v3 Authority Key Identifier:
                keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:08:05:7d:f9:dd:dc:af:f4:17:60:75:ac:23:df:b8:82:
         ab:a3:8b:35:28:92:35:a5:22:0e:8d:f1:69:df:c2:ed:16:f3:
         48:af:c4:cb:03:a8:1e:98:9b:b2:42:71:a6:12:aa:bf:10:af:
         c5:59:f3:c6:f6:e5:fd:82:ae:50:42:45:24:03:24:ac:6b:f6:
         b6:00:85:bf:64:fd:3c:26:bb:7b:34:b4:04:36:8a:49:ac:21:
         29:6a:d1:62:5e:f9:d6:51:2f:5a:af:be:d8:c4:f5:b2:46:2e:
         7b:73:42:2b:26:8c:8d:50:d4:d0:85:ae:bb:b5:db:e8:36:f2:
         ec:d4:06:38:6f:8c:81:d1:31:09:33:5f:bf:ba:6a:c8:51:b5:
         fa:50:f5:3c:a8:9f:e7:ce:a7:4e:8e:de:bc:cb:3d:09:ec:ba:
         c0:c2:d7:0c:11:7a:33:b4:62:d4:38:10:33:17:de:84:bd:b8:
         5f:20:e0:4f:ed:72:a2:19:41:32:6f:35:1c:cf:7d:37:53:bb:
         d6:ae:db:94:d0:d8:c6:ff:56:a3:55:71:11:b8:3d:73:42:7c:
         b5:a4:cf:be:b5:e5:29:26:6b:b1:dc:78:36:4d:a8:69:df:67:
         72:53:af:3e:96:24:f9:91:9f:bf:53:9b:30:3f:37:68:22:d6:
         03:ba:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 09:32:33 2024 by rpki-client on console-ams.rpki-client.org