Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
File:                     KHTka_Y26mPl0SNi9VG4CydxR4A.mft (raw, json)
Hash identifier:          KYYE08fkp+LnrPM4XjLP9zGuS616Bfv7SZojmFisT4Y=
Subject key identifier:   CB:54:A7:44:37:27:66:CE:48:AA:62:4F:7E:DB:76:7D:BC:B2:54:69
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Certificate issuer:       /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial:       018F885B0AA80AFC2299718C01A439C53EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
Manifest number:          1184
Signing time:             Fri 17 May 2024 21:00:18 +0000
Manifest this update:     Fri 17 May 2024 21:00:18 +0000
Manifest next update:     Sat 18 May 2024 21:00:18 +0000
Files and hashes:         1: 9edY611nFXZB9j9A4nCo47uQX18.roa (hash: DdetNgR5DOSjAYaFksIKGYCLaJmW7VBa9C5LzkKyBB0=)
                          2: Atjtu9edW-tNgYvtUirviZrDuHg.roa (hash: DJ8l4EdNB193l2F0YlFiXQui1TcGlQgj/VT9FssvQ0E=)
                          3: Ee8lJMiWoandRDVD6rbWMUIhtRI.roa (hash: CZjmdek3+J9Hkjiuh4yXaPGBI8665BCA9WmONY5Rw1I=)
                          4: KHTka_Y26mPl0SNi9VG4CydxR4A.crl (hash: SuYt0bHfLC12Nr5DzQCctv2rQus9vWnaqekBkGLQImw=)
                          5: UtbHbJ_LeS6-E_DVTfBMxsaBB4s.roa (hash: xKe2dzPux4214h/jkoQiDKNYRvStze+zde21mW4VgxY=)
                          6: V0nHPv28e8UbA9z44BJPdKnMgAQ.roa (hash: dENw+EmclwIcgbZM6WOaXwolcrXsH1SUlJrsMEOB3ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:0a:a8:0a:fc:22:99:71:8c:01:a4:39:c5:3e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
        Validity
            Not Before: May 17 21:00:18 2024 GMT
            Not After : May 18 21:00:18 2024 GMT
        Subject: CN=cb54a744372766ce48aa624f7edb767dbcb25469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:fc:ec:bf:ef:4f:91:cf:07:c7:54:00:cf:
                    92:45:57:45:24:33:5a:c9:52:4b:3e:49:c7:30:6b:
                    05:c0:6c:ea:a4:dc:c7:1e:21:72:6f:30:e3:1e:8f:
                    44:0d:09:ba:70:f5:82:84:59:be:3c:c6:4e:42:eb:
                    bd:d9:0a:5c:ce:85:fb:14:e1:d6:aa:8a:27:66:f8:
                    dc:bb:a8:25:e4:69:de:42:9a:9c:1e:e8:c1:8b:cf:
                    39:99:da:80:e5:d0:3f:8a:cc:63:de:68:35:8b:a2:
                    8a:23:c2:bc:a4:22:07:cc:cd:aa:4e:fd:05:92:61:
                    79:a1:cc:ed:3e:9f:ee:84:1c:be:a2:d4:cb:f7:d2:
                    25:21:cc:dc:fb:f3:01:4e:86:7d:b6:ee:c6:7d:bd:
                    5e:4b:de:47:09:62:72:c1:71:c4:a4:84:59:ac:11:
                    0c:a9:a4:c1:b6:75:f5:db:76:fa:e5:29:69:7a:34:
                    9f:f6:90:d1:e3:e6:22:83:a4:b4:14:1a:5c:06:b3:
                    89:55:78:b9:15:a5:19:ca:1d:75:d2:0b:0f:c7:ad:
                    77:5f:65:a1:89:87:07:aa:b6:95:88:d7:3a:a2:c9:
                    e8:37:c0:da:31:b5:ec:c2:50:da:1a:fb:25:a3:cb:
                    93:97:f0:dc:be:06:b7:c6:ee:70:ee:11:eb:35:a8:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:54:A7:44:37:27:66:CE:48:AA:62:4F:7E:DB:76:7D:BC:B2:54:69
            X509v3 Authority Key Identifier:
                keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:14:46:45:c5:6b:16:97:4b:8d:47:90:86:a9:64:63:3e:5d:
         de:8b:8e:e7:df:49:1d:14:7f:c0:5f:58:5e:6d:eb:39:fd:da:
         9d:b1:a2:8c:d5:7d:fb:12:83:bc:56:df:aa:5e:3a:0a:12:10:
         e5:44:db:df:4c:f1:b1:36:be:36:74:98:14:ab:25:d1:e0:62:
         bb:70:01:3b:8d:14:75:fe:c0:30:b2:bd:c5:62:f3:d8:8a:b0:
         bd:b5:89:7b:d6:69:4f:5d:07:60:35:68:b3:44:14:38:a4:a8:
         ef:11:a5:02:2f:dd:4d:56:63:fb:c3:d0:bd:ad:48:43:57:ba:
         39:ff:32:1d:73:ce:87:22:04:12:08:1a:46:c7:cd:82:09:d2:
         1c:06:52:82:b8:e6:3e:78:5b:b6:b9:14:a0:0b:9f:67:35:01:
         e8:bc:32:3e:10:9d:9b:9a:47:43:a1:ad:1d:d3:94:c7:c3:54:
         94:5a:5e:46:0c:02:27:2a:6b:dd:9c:8d:21:9a:2f:57:03:91:
         97:3c:00:a9:da:f5:d1:a0:59:48:9a:79:37:e1:b6:4d:f9:5c:
         c9:61:66:2c:d6:4d:94:6e:9d:ac:fd:3b:0b:ab:7c:ce:46:d2:
         3a:e8:af:6e:9f:61:bf:86:ee:cd:fd:42:de:9f:a4:97:63:fe:
         48:84:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:07:36 2024 by rpki-client on console-ams.rpki-client.org