Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File:                     k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier:          nMOtf9MsMhf+AYOZDSDPsdGzHTuZXy1zGmqJYZF0GJg=
Subject key identifier:   31:1B:86:0F:1C:C4:13:C2:1A:5C:28:AC:FC:EB:7B:6B:F5:3E:E5:91
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer:       /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial:       018F8E2641B2BB13F860CA9109CA394D196B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number:          0E75
Signing time:             Sun 19 May 2024 00:00:22 +0000
Manifest this update:     Sun 19 May 2024 00:00:22 +0000
Manifest next update:     Mon 20 May 2024 00:00:22 +0000
Files and hashes:         1: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: EbPBlxReIqD2+sIPH6+YOrnaeVPjGh9vzvHVW5CmcUU=)
                          2: mBALmVEnL3fS2ktOEErK27cfn1s.roa (hash: SpLN3jGgD39n9oLOQSpQlLNcXJk9IkYHhhmbOno4YuM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:41:b2:bb:13:f8:60:ca:91:09:ca:39:4d:19:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
        Validity
            Not Before: May 19 00:00:22 2024 GMT
            Not After : May 20 00:00:22 2024 GMT
        Subject: CN=311b860f1cc413c21a5c28acfceb7b6bf53ee591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:c0:06:40:d9:d8:7e:45:ad:d2:a3:de:3d:
                    92:32:c5:25:0a:89:79:cc:77:c0:d5:a9:1a:6a:c3:
                    8e:23:6d:63:0b:27:9e:c2:e2:6b:65:20:c4:9c:2b:
                    47:65:25:67:48:e2:28:fb:9e:9f:47:24:f5:d8:a1:
                    18:0e:7b:e9:c7:b2:ba:0f:4d:c3:8a:57:ca:7f:d0:
                    25:a3:7f:c1:e0:11:b9:3b:13:21:00:30:e1:08:00:
                    91:51:69:ee:79:5c:ce:d7:7a:55:74:af:0e:bf:32:
                    48:33:f7:0a:57:aa:53:51:6a:70:32:82:a9:73:7f:
                    c3:b5:b9:7f:86:bf:a1:19:eb:07:60:f0:45:aa:e8:
                    7e:3b:1e:1a:91:af:9b:75:ce:9b:82:81:bc:4c:07:
                    b8:86:86:cf:20:38:ed:b2:89:31:19:ce:ce:0c:d1:
                    2e:cf:e8:49:09:56:aa:1f:45:c4:70:f3:21:6a:7b:
                    bb:ec:cb:78:68:31:d9:51:20:4a:b8:e1:3b:8e:2a:
                    59:df:f7:68:1a:32:76:43:4c:8b:2d:9b:b9:69:39:
                    4b:42:11:a2:67:ce:97:cf:8e:58:82:9e:f7:a3:b4:
                    3c:e0:25:f1:ba:a6:c0:2c:0e:eb:04:02:11:3b:02:
                    ea:96:22:b0:75:7d:b7:94:49:38:f1:fc:32:15:33:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1B:86:0F:1C:C4:13:C2:1A:5C:28:AC:FC:EB:7B:6B:F5:3E:E5:91
            X509v3 Authority Key Identifier:
                keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7a:4a:09:22:ce:56:da:8a:99:29:4f:31:e9:e6:64:b8:79:
         6e:a8:d9:3e:a8:dd:ed:a9:9e:2f:71:2f:1c:63:89:b0:c1:3c:
         4b:f9:73:87:c3:c5:8f:b7:dd:b7:a6:5d:73:c5:88:2e:d7:78:
         4d:26:68:06:e6:8f:67:6d:15:e2:92:7f:1f:46:bc:07:56:d2:
         64:4d:0e:e2:d2:1e:41:66:d3:c1:2e:43:fa:8b:14:05:ed:04:
         1f:e2:a2:5f:0f:24:a0:92:68:1a:fb:9c:7c:ab:78:59:58:4e:
         a9:72:bd:8a:ee:49:7c:a8:91:89:96:13:24:1a:69:66:15:91:
         d1:a1:f6:b1:cf:b0:0a:f4:84:92:08:34:5e:10:0e:01:11:39:
         53:cc:9d:a4:b5:20:ae:ad:99:ed:87:65:7d:83:9c:65:d1:33:
         e4:64:63:ba:69:d7:94:5c:20:ea:f7:f4:f2:5f:de:6d:a5:84:
         7d:c8:69:79:5e:c2:30:53:5f:2d:59:63:e3:cf:63:7f:cb:17:
         fe:a2:ac:b5:9f:2b:db:34:ed:9d:de:64:b2:09:f4:96:d0:82:
         1e:19:de:a9:5f:08:97:97:c5:3b:8b:ee:df:24:82:f6:17:c2:
         08:d2:2c:9d:7a:a5:9f:50:a6:ce:79:a2:2b:9a:f6:d2:26:d6:
         58:e8:ac:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:51:47 2024 by rpki-client on console-ams.rpki-client.org