Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File:                     koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier:          L5EAY+LKMlRTNHLukyYnXVAl0w1lpPGTRHAZ+agKStI=
Subject key identifier:   BF:34:B1:CA:69:B4:41:5C:70:FF:DB:12:01:0E:56:28:57:92:82:6B
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer:       /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial:       01901DEB308839F91193239D757DA731029A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number:          05F4
Signing time:             Sat 15 Jun 2024 22:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:10 +0000
Files and hashes:         1: 0diCL6YnGvC8QcytYu8N8Ny3qJM.roa (hash: sXVu/6kKr/7x0fFblSoyHceUQ8zM1i7ggAWV0CWrfm4=)
                          2: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: 9KoAS/lpB3A96TjGHKm/hXkwXa6pAjK+yFg++mUO+jk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:30:88:39:f9:11:93:23:9d:75:7d:a7:31:02:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
        Validity
            Not Before: Jun 15 22:01:10 2024 GMT
            Not After : Jun 16 22:01:10 2024 GMT
        Subject: CN=bf34b1ca69b4415c70ffdb12010e56285792826b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:f2:af:5d:35:f4:b3:1e:e7:87:ef:d7:97:
                    27:b6:cc:28:10:30:9b:f7:9c:8d:68:7d:c2:e2:d1:
                    9d:7b:eb:2e:f8:f5:68:7f:31:84:be:7b:1a:30:a1:
                    24:93:ef:b0:3d:bc:51:e6:4e:f8:b2:18:78:5e:25:
                    8d:bd:e7:39:d5:85:f4:ac:6c:76:c6:9a:4c:e1:2e:
                    9a:fe:b8:f2:8d:08:0b:eb:63:67:4c:57:f0:2d:9a:
                    1a:02:b7:fb:cb:fd:57:44:fb:df:c1:52:ec:50:03:
                    80:bb:25:98:81:d2:26:80:11:1b:d0:d9:af:98:51:
                    ea:40:69:1d:2a:a1:80:32:3c:1c:0f:78:67:39:4e:
                    e5:bc:75:8c:01:00:88:d8:31:0c:52:b5:19:83:33:
                    5b:52:4e:d0:5f:bb:f6:28:6e:6e:12:18:58:90:77:
                    54:7f:55:dc:8b:0e:c1:19:a6:3e:d3:c7:0a:c4:5a:
                    05:f1:2a:05:e3:da:55:10:55:48:87:6c:89:04:68:
                    86:0d:05:54:ef:4c:ba:d7:48:aa:84:0d:4e:7a:46:
                    70:09:47:f5:69:3c:78:05:af:38:fd:4a:5c:d5:05:
                    18:fd:d7:b9:b8:c1:39:9e:18:28:8f:3b:2e:2a:56:
                    a1:62:46:c6:68:fe:98:79:37:fd:35:63:50:22:b4:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:34:B1:CA:69:B4:41:5C:70:FF:DB:12:01:0E:56:28:57:92:82:6B
            X509v3 Authority Key Identifier:
                keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:96:53:82:62:70:4c:ad:73:91:13:b9:62:b4:58:95:aa:
         73:ca:f2:5b:73:87:2c:53:5b:c3:0e:d7:e9:6a:dc:86:85:ce:
         65:7f:fa:00:81:25:de:2b:77:7e:f6:e5:38:d7:63:db:05:d6:
         5b:71:1d:e7:54:22:7c:f9:5e:86:fc:b1:e4:ba:8a:5b:d4:8e:
         ec:98:36:be:44:72:11:54:3d:fb:5d:dc:0a:2f:1a:5a:5b:b8:
         e6:78:69:58:db:75:0b:df:2e:3c:05:28:54:2e:06:6c:06:01:
         c0:5c:31:cb:7e:d6:28:0f:fa:47:c7:2a:f1:b1:12:7f:e1:30:
         86:82:90:90:7c:ce:a6:7a:a1:44:81:52:20:68:a5:64:a3:33:
         b1:5e:e0:f2:8d:f5:b0:b5:df:69:7c:ef:4d:77:1b:01:80:14:
         40:10:e2:68:f4:a1:38:8d:39:ca:41:14:7d:a7:40:18:2b:08:
         cb:82:8d:20:4d:35:11:54:fb:26:85:c7:c6:87:c2:fe:61:ef:
         e4:8d:e8:dd:a9:8b:20:01:4f:a0:68:43:5e:4d:89:44:2a:a0:
         36:6d:da:17:93:b5:78:06:c9:f8:4c:c6:7d:0e:68:6b:03:f9:
         04:9e:9d:83:7d:46:41:cb:30:23:cb:dd:25:25:b5:da:3c:84:
         c8:aa:66:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:10 2024 by rpki-client on console-ams.rpki-client.org