Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File:                     KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier:          l/xpOT/RovZg/LRVlar+TdhfKcyG7SxvFyA6hmX94iI=
Subject key identifier:   B2:AD:24:DE:86:D9:E3:21:8B:4F:81:52:13:BA:43:EC:0D:2C:8A:03
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer:       /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial:       01901DED2B9E47B607C287360562193AF86A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number:          0AD4
Signing time:             Sat 15 Jun 2024 22:03:20 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:20 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:20 +0000
Files and hashes:         1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: 4GaKn0IJESXgVozF1rjeyO0MTqE6k2VuZmoMG2Sk0dE=)
                          2: XjL71-3PajMZad_HdbA15Bplq0U.roa (hash: rOXfegfYmcofws7uWR774DTH8oSqBu8bnZFURql4c4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:2b:9e:47:b6:07:c2:87:36:05:62:19:3a:f8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
        Validity
            Not Before: Jun 15 22:03:20 2024 GMT
            Not After : Jun 16 22:03:20 2024 GMT
        Subject: CN=b2ad24de86d9e3218b4f815213ba43ec0d2c8a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:0e:27:2f:cb:e5:5d:1d:d9:7d:ae:15:2a:
                    0e:8a:5b:39:a0:bf:2c:fe:5e:7b:0b:46:d4:17:db:
                    f1:14:95:c6:9e:6d:f0:41:6e:36:45:73:e9:5e:9f:
                    9a:8d:30:b4:92:43:2f:90:b0:a1:39:19:8e:b6:b6:
                    34:76:8c:9c:06:28:d6:b2:bf:5b:1f:3b:cb:c9:01:
                    99:0c:d4:84:68:a1:22:31:ca:2c:52:ad:2f:57:20:
                    8d:c0:3c:d5:66:93:32:2f:b0:2f:7b:25:60:3d:b6:
                    47:92:95:13:04:7e:63:9c:0b:c7:5d:e9:ee:e3:c5:
                    84:c2:46:31:05:61:81:fc:6c:e4:e0:54:52:14:9b:
                    0d:f9:aa:47:0f:c8:06:bc:f9:0d:e8:df:58:2a:2a:
                    0b:32:a3:65:a2:da:74:5c:4e:09:86:b5:3c:64:82:
                    1b:81:2c:53:57:cf:fd:e3:fe:01:06:10:a0:38:b0:
                    2d:17:e6:2e:2c:c1:6f:8e:c1:f0:c8:0d:76:d8:3b:
                    ba:41:a4:f9:50:72:e2:17:bc:f7:9f:7a:ac:0b:d9:
                    ca:42:3e:29:4a:b2:43:86:5f:b2:3a:3f:2a:20:30:
                    ab:d3:4b:6d:7f:9a:c6:82:93:22:e8:42:b6:e0:e1:
                    57:e8:a0:8e:86:f4:63:7d:b1:fa:39:35:49:1b:fc:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AD:24:DE:86:D9:E3:21:8B:4F:81:52:13:BA:43:EC:0D:2C:8A:03
            X509v3 Authority Key Identifier:
                keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:88:6f:87:f7:03:97:67:8e:31:aa:b7:53:86:a3:ac:49:12:
         78:3b:ae:d4:5e:ad:4a:58:f2:0e:7f:f0:4e:7c:ac:e6:d2:b9:
         3b:ce:81:ae:7e:94:e0:c3:ed:17:02:bb:46:95:48:be:a6:d3:
         87:4a:ed:0f:16:4d:6d:61:42:a5:9e:ad:c4:18:9d:af:bf:98:
         f3:7b:a8:58:ee:d7:d3:92:4d:a7:d0:c0:d8:fa:74:90:cd:e0:
         0f:75:4b:fb:fe:be:68:5c:1e:af:bc:20:35:71:73:89:e1:95:
         9f:af:3b:62:36:83:45:02:91:ab:65:05:d4:41:d8:f1:7c:e8:
         cf:86:66:63:6a:1d:f3:c3:3c:33:7e:8c:85:c7:79:d4:57:e3:
         8f:ec:e7:3b:4e:c8:e0:45:10:d9:03:96:02:32:8b:43:90:0c:
         3a:6a:83:f1:a5:a8:69:c1:70:e3:87:f7:f2:a7:58:14:c6:a6:
         7d:42:d6:74:c1:37:d2:16:2a:ae:64:43:cd:0c:4b:cf:cc:17:
         ac:da:8b:7b:35:91:ab:cb:81:cb:73:df:74:4d:a1:8d:68:a4:
         8a:6b:95:13:f7:24:12:bf:f2:99:3e:e1:6b:49:90:85:44:1c:
         9e:db:5d:4a:ce:28:12:ad:82:ad:17:fd:80:7e:14:b5:46:31:
         0b:be:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:38 2024 by rpki-client on console-fra.rpki-client.org