Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File:                     KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier:          L+dkP2xBeVP4V7k/7fnN8KvZPR58A4v7qpdJbxpyyqA=
Subject key identifier:   7C:32:1C:B7:A3:E4:97:AC:77:41:7F:E9:06:91:57:BE:C9:01:05:34
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer:       /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial:       019045D45C36979E76919E19A3F3ABCAFCA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number:          0528
Signing time:             Sun 23 Jun 2024 16:01:03 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:03 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:03 +0000
Files and hashes:         1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: 5c+qq4rPp8x0FQXDdpP2ZND59rxuOaH5T1R+6mDVJuM=)
                          2: MO-t3az7j_ZvuSRLymyjSDGlgcs.roa (hash: 4SsBBS12fw8sj3HVWDIHwRatT16CXX2vDli4UqK9fFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:5c:36:97:9e:76:91:9e:19:a3:f3:ab:ca:fc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
        Validity
            Not Before: Jun 23 16:01:03 2024 GMT
            Not After : Jun 24 16:01:03 2024 GMT
        Subject: CN=7c321cb7a3e497ac77417fe9069157bec9010534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:ed:a2:c2:13:32:dc:d5:55:31:40:94:9a:
                    36:90:71:e4:4f:ce:16:07:d4:89:c1:e4:d2:80:cd:
                    65:a3:27:fe:c4:36:50:0b:0b:68:5d:7d:94:50:d7:
                    53:4f:ef:84:8d:86:e7:cd:17:34:e3:7d:34:3b:fb:
                    59:c5:74:fe:51:9a:89:60:a0:27:62:61:f8:36:ee:
                    d6:cd:86:17:c9:ed:42:3f:1d:29:6e:99:89:5a:5e:
                    46:4c:06:ec:b2:8a:ef:1d:cc:e4:78:48:55:12:be:
                    8b:ba:78:72:2f:38:80:8a:b0:a7:97:85:bd:bd:66:
                    b4:e4:6f:c6:99:0d:6b:8a:ff:bf:5a:b8:de:86:75:
                    58:65:17:50:48:05:cb:79:65:4e:11:f5:dc:cd:79:
                    07:73:bb:48:e8:11:80:45:c7:dd:9c:62:ac:13:58:
                    36:a8:b6:21:94:16:a6:dd:19:7d:d1:9d:d4:51:0b:
                    35:c4:64:1c:c2:9e:23:5e:58:ed:b1:22:ac:58:6f:
                    4d:7d:c6:aa:5c:44:55:15:25:af:56:d6:80:76:df:
                    7f:7d:bb:9f:09:7b:84:be:2a:80:2e:1b:58:73:51:
                    86:09:a8:16:7e:2b:f9:20:90:1f:af:aa:e0:9e:f2:
                    ec:2d:b5:38:25:29:0c:5e:3c:5a:e9:8f:8b:b9:c4:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:32:1C:B7:A3:E4:97:AC:77:41:7F:E9:06:91:57:BE:C9:01:05:34
            X509v3 Authority Key Identifier:
                keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cd:15:c3:44:8f:3f:d5:48:3d:60:75:2f:eb:30:d6:8e:63:
         40:18:cf:92:d7:26:50:41:db:bb:ae:04:d3:6a:cd:ec:50:26:
         c1:29:ce:a5:31:4e:e2:b8:0d:19:24:c6:79:29:eb:bc:0e:40:
         3f:82:20:ae:77:06:05:61:cf:b4:83:85:1b:28:2a:5d:36:ed:
         22:ca:0c:15:ab:c0:57:28:b0:b5:78:89:6d:96:a1:1e:23:1e:
         83:34:41:3c:b8:61:c3:1a:a8:aa:20:6d:1f:c4:a9:69:7e:32:
         5d:36:2d:59:9e:69:e2:54:47:86:74:68:89:22:3e:23:d8:a9:
         fc:3a:a6:5b:62:be:4d:28:c0:f6:d9:4a:0a:90:60:36:da:db:
         d1:39:96:1d:02:c5:0e:c4:3a:a2:91:1d:31:9f:51:4e:39:d3:
         65:29:23:00:bc:51:cb:f8:51:80:f6:f7:f0:08:60:ce:af:6c:
         de:20:a7:02:e5:00:e1:b6:61:91:bf:77:7c:ac:ee:ab:2e:79:
         cf:53:2f:97:4f:f0:5f:7e:c7:e6:bb:2c:df:33:e2:46:b9:d2:
         f5:6b:cf:a2:62:f7:10:35:88:c5:0b:a6:cd:cc:ea:f0:c6:3c:
         5a:4d:f2:db:57:36:e4:db:ca:20:74:3b:51:a6:4a:bb:b1:91:
         25:18:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:31:33 2024 by rpki-client on console-ams.rpki-client.org