Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File:                     KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier:          cU3ZNtJTXqRdfSqQMeHOnigbmYsnN2TdhRPFmMcDTjs=
Subject key identifier:   C6:4A:36:29:1D:36:8F:B0:FE:3B:00:DB:67:26:F8:FD:2A:E6:D0:0A
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer:       /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial:       01901F34495011C9F4F1563E90A8DCC4B652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number:          0514
Signing time:             Sun 16 Jun 2024 04:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:38 +0000
Files and hashes:         1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: txhoLkRz5ME5bnZIK+SafSYqmt8i67W/7hdVyR+bZqE=)
                          2: MO-t3az7j_ZvuSRLymyjSDGlgcs.roa (hash: 4SsBBS12fw8sj3HVWDIHwRatT16CXX2vDli4UqK9fFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:49:50:11:c9:f4:f1:56:3e:90:a8:dc:c4:b6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
        Validity
            Not Before: Jun 16 04:00:38 2024 GMT
            Not After : Jun 17 04:00:38 2024 GMT
        Subject: CN=c64a36291d368fb0fe3b00db6726f8fd2ae6d00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:8c:b7:90:14:76:2c:34:17:7a:a6:ca:5f:
                    a8:96:fe:17:15:76:cb:a0:ab:8d:3b:21:30:3a:c0:
                    f0:e5:10:8e:e4:84:b9:06:6e:b8:e2:1e:0a:49:e3:
                    c8:c2:ad:61:98:ea:e1:1f:32:d9:09:fb:5f:ac:4b:
                    56:01:35:41:a9:6f:1c:c9:64:79:e8:fe:39:e3:08:
                    3a:c5:13:7e:ee:8e:0b:d4:14:d3:82:53:b0:f8:44:
                    12:ed:69:7c:05:97:23:a0:94:00:70:ec:d2:40:d8:
                    a8:cd:31:11:72:34:b2:55:f6:2e:fa:1c:4b:56:20:
                    6c:63:88:35:78:84:3c:a0:b6:33:56:2a:77:5c:a1:
                    3e:39:58:ef:10:95:e9:7d:6d:b1:5a:65:87:6c:d4:
                    23:f5:13:63:ce:99:2c:ba:a4:8c:07:89:2a:f7:61:
                    e8:bb:1e:b5:d6:1c:ab:20:2d:e6:63:8c:c1:de:89:
                    81:fa:d4:3f:f2:3b:6d:0b:96:85:18:f5:ae:41:29:
                    90:e7:0c:aa:a5:c6:b5:35:4a:bf:56:7e:c6:43:c6:
                    a7:de:02:be:fd:81:85:8e:93:5e:a0:52:af:c6:32:
                    1c:e6:a3:b7:f4:43:24:6d:c7:1e:f6:c9:8b:3f:08:
                    36:0a:7d:04:9c:1b:49:be:8b:5b:e5:df:36:5e:20:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4A:36:29:1D:36:8F:B0:FE:3B:00:DB:67:26:F8:FD:2A:E6:D0:0A
            X509v3 Authority Key Identifier:
                keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:b0:16:16:16:b4:63:a7:c8:d5:de:80:58:0e:bb:42:df:
         a2:44:ed:c1:f4:4a:ec:e6:a9:6a:1e:02:3e:34:ba:f9:e8:71:
         c6:0a:03:8e:05:5f:12:66:2a:8d:c7:46:d9:c7:4b:f4:3f:a0:
         d6:c2:44:3c:a4:0b:f0:0a:f4:06:58:c1:0c:ba:a0:68:3f:4d:
         1f:f1:af:db:90:d7:56:37:ff:93:b6:89:76:df:bd:54:6a:b9:
         f1:4f:b8:05:06:f9:37:0f:ef:a0:1b:e1:c2:9b:7a:30:c5:41:
         7d:8b:c8:e2:90:56:4f:3f:0e:b5:db:a0:bd:1a:24:25:c9:8e:
         ef:8b:ae:5a:2c:c7:b1:07:af:46:08:64:23:01:fa:a3:72:a9:
         0b:56:7c:35:45:db:4f:31:62:10:48:64:5a:5a:98:3c:9d:c3:
         81:03:20:67:94:0e:00:86:64:cd:4f:61:03:15:77:25:94:f0:
         10:b9:e9:50:28:49:b5:f9:14:71:5e:3f:42:3c:65:d4:5b:bd:
         cd:e5:b8:e7:51:d9:f7:25:d6:54:ad:cd:69:de:ca:4b:b8:d0:
         21:60:9d:87:3a:e9:8f:af:ac:89:a6:45:78:c0:f1:ea:b3:64:
         95:ec:05:16:81:81:55:92:06:4b:fc:c4:9b:74:8b:a3:48:38:
         3e:9c:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:37 2024 by rpki-client on console-fra.rpki-client.org