Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File:                     KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier:          Z7xkZgwTtJT3wvH6YpbHq9DZHHsgqiKvtJYYMeduIeU=
Subject key identifier:   ED:AB:55:28:C1:6E:60:1C:85:28:0B:96:B0:1F:ED:68:0D:59:9F:CF
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer:       /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial:       018FAFD9C4E2B38C023CE3DD7F04E3B2123D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number:          06A9
Signing time:             Sat 25 May 2024 13:03:55 +0000
Manifest this update:     Sat 25 May 2024 13:03:55 +0000
Manifest next update:     Sun 26 May 2024 13:03:55 +0000
Files and hashes:         1: 0NkZr9xN1HRdTGRaVb57tDZXqFo.roa (hash: botsMZF+GjttbrakuQN0eLxcRATmR0gANUESq5NOgvs=)
                          2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: xh79DPRnV0MnZ/C1CodvJmv38YHUxwq0LiHF5sUTgeI=)
                          3: dMLi1hnqfwP2FZ7MrJzKAhZqNj4.roa (hash: fgjKdEVKKQLyuZgdRPOIVpLaIZvI5cp4LI1zSG3BXpY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 13:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:af:d9:c4:e2:b3:8c:02:3c:e3:dd:7f:04:e3:b2:12:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
        Validity
            Not Before: May 25 13:03:55 2024 GMT
            Not After : May 26 13:03:55 2024 GMT
        Subject: CN=edab5528c16e601c85280b96b01fed680d599fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:fc:4b:e2:0d:6d:ba:1b:36:b4:9c:91:bb:
                    60:3f:6b:97:15:4f:26:71:0c:92:1e:d5:a3:82:38:
                    01:f2:76:e4:31:52:a2:df:3b:e5:7b:46:96:cb:65:
                    13:d0:f5:27:31:e6:6a:cc:f6:f6:f6:5f:f3:91:c4:
                    11:9c:16:d3:24:11:d8:fe:a3:ed:3d:ba:de:1a:27:
                    df:07:67:ef:27:14:6a:f9:b8:ac:87:dd:82:ed:1b:
                    b5:ff:5b:ed:b9:64:09:fb:2e:a7:0a:da:18:2d:53:
                    06:e4:2f:69:36:99:0a:92:8f:73:4b:35:50:dc:6f:
                    d0:58:60:bf:bf:dc:69:1b:7b:a1:1f:6e:3f:b4:14:
                    47:33:26:94:a1:5a:c6:a1:60:58:c2:1f:ad:b6:ee:
                    79:42:e4:ee:9d:aa:11:6a:89:81:8c:22:ff:e0:fd:
                    46:11:b3:e8:44:bf:25:e5:37:b3:56:2a:3b:4e:55:
                    f1:38:e6:d3:05:40:5b:28:94:d7:32:61:c9:b6:7a:
                    f7:58:22:6c:30:cf:96:70:2a:85:d2:22:57:dc:32:
                    50:19:e6:8c:eb:33:5d:28:e4:0c:c5:63:07:04:ba:
                    d3:e2:6d:13:f6:d1:9a:64:f2:cd:82:d9:1e:3a:e9:
                    b3:7d:8a:58:e9:95:7a:0d:75:72:bb:c6:36:32:ca:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:55:28:C1:6E:60:1C:85:28:0B:96:B0:1F:ED:68:0D:59:9F:CF
            X509v3 Authority Key Identifier:
                keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:41:ea:cb:0c:25:cd:20:8c:c3:a4:60:ec:2f:a9:72:46:ae:
         60:b3:74:f2:45:51:81:99:21:9b:b9:54:ea:90:3e:66:84:99:
         a7:78:18:7e:8f:e4:bb:87:bf:8e:05:39:6f:10:14:79:ee:4b:
         a0:6a:9e:de:14:87:3d:dd:cb:e7:f3:2b:fd:5d:b1:04:7f:2e:
         63:4e:08:96:ac:84:df:c0:1f:72:be:82:41:79:0e:90:2d:62:
         30:65:89:2b:49:32:da:37:4d:13:e2:98:a3:1c:bb:04:d5:02:
         91:18:56:87:8d:02:48:d4:f6:65:70:4b:1a:92:65:d9:79:ad:
         3c:76:8b:e4:d4:0c:f7:9a:3e:dc:d4:f5:75:a9:c7:b2:f7:eb:
         fd:53:2e:7c:ac:8c:9a:53:ea:c9:fe:36:43:09:30:50:63:f0:
         f5:ea:e9:36:a6:b4:0d:54:0e:32:59:13:92:72:9c:bf:bf:6f:
         ba:cb:2c:7c:05:d8:8e:c1:67:b3:07:8f:8f:76:a9:51:d8:0a:
         5b:5d:86:f0:6d:d0:df:36:68:84:55:00:a8:4f:1b:5d:46:17:
         d9:ae:9a:95:41:9b:66:8f:a7:66:1d:62:d6:c9:13:92:6b:02:
         d7:2e:91:e2:ae:29:c7:c4:fa:1c:e1:9d:0f:6d:d6:34:78:64:
         67:9b:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:50:49 2024 by rpki-client on console-ams.rpki-client.org