Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File:                     KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier:          9rGrVZfhfS2EhekQkEyMPfpwDQPVA4hSZaMn9yiwPxI=
Subject key identifier:   8E:8D:90:32:CD:6C:29:2A:95:89:52:E2:B5:20:15:82:39:B4:CA:36
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer:       /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial:       019041896450811F3527BD2EEA48CEDA2595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number:          11BD
Signing time:             Sat 22 Jun 2024 20:00:41 +0000
Manifest this update:     Sat 22 Jun 2024 20:00:41 +0000
Manifest next update:     Sun 23 Jun 2024 20:00:41 +0000
Files and hashes:         1: 9ZejYcr2DvwSq2bAceL1F3gIkSY.roa (hash: 0N4WVxZZWC50jr7bHkPwm26ctvQhCuMBfdgFnYW+B6A=)
                          2: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: 9vlRBpQI5vXhzWjAZrv+7Fr4RtEBb46470sQLm9uYwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:64:50:81:1f:35:27:bd:2e:ea:48:ce:da:25:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
        Validity
            Not Before: Jun 22 20:00:41 2024 GMT
            Not After : Jun 23 20:00:41 2024 GMT
        Subject: CN=8e8d9032cd6c292a958952e2b520158239b4ca36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:79:7e:71:f8:6f:e1:ce:31:b2:42:0e:59:
                    95:36:c7:37:5a:ce:19:dc:53:a0:f0:3d:52:c5:cc:
                    07:39:c5:9f:78:03:03:51:3f:cf:cd:41:1a:f3:8a:
                    da:9a:2a:6b:33:48:0e:57:ed:29:47:e2:40:5b:ff:
                    06:48:12:89:16:c0:c4:40:01:19:bb:6e:43:6e:f1:
                    b1:8e:5b:45:5a:d9:8e:dd:2f:2e:1a:9f:2d:3d:eb:
                    69:fd:c6:a1:3a:f0:b3:bc:c6:8f:69:45:6a:03:fe:
                    63:47:67:65:40:79:e0:70:9e:67:3a:6f:70:2b:e9:
                    cb:ab:e5:62:cf:3a:94:c5:00:bf:3e:70:ae:46:57:
                    6a:82:d8:16:85:06:cf:3a:e6:c5:56:d9:bb:86:8e:
                    3e:19:4a:d1:56:93:7d:31:97:1c:40:8a:af:6b:ee:
                    a1:0c:29:b6:b8:dd:8a:15:8b:63:b4:4f:02:fa:5e:
                    ea:46:0b:b7:39:3d:1e:b7:c5:78:ac:18:22:69:40:
                    b4:e0:7f:e8:61:0a:17:99:d1:a9:b6:c9:94:96:7e:
                    69:a7:b8:10:92:33:f1:1e:f2:85:16:39:12:f9:04:
                    3c:38:35:9c:42:29:87:00:54:c6:f9:32:ad:f0:c8:
                    b8:0c:ae:91:24:cb:ac:4d:51:28:1e:85:fa:c2:40:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:90:32:CD:6C:29:2A:95:89:52:E2:B5:20:15:82:39:B4:CA:36
            X509v3 Authority Key Identifier:
                keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:24:95:a6:c5:68:33:e1:1b:b8:a3:4d:d0:91:3b:0d:bf:2e:
         0d:6e:72:f9:cc:17:86:79:7d:e7:80:b0:6b:45:0d:50:2f:77:
         1b:d1:10:09:73:06:0f:1d:d9:33:1d:37:26:ab:11:db:36:17:
         a2:cf:36:c1:cd:82:3f:90:7d:da:3c:41:21:6c:16:dc:31:95:
         a2:47:fa:bd:38:ed:73:3a:42:34:d8:79:5c:d8:2b:f1:90:92:
         78:8f:02:12:07:a9:87:40:0a:33:eb:ff:69:4a:24:bc:e5:d6:
         02:89:7a:90:08:92:cb:cc:52:bb:d2:34:bb:1d:e2:a2:70:84:
         94:b7:88:f6:43:34:04:d8:41:fc:bb:96:31:09:80:4e:2e:14:
         b1:65:6a:ca:f2:6a:41:ea:4a:40:52:4f:ff:57:e1:17:be:f5:
         15:7a:ef:67:a8:c8:07:ac:f5:c1:0e:2c:4b:9c:8b:8f:45:9d:
         a2:e3:17:2a:08:3a:e5:2c:06:67:42:cc:db:5c:8c:1a:be:c3:
         7d:d6:db:11:1f:bc:7b:01:fe:d9:cd:25:b4:6c:e7:2e:03:f2:
         0b:1a:71:66:f2:db:1b:af:83:7e:92:18:79:fd:9b:80:26:e1:
         2a:1c:1e:39:23:8e:a9:d3:d7:f6:5b:73:11:37:ea:21:15:87:
         25:4d:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:33:37 2024 by rpki-client on console-ams.rpki-client.org