Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File:                     KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier:          xyDKBECbIR7LqSYw9z8SNVn1sF8/kak7PQ103qhjjqY=
Subject key identifier:   94:35:EF:D9:EA:0D:52:8D:5D:4D:31:74:DD:B6:65:A1:24:AA:EC:20
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer:       /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial:       01901CD7FB1A1CC100216A822629DDD9465B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number:          11AA
Signing time:             Sat 15 Jun 2024 17:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:34 +0000
Files and hashes:         1: 9ZejYcr2DvwSq2bAceL1F3gIkSY.roa (hash: 0N4WVxZZWC50jr7bHkPwm26ctvQhCuMBfdgFnYW+B6A=)
                          2: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: j3dh8BHUH82VDmn3kiGPy0SXvwdFbAttrZJGENwl/rY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d7:fb:1a:1c:c1:00:21:6a:82:26:29:dd:d9:46:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
        Validity
            Not Before: Jun 15 17:00:34 2024 GMT
            Not After : Jun 16 17:00:34 2024 GMT
        Subject: CN=9435efd9ea0d528d5d4d3174ddb665a124aaec20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:82:a0:6a:c3:e0:5c:72:50:50:e4:9c:2e:
                    8e:ca:46:58:e1:b2:4f:f7:82:3c:b5:d6:31:98:d1:
                    66:3c:fc:35:36:fa:f9:74:93:61:d7:eb:d2:15:bb:
                    87:70:56:99:1f:a7:7d:da:e4:96:d5:06:be:ef:ed:
                    bc:17:cb:10:bb:cd:d2:44:6b:66:b9:0a:62:74:8d:
                    b1:a9:b1:22:f8:12:b1:56:7f:bf:71:5a:61:d6:92:
                    62:81:07:56:5e:e8:a9:a9:a1:bb:d4:41:0f:33:da:
                    73:6a:53:27:89:8b:60:57:36:a4:e8:ce:ab:aa:c9:
                    76:d7:32:cc:9e:1a:a5:ac:b4:71:fa:e9:5f:4d:87:
                    6a:1d:ed:71:c2:3e:50:f7:2b:ac:3f:df:bd:32:8a:
                    0b:c7:39:86:6b:54:e8:2f:a3:ac:a9:39:e6:25:a6:
                    c1:69:e8:c2:47:db:e0:70:95:d9:4f:8a:7a:44:dd:
                    b3:11:5d:86:38:9a:1c:07:de:a2:f9:1c:03:33:e2:
                    34:e9:6a:ad:1e:df:fd:18:92:b5:4b:d9:4e:96:e6:
                    c8:16:dd:3a:ae:41:1f:0a:27:4c:6c:42:ed:e1:2e:
                    83:f1:28:c2:a5:57:48:8c:18:47:33:cb:48:d2:05:
                    3d:46:01:ed:9f:97:1f:89:06:76:90:57:06:8c:e5:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:35:EF:D9:EA:0D:52:8D:5D:4D:31:74:DD:B6:65:A1:24:AA:EC:20
            X509v3 Authority Key Identifier:
                keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:da:f6:73:18:a6:56:a4:3f:4d:04:8a:dd:07:4b:07:b0:
         63:b3:a9:c9:3d:69:65:93:1c:4e:73:aa:82:c1:eb:69:39:56:
         0c:37:cc:43:c5:22:d8:db:06:b7:b4:c3:94:b0:bd:39:a6:a5:
         e0:a4:da:e8:b2:bd:81:24:bc:d0:8f:cf:33:bc:b1:48:0a:24:
         c1:ed:51:f9:cd:77:40:ae:33:70:65:92:7c:e7:93:e9:88:b1:
         a0:73:0b:12:83:74:22:91:9b:81:23:67:cc:8e:d1:d5:3a:cf:
         1a:98:44:bc:3b:0f:9d:ff:02:a6:73:12:05:98:b4:e9:14:53:
         1c:f5:ff:33:67:db:83:38:5f:3e:8b:9a:2c:93:b2:ce:64:ef:
         ae:fd:f2:30:f4:5e:2d:d5:80:9a:eb:d9:df:0e:93:61:fc:09:
         bc:a9:e5:ba:50:7b:bd:4d:bd:77:28:1d:fe:52:6d:d7:34:af:
         d0:39:2a:80:f7:26:87:e7:b4:21:f1:45:ff:00:6d:a0:33:d6:
         fd:b3:39:6c:87:71:cc:a9:70:b3:df:a4:df:77:9b:38:72:0d:
         c2:80:fb:6c:54:77:09:8a:3d:82:9e:ad:e9:0b:2e:58:25:73:
         ab:ad:d7:07:c4:e3:e6:82:a8:36:c9:98:00:60:e6:88:4c:f1:
         dd:c9:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:25:33 2024 by rpki-client on console-ams.rpki-client.org