Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File:                     KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier:          dPDMetktl+ywql2+T9VzPiaKG/raAregwttRkbzOdtE=
Subject key identifier:   05:B4:05:A5:56:57:A3:82:6C:9B:72:BE:04:D3:31:C6:F6:74:1A:38
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer:       /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial:       019041529278205B4A1BB8335AD2FE8163E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number:          050E
Signing time:             Sat 22 Jun 2024 19:00:48 +0000
Manifest this update:     Sat 22 Jun 2024 19:00:48 +0000
Manifest next update:     Sun 23 Jun 2024 19:00:48 +0000
Files and hashes:         1: 7PRyd-XN3f-amSxpj7gEJe6ak9U.roa (hash: 9Zv2Uveo9jyYznf5ELe1x4qpGX7qdkAstLBVWRWNGyU=)
                          2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: hnD8bpwy4i32IH0CQbfjh2IbJzAHJgzK0INjSotOzAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:92:78:20:5b:4a:1b:b8:33:5a:d2:fe:81:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
        Validity
            Not Before: Jun 22 19:00:48 2024 GMT
            Not After : Jun 23 19:00:48 2024 GMT
        Subject: CN=05b405a55657a3826c9b72be04d331c6f6741a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:60:d5:73:71:08:b0:ff:b2:f1:b8:9f:c6:05:
                    3c:bd:61:be:b3:17:39:80:26:4d:ed:b7:32:26:2b:
                    da:12:cf:55:db:20:f0:7a:2c:a1:b3:23:21:14:c1:
                    33:3f:2c:59:65:91:c5:9e:2d:49:0a:a6:f8:14:39:
                    99:ac:50:3b:f6:7d:44:89:79:68:5c:bd:ec:d7:c1:
                    7b:75:27:0c:4c:14:41:1b:b3:e7:6d:74:dd:88:3d:
                    37:7a:af:2e:5e:a7:5a:87:91:a1:3c:55:fb:54:5a:
                    bb:d7:5f:37:13:ff:b8:a9:5f:ba:95:d9:2a:76:07:
                    26:85:93:94:3a:17:b3:3e:20:96:dc:c9:8e:34:54:
                    df:92:23:44:43:b3:66:39:2c:ea:21:30:97:8a:aa:
                    21:b5:04:db:5e:16:73:7a:45:4d:94:d0:a9:f1:6c:
                    47:bf:24:6b:a2:55:8e:57:7d:69:09:5e:c8:39:0c:
                    e2:42:f7:76:54:03:49:4c:8f:a6:93:ac:6f:f8:47:
                    4a:57:2b:e6:8c:80:0a:46:ad:3f:7c:a2:6e:8b:df:
                    61:99:b1:b8:53:b0:04:1c:ca:b2:52:c6:a3:c6:22:
                    8b:ea:fe:de:47:10:c4:3f:fa:0e:48:32:50:f6:54:
                    29:74:3e:fa:92:c3:d4:d6:cc:4e:f3:cc:5c:63:ed:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B4:05:A5:56:57:A3:82:6C:9B:72:BE:04:D3:31:C6:F6:74:1A:38
            X509v3 Authority Key Identifier:
                keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:70:33:b9:30:09:3a:f6:cd:0f:c6:31:fa:45:75:aa:ad:a1:
         40:bf:08:a7:d6:f7:f1:35:08:2d:b2:dd:0a:a8:45:4c:35:6b:
         76:53:bb:ae:60:fe:1d:d4:c9:67:04:ae:6c:a8:24:0b:37:30:
         30:fb:ca:65:79:6a:85:6e:7d:fb:16:b2:78:d3:11:69:f6:bd:
         ae:e1:25:36:ad:7f:2a:6a:4c:fa:10:4e:60:08:ae:a2:3b:21:
         74:f2:f3:4b:50:2e:8a:6f:d6:db:72:24:3b:8b:41:9c:05:f1:
         a4:0a:5f:07:a8:80:6b:bd:39:53:aa:e8:d2:0b:1b:d9:90:e2:
         cb:ab:b9:73:4b:c2:40:09:36:e2:56:dc:1c:78:25:94:ce:aa:
         1e:29:fe:ea:86:7d:79:ec:be:e2:86:4d:63:00:28:ae:c6:d3:
         25:84:59:d8:d3:f8:3e:56:28:18:1e:bc:61:14:d5:c5:e0:ab:
         60:33:1b:65:1b:da:c7:7b:7f:e4:dd:14:47:c2:4e:18:8c:f8:
         41:31:5a:9c:ce:9d:ae:7e:c6:0b:91:95:fb:6e:3b:da:18:ff:
         85:64:66:5f:76:d7:d5:d5:cb:4d:83:d2:00:6f:04:1d:9f:2a:
         48:d1:8c:82:07:23:a1:24:84:c7:c3:c2:33:9d:cd:5b:6d:b8:
         cb:7d:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:39:34 2024 by rpki-client on console-fra.rpki-client.org