Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File:                     KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier:          28VlqDQHRAK2qhM3MyLVnLSnF3GKW+tb30SL+1HK0kY=
Subject key identifier:   97:30:1E:A9:D4:C8:C9:64:A5:6B:9C:78:01:DD:6E:96:ED:85:E1:FB
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer:       /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial:       018F8937576B5C3A466F04B5160DDF1669D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number:          0A87
Signing time:             Sat 18 May 2024 01:00:56 +0000
Manifest this update:     Sat 18 May 2024 01:00:56 +0000
Manifest next update:     Sun 19 May 2024 01:00:56 +0000
Files and hashes:         1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: U7Mbec5Ap8ZxfSXEnsiv4SxCpBlLwSlyPwXc9iEou/M=)
                          2: XjL71-3PajMZad_HdbA15Bplq0U.roa (hash: rOXfegfYmcofws7uWR774DTH8oSqBu8bnZFURql4c4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:57:6b:5c:3a:46:6f:04:b5:16:0d:df:16:69:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
        Validity
            Not Before: May 18 01:00:56 2024 GMT
            Not After : May 19 01:00:56 2024 GMT
        Subject: CN=97301ea9d4c8c964a56b9c7801dd6e96ed85e1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:60:2f:70:92:1b:dc:2f:fa:67:a7:87:8d:
                    49:5b:6b:66:0b:df:c6:43:6e:63:2a:8b:ba:7a:28:
                    7e:71:9b:46:42:34:ec:cd:e5:36:6f:98:f0:8d:d8:
                    86:7e:d0:c6:0e:7c:c3:d4:29:1a:d4:f8:5b:47:2e:
                    8c:eb:bc:6f:3b:18:45:10:b2:95:bd:6e:ad:0a:31:
                    2b:bf:a3:92:15:a5:4d:c6:64:4d:a1:0a:06:c8:29:
                    b5:0b:ae:58:be:90:37:b9:82:cd:f9:c5:c7:ff:ba:
                    8c:b2:3c:ff:66:d1:72:af:85:dd:75:9b:65:93:78:
                    d3:5a:cb:a5:3b:86:0d:c7:c5:08:bf:88:c4:e7:e8:
                    a4:cc:f6:8d:14:4f:13:ed:61:b2:1c:6e:f3:76:3d:
                    07:07:ff:fe:49:2b:16:bc:b0:79:3c:db:56:d6:e6:
                    fc:85:4a:e1:aa:74:06:bc:d0:2b:3d:60:5b:d5:2d:
                    34:76:c4:e2:02:20:a9:fc:70:b3:5d:e5:3a:27:95:
                    e6:de:ec:97:a1:2e:f5:1d:d2:2a:c1:24:5c:65:59:
                    46:fa:ce:57:e7:75:80:03:c1:10:77:53:52:58:e8:
                    7e:8b:08:06:72:7d:84:53:8d:f1:17:33:8a:12:bc:
                    d4:47:49:b5:67:5e:ac:83:68:95:50:63:76:5e:1e:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:1E:A9:D4:C8:C9:64:A5:6B:9C:78:01:DD:6E:96:ED:85:E1:FB
            X509v3 Authority Key Identifier:
                keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:41:ed:e5:09:d7:b7:20:dd:69:9d:f8:99:73:a5:b0:52:46:
         8d:88:53:3a:ce:1a:88:4f:1a:ee:29:63:51:1d:da:06:ce:82:
         b3:49:7c:6e:a7:f0:4c:6a:42:c6:fc:dd:5f:74:f2:db:4a:f1:
         61:6e:f0:22:76:c2:21:50:4e:68:bf:3e:5a:45:5a:3e:29:34:
         b5:eb:4b:df:0c:66:57:28:04:0b:a0:e8:d9:ac:83:87:5f:3b:
         2d:3a:02:32:15:7d:65:2c:d2:cb:fe:b5:b5:c5:88:92:34:ef:
         52:ba:d9:03:8c:7d:74:a7:8b:45:98:70:c5:2d:1f:f5:6c:90:
         60:1d:bd:2a:28:95:e4:29:12:a4:97:bf:c9:b5:cb:cc:89:de:
         1a:2a:22:ea:1d:12:c4:82:35:c5:e4:b0:ec:17:e8:89:be:99:
         3f:3f:29:06:0f:68:12:ff:f4:51:4e:0e:71:65:1d:c1:d1:25:
         6a:72:23:d9:91:36:00:94:a7:6c:1c:c6:ad:76:60:85:01:54:
         79:f5:f6:c6:dc:a1:b1:42:27:52:ab:5b:ca:62:e6:2d:b8:e4:
         67:7a:e9:64:fb:ab:d2:90:83:52:a7:ef:e4:45:2e:1a:03:b8:
         74:d0:20:5c:7c:46:c5:60:f4:92:8b:bb:a5:4c:6a:31:43:3d:
         5c:b3:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:50:08 2024 by rpki-client on console-fra.rpki-client.org