Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File:                     KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier:          JFFmx2g5PQcap8YD4Kex6hNC0XRD52U3aPicZPd8lYI=
Subject key identifier:   D3:AD:C0:ED:87:AE:C5:87:E4:83:BF:5D:D6:1C:D1:D4:DD:A3:E5:1C
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer:       /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial:       018F8749FC24A54D9288A1981A5EEF4CDBD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number:          0AF5
Signing time:             Fri 17 May 2024 16:02:03 +0000
Manifest this update:     Fri 17 May 2024 16:02:03 +0000
Manifest next update:     Sat 18 May 2024 16:02:03 +0000
Files and hashes:         1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: gI/BCxy6cNM6F+m0wX9WEq8qXZGW5dAyy/IxQHv6edg=)
                          2: ZUi18N6SZN5VHXRKcB4biG4nxRY.roa (hash: MfHC89K/Ci+xwjsYraTb4zg8x5/AHwBU91Vg6UzuQLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:fc:24:a5:4d:92:88:a1:98:1a:5e:ef:4c:db:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
        Validity
            Not Before: May 17 16:02:03 2024 GMT
            Not After : May 18 16:02:03 2024 GMT
        Subject: CN=d3adc0ed87aec587e483bf5dd61cd1d4dda3e51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:d2:1d:57:ad:a1:ff:2c:fd:17:66:f3:5e:
                    49:c4:4a:c6:05:54:d0:14:ef:ed:1b:9d:86:94:8b:
                    17:1d:92:a4:30:1e:8a:92:c0:1d:77:9c:06:b7:5a:
                    1f:f8:6d:63:38:a9:06:e1:a0:ce:6d:b1:4a:f7:9f:
                    4b:57:66:74:2d:8f:95:71:dc:53:6f:3b:cf:0f:c7:
                    87:9b:82:df:f2:f1:e6:fb:31:31:c2:6e:96:0c:4f:
                    ce:57:a3:25:46:38:73:46:67:10:6a:fc:eb:76:2b:
                    10:44:b3:f8:bc:11:ee:da:dd:b7:07:87:07:26:93:
                    9b:b5:1f:13:76:65:0f:4c:e3:e2:f7:08:e6:77:bf:
                    b9:b3:c4:1d:7c:11:fb:e0:57:f4:de:83:ab:3d:72:
                    d0:d2:f5:08:44:04:75:e2:63:74:ce:3d:99:5d:cb:
                    39:ca:8e:d3:5f:32:91:61:57:59:41:09:e7:11:af:
                    bf:03:8d:1a:93:b6:4b:0e:d5:da:ac:b3:f9:28:41:
                    5e:d0:5a:35:4b:5f:41:4c:0b:74:79:6e:0a:02:56:
                    6d:92:31:bc:bf:d4:3a:f1:6c:b0:3c:46:57:e0:7e:
                    45:2f:e9:1f:53:2b:c0:20:a4:c2:03:20:72:53:3e:
                    1f:2e:99:08:12:f1:d0:de:b0:3c:8e:58:72:3c:90:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AD:C0:ED:87:AE:C5:87:E4:83:BF:5D:D6:1C:D1:D4:DD:A3:E5:1C
            X509v3 Authority Key Identifier:
                keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:74:6e:4b:45:fa:dc:1e:e9:89:16:79:2e:28:e3:1d:57:00:
         79:2c:05:2f:4f:7e:8b:6e:87:2f:c5:d7:77:65:25:ff:d0:4b:
         11:24:af:c3:62:2c:18:55:29:1f:21:a7:82:af:95:fe:27:49:
         77:d9:56:04:83:74:40:34:60:0d:3e:02:cf:8f:fb:f3:31:04:
         df:32:9e:61:a7:d9:18:44:1a:40:ff:0d:a8:4c:b4:93:7b:3f:
         3f:e7:5f:64:4b:23:2f:b4:de:0d:87:9c:48:74:36:46:5a:e1:
         68:6b:2f:1e:16:31:71:aa:15:37:45:e0:e0:f7:39:28:0f:75:
         17:8e:48:e3:ba:27:ba:60:69:75:a4:6b:42:30:2e:e4:1e:e8:
         61:3f:b2:51:da:9b:55:65:cd:2f:99:f2:34:2b:17:81:cc:ea:
         3e:c0:e0:74:e3:52:49:08:65:04:c4:76:fe:a2:55:d6:f4:5f:
         e9:92:64:c6:b1:fd:39:b1:26:eb:c0:48:cb:72:d4:c9:cb:bc:
         4c:2b:c1:13:64:3c:63:bf:62:ec:a0:85:60:d6:76:b2:37:3e:
         1b:c9:ae:c4:99:c0:ca:6d:a1:c2:1c:e8:f8:8a:eb:b1:87:94:
         09:09:56:ed:88:df:5e:d7:ff:0c:c3:d6:fd:3a:ea:97:20:09:
         6b:2e:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:21 2024 by rpki-client on console-fra.rpki-client.org