Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File:                     KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier:          crZ2/Z8GAMK0MUFoLt15OkS/reOuwLIB4Q+vdvxvDks=
Subject key identifier:   02:38:CB:F8:88:90:8A:2C:59:65:53:A5:F5:72:4E:39:67:2F:85:3A
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer:       /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial:       0193553EF92AC3DC770FFBD4D81E08E87367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number:          06A6
Signing time:             Fri 22 Nov 2024 19:00:10 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:10 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:10 +0000
Files and hashes:         1: 7PRyd-XN3f-amSxpj7gEJe6ak9U.roa (hash: 9Zv2Uveo9jyYznf5ELe1x4qpGX7qdkAstLBVWRWNGyU=)
                          2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: eOGUCByZRZQcSjn8JCU4QwP52e4U6Mn2CrIcRqVG+o0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3e:f9:2a:c3:dc:77:0f:fb:d4:d8:1e:08:e8:73:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
        Validity
            Not Before: Nov 22 19:00:10 2024 GMT
            Not After : Nov 23 19:00:10 2024 GMT
        Subject: CN=0238cbf888908a2c596553a5f5724e39672f853a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5e:3a:bf:cf:b2:2a:4d:38:b6:af:ae:78:95:
                    cf:cf:54:b5:2c:5c:42:7d:4b:a7:11:81:5c:71:e4:
                    d6:5b:1c:bf:e6:a3:6b:9c:91:ef:bd:b2:53:37:b9:
                    f3:d5:07:69:7c:ab:3e:0e:67:81:d7:e0:c7:51:65:
                    2e:f4:88:6e:00:57:89:4d:58:11:6f:e0:75:1c:d8:
                    fb:d2:4b:00:8e:96:3c:00:c5:72:b2:5e:54:9c:c0:
                    e3:92:87:ad:9e:db:36:f5:87:42:99:17:c9:ac:69:
                    2d:62:c7:c4:23:0a:d0:c0:c6:52:58:84:4b:aa:d2:
                    e3:80:6d:01:d9:81:1c:12:1f:8f:b3:60:08:a7:a0:
                    35:32:6b:c6:8c:43:1e:98:c1:27:80:88:2f:8d:48:
                    a6:f6:27:6c:df:b4:72:9b:8a:d9:e4:84:2e:76:89:
                    1b:18:72:4f:1b:fe:07:09:01:be:d9:b2:a1:5b:7b:
                    5d:33:84:78:77:e3:f8:39:05:a5:4f:bf:84:c4:7d:
                    e5:99:32:d6:c1:ef:fc:11:a1:c4:ec:a2:5c:28:d8:
                    65:80:e4:c5:7f:6a:be:ed:fa:04:bd:33:5c:38:b4:
                    0f:20:ac:d7:5d:ef:8f:cb:92:59:03:29:30:11:ba:
                    37:00:f1:b2:8c:a4:97:af:af:9c:75:c4:65:98:eb:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:38:CB:F8:88:90:8A:2C:59:65:53:A5:F5:72:4E:39:67:2F:85:3A
            X509v3 Authority Key Identifier:
                keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6f:d0:ff:8e:b8:59:5a:af:3f:e8:ae:5a:fe:5c:4f:e6:d8:
         d0:c7:b6:58:a4:b9:4d:ca:52:5b:1d:d5:6b:75:8e:cf:22:1c:
         e1:b2:16:21:82:81:dd:69:eb:c8:9e:e7:c4:68:77:0f:85:e7:
         65:43:17:0e:36:84:96:54:fc:e6:4c:eb:b3:fc:28:a2:a9:ae:
         38:09:a4:97:32:a7:1d:5a:15:0d:11:66:c9:7d:97:d3:fd:0d:
         81:72:10:e0:58:2b:88:76:f8:ca:12:de:1c:06:16:82:50:be:
         0d:72:64:4b:a6:b7:7c:24:ba:4a:fa:9d:6f:de:f3:8d:31:51:
         22:b7:dd:78:7a:66:0f:c5:c6:40:1e:f6:82:49:79:f4:c3:62:
         22:ae:3a:59:40:a5:a0:8d:1e:b9:e5:31:db:3e:4f:94:d2:3b:
         a9:58:22:c4:f1:fe:83:e2:3e:01:a7:6b:e6:73:03:23:ad:4c:
         a3:ff:93:f5:79:71:ba:44:88:7c:36:3f:f6:fc:a1:98:5a:dd:
         6a:b7:ee:fd:52:d9:36:af:1c:3f:df:5b:e6:1b:17:95:94:c8:
         75:50:27:2d:26:4d:23:ec:89:cc:72:bf:97:e1:12:f1:22:0e:
         0c:6e:b8:45:16:d3:05:af:8d:19:eb:3e:b0:78:75:80:25:1e:
         18:e5:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:27 2024 by rpki-client on console-fra.rpki-client.org