Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File:                     klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier:          YNcD4rup419SqeIYatqLMJj9tzigZ2jEVfmj0h0TL/U=
Subject key identifier:   BB:09:07:1E:6E:D4:7C:87:AF:05:B1:3F:3D:F5:A3:16:A7:C1:E5:BB
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer:       /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial:       019359C0D10A5E92F3352E884AB906C3F220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 16:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:28 +0000
Files and hashes:         1: C3RXy6n7ahBGWmHMmAeBoTEM4Us.roa (hash: 6focqh+cK6/xOOqYNotWg9mye0yrMp3dklTf1GFNElM=)
                          2: HSF7pY3557mPnbE3ewSoCLAPoAg.roa (hash: gIQfdh0iNQqKvmVZAtgu3FJQDbrNSggMG63FMaheLc8=)
                          3: PyhwpqWc97EgUJX4ODB5w8DXyyw.roa (hash: kenO6+v3RkJBWhBI8cLAoi9yAF2UmQChqTDKmPXD21E=)
                          4: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: PsiMqrFkKjkpV6jlU+telYpZJ5k6/w7bHbVu/vh7QL4=)
                          5: pzUsRfakD7uCfIoXXGbclIVCAkQ.roa (hash: KNz2QAbCWPscqkNrjFETXLbwJ4PsgeRkKkFao8/hupY=)
                          6: vEay-AZ8E7wCoM-88DA7haJjigc.roa (hash: 3FN0x989VnBGQWgqlcX7aXKMcBlND21gHzZTg8ePLs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:d1:0a:5e:92:f3:35:2e:88:4a:b9:06:c3:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
        Validity
            Not Before: Nov 23 16:00:28 2024 GMT
            Not After : Nov 24 16:00:28 2024 GMT
        Subject: CN=bb09071e6ed47c87af05b13f3df5a316a7c1e5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:9f:4b:02:41:67:a0:29:73:da:6c:22:8e:
                    e1:0b:07:23:52:31:8b:d6:2b:8a:83:69:9c:78:2f:
                    e6:bf:cb:7a:6f:44:8a:d5:e8:3f:09:27:51:fd:e2:
                    55:0b:8f:d9:d4:bc:dc:06:48:4e:10:ab:60:94:62:
                    41:61:2d:85:30:f4:e5:cc:78:b7:1f:05:a9:86:3b:
                    25:73:da:da:8b:61:49:0a:b2:ae:b2:1d:96:6a:b2:
                    73:2a:77:96:8f:e6:ee:3a:3e:c1:ad:82:7f:77:82:
                    23:d9:cd:d8:58:9e:f9:e8:b4:74:fd:9d:f4:bc:43:
                    3a:7d:f7:d5:84:8b:06:11:83:e8:e1:4d:19:4b:45:
                    24:ec:2a:df:ec:ee:4f:a7:70:9b:c1:d5:6b:71:72:
                    16:53:f5:d8:ba:e4:4b:ea:10:00:0c:97:2b:38:fa:
                    fc:86:0b:4f:58:fd:a4:6d:10:b2:bc:43:dc:dc:67:
                    29:cb:f0:db:4d:15:04:6c:53:35:33:a1:d5:46:88:
                    06:f2:de:28:77:19:ec:d1:47:50:d0:4b:a1:0c:0b:
                    bb:01:3f:25:10:2c:7e:84:2d:45:c7:dd:91:07:3e:
                    ea:fd:ec:d2:5a:99:20:ef:e2:a1:29:06:b9:74:35:
                    63:87:87:1d:56:67:52:24:60:32:2e:1b:d8:9a:84:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:09:07:1E:6E:D4:7C:87:AF:05:B1:3F:3D:F5:A3:16:A7:C1:E5:BB
            X509v3 Authority Key Identifier:
                keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:9b:b0:5a:79:78:d0:bc:70:b6:9c:6b:6e:54:2d:f0:6a:
         61:4e:3e:63:e9:4a:81:36:e5:40:3e:58:9e:b0:1d:9a:6a:01:
         f6:a1:7f:01:55:e9:14:17:09:a5:e1:ca:7e:f1:06:9f:b4:81:
         50:0e:ed:dc:b2:ed:56:45:0f:ac:ee:c3:e0:4e:83:db:07:91:
         b9:1d:9c:56:1b:d7:bf:b4:5f:3b:12:8a:d2:a7:0c:5d:a1:ce:
         e1:86:5a:d1:79:43:53:9f:92:ca:92:e9:a6:64:e6:3f:28:e8:
         9d:cf:c7:20:d2:92:76:ad:ed:6e:c9:3c:3c:8e:77:f2:3a:83:
         6f:34:9b:08:cf:e5:19:16:c9:b4:29:55:c2:2e:db:64:d4:73:
         57:1a:51:29:7b:3c:93:b8:a7:c7:d0:5a:dc:df:df:1c:08:4c:
         39:19:7b:8d:ad:39:60:e6:26:ef:1b:bb:77:44:bb:d7:7d:8b:
         79:57:d3:25:75:47:4a:68:f9:12:aa:02:33:2c:71:1d:73:2a:
         f2:48:d2:9b:ea:8d:d1:19:dc:70:94:14:0f:fa:b4:01:1b:d5:
         4b:6f:57:67:0a:0b:1b:79:28:67:b3:22:b1:40:18:e0:14:0d:
         c6:d8:07:bf:8e:42:e1:a1:81:dd:f2:92:26:03:c4:43:de:dc:
         b7:f1:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:03 2024 by rpki-client on console-ams.rpki-client.org