Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File:                     KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier:          KekRqzeLoAJ/rooierNBB6nNORukFVBQQIwigfg1mQ8=
Subject key identifier:   BA:FC:E5:42:03:04:1D:4A:1A:3B:F2:35:B2:86:1B:F2:30:76:91:4E
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer:       /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial:       018F874934BEA0F73414AFDC4EFA77C42F55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number:          07CF
Signing time:             Fri 17 May 2024 16:01:12 +0000
Manifest this update:     Fri 17 May 2024 16:01:12 +0000
Manifest next update:     Sat 18 May 2024 16:01:12 +0000
Files and hashes:         1: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: 8L4XioeUsBwjheZ6/bgUNs4mI/WUug9S5USiK0ijboc=)
                          2: sBeShjxnDhxRTvOlViISQA5DsZI.roa (hash: olk0oEcAlfP8ST3qtd1klAfm0k6qHj0lRrQ7jnxe2n8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:34:be:a0:f7:34:14:af:dc:4e:fa:77:c4:2f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
        Validity
            Not Before: May 17 16:01:12 2024 GMT
            Not After : May 18 16:01:12 2024 GMT
        Subject: CN=bafce54203041d4a1a3bf235b2861bf23076914e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:8c:9b:c7:7c:31:d4:af:32:13:12:01:b4:
                    5e:fa:e1:5f:bd:71:73:57:dd:c5:d2:c7:f0:80:e2:
                    91:68:7c:c5:3c:02:14:ca:04:0a:3b:df:58:ed:4f:
                    cf:7e:14:67:8b:64:1b:61:42:36:72:b1:6a:ab:23:
                    92:e3:b2:9b:52:ed:62:7c:95:31:26:73:8d:10:4f:
                    12:e0:e9:16:08:fb:af:f5:24:e3:d1:0c:c2:43:66:
                    ef:96:72:8a:9a:d5:8d:fd:aa:20:7a:97:cc:77:06:
                    5b:8f:1e:c4:74:51:99:ba:63:39:bf:4f:f2:16:ee:
                    67:02:6b:40:a5:7b:91:c7:fe:d8:41:5c:40:f9:b1:
                    92:10:75:52:b6:d3:fa:fe:5b:10:db:42:35:24:2b:
                    41:97:99:fa:e0:7e:d8:e2:a5:a6:1b:18:74:9d:1e:
                    d1:f9:e6:b4:e9:7a:6c:15:de:33:f5:13:ab:b3:e4:
                    d6:3a:f2:fd:7e:0c:2f:1d:b3:a9:ad:53:c5:96:c9:
                    56:ef:5c:32:01:08:6d:55:1f:19:7d:0e:20:81:e0:
                    46:98:f2:82:64:2b:64:b0:80:7d:a9:57:1e:b4:29:
                    09:94:34:71:e3:b1:2c:07:7e:e4:a6:0e:10:e9:29:
                    99:48:9d:da:df:8c:84:3c:24:16:fd:dc:60:a0:ed:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:E5:42:03:04:1D:4A:1A:3B:F2:35:B2:86:1B:F2:30:76:91:4E
            X509v3 Authority Key Identifier:
                keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:9c:11:c5:b5:e7:d3:e2:d7:a7:15:50:e3:ae:1d:e6:a5:
         38:f4:7a:d4:34:4c:21:af:5b:c6:53:7b:3a:40:66:eb:4d:c0:
         8c:b8:a8:12:a6:a8:d1:9c:37:50:c0:58:a3:73:6e:18:56:48:
         6e:78:57:e1:89:af:4a:ae:79:af:da:90:60:09:5d:46:ba:87:
         2a:43:6a:f5:fe:b2:27:ff:30:a6:af:84:3d:6e:bc:8b:ff:9e:
         2b:d1:59:c6:72:2c:9a:0e:e8:cb:8c:3b:a6:a1:1b:db:4b:1c:
         2c:b8:4d:50:ba:1a:bb:e7:f6:20:7e:3e:4a:3d:ad:32:20:2d:
         8c:c5:b9:fc:a9:bd:f6:bd:d8:15:fc:40:e6:16:b7:41:43:90:
         42:5f:f2:5d:bf:42:36:ff:9f:08:77:eb:d8:6c:ad:2a:98:d9:
         2e:8a:e2:9e:8d:00:65:73:70:26:a1:1f:67:24:eb:40:b0:0d:
         f2:66:bb:26:69:69:96:21:86:80:34:cd:46:6f:a0:30:40:e8:
         9e:2e:06:62:97:59:f9:c0:93:e8:73:5c:d3:16:1e:cc:79:b1:
         54:21:12:d7:d1:9a:98:33:03:68:60:1a:42:be:0c:16:5b:c5:
         f7:64:89:66:57:7a:11:8c:b6:f2:ff:44:b5:10:d6:72:83:d3:
         ae:67:61:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:25 2024 by rpki-client on console-fra.rpki-client.org