Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
File:                     KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft (raw, json)
Hash identifier:          7HnKkwRhATgsx/y4BM/L9l8CZMOlAXnFI0emT7k5ql8=
Subject key identifier:   8C:59:F7:E4:8F:95:EB:39:66:C5:FF:A4:AB:01:75:B2:07:C4:BE:87
Authority key identifier: 29:B1:21:0E:C9:10:5C:71:7D:09:8F:9F:0D:00:D9:DE:A2:32:25:39
Certificate issuer:       /CN=29b1210ec9105c717d098f9f0d00d9dea2322539
Certificate serial:       01901E5913B8E0C8E6EF78CA183D97ED2E96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbEhDskQXHF9CY-fDQDZ3qIyJTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
Manifest number:          0E98
Signing time:             Sun 16 Jun 2024 00:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:12 +0000
Files and hashes:         1: KbEhDskQXHF9CY-fDQDZ3qIyJTk.crl (hash: T75VFJhZ7WteLakC7tPIXj5yGWcJXixXU+sRo0OrOC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbEhDskQXHF9CY-fDQDZ3qIyJTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:13:b8:e0:c8:e6:ef:78:ca:18:3d:97:ed:2e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b1210ec9105c717d098f9f0d00d9dea2322539
        Validity
            Not Before: Jun 16 00:01:12 2024 GMT
            Not After : Jun 17 00:01:12 2024 GMT
        Subject: CN=8c59f7e48f95eb3966c5ffa4ab0175b207c4be87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:aa:db:9f:f2:a7:cf:27:cb:a0:02:01:63:4b:
                    06:f4:75:f5:c3:72:9d:85:b9:50:47:c6:f9:45:9c:
                    e8:68:ae:d4:02:11:be:bd:32:6c:db:78:5c:26:30:
                    91:c2:64:5c:75:11:88:f1:ae:16:9c:bf:ed:4f:b4:
                    bd:41:58:6d:f6:6c:4f:8b:6a:ba:8b:81:23:c0:38:
                    ed:8c:cd:a2:6b:1f:13:bb:02:4f:1a:a3:16:4e:ba:
                    42:57:86:ac:f3:83:8c:42:cf:7e:e0:03:35:e2:f7:
                    2a:67:2f:73:55:ab:5d:44:bd:7c:01:82:03:61:31:
                    ae:08:da:f5:fb:6e:a9:5c:06:1a:11:0b:4a:c3:7d:
                    d7:da:75:86:92:08:56:34:7a:ec:85:3e:1e:9c:a1:
                    05:bb:00:53:00:d1:0b:cd:e7:02:e9:2b:b6:b0:26:
                    8d:dd:04:10:7b:b7:1a:d8:37:34:ee:9b:0e:fd:4d:
                    f3:fe:d2:72:8b:8f:ed:14:78:5d:0d:a3:87:78:30:
                    86:21:48:b6:35:ea:3e:f7:0d:e7:c8:7a:d3:19:e4:
                    91:04:63:66:8b:d1:a4:ac:c0:fd:81:a6:51:74:45:
                    94:75:9f:30:de:23:33:46:71:29:b0:8d:7f:a8:cb:
                    44:64:2d:00:66:cb:12:fe:a5:f3:ff:b4:c5:89:fc:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:59:F7:E4:8F:95:EB:39:66:C5:FF:A4:AB:01:75:B2:07:C4:BE:87
            X509v3 Authority Key Identifier:
                keyid:29:B1:21:0E:C9:10:5C:71:7D:09:8F:9F:0D:00:D9:DE:A2:32:25:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbEhDskQXHF9CY-fDQDZ3qIyJTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:16:2b:2c:96:25:ae:e8:3f:c3:ec:f8:bb:4a:8d:a9:d3:
         48:62:06:18:a7:de:80:e8:40:bd:86:29:10:af:ea:34:b5:dc:
         f6:34:c5:02:9e:e5:60:51:76:0f:46:90:a4:be:5e:98:39:73:
         38:44:6e:40:ee:42:8c:55:d9:d5:58:75:a9:62:5e:2b:14:a8:
         f8:9f:12:b9:fb:e5:ec:71:7d:28:2e:aa:39:28:56:f8:3f:16:
         49:7b:ec:78:0e:8e:68:0e:b1:2f:f5:15:36:a2:b9:48:cd:5c:
         a7:b6:00:e0:5d:46:97:79:c6:a5:33:97:9f:0b:74:cf:24:ac:
         38:22:d3:52:e1:f6:c1:8b:c3:cf:b9:a8:e8:a7:27:2f:9c:ba:
         56:20:3e:6a:0e:2b:18:f8:5a:e7:38:0c:6b:07:cb:e5:fa:e9:
         ee:e8:a0:cb:ae:ba:db:64:3f:e1:68:38:51:5a:d4:b4:12:31:
         ca:c7:8d:db:52:73:21:8c:ff:4e:38:8a:91:da:7e:bb:e7:d9:
         64:76:bf:f2:d1:f8:5f:2d:9c:3e:1d:04:af:91:d1:99:76:59:
         cd:24:ae:f8:dc:19:36:25:5d:87:49:4c:07:12:dd:08:53:03:
         e2:f8:a2:4f:2d:36:95:40:52:47:3b:56:40:46:81:29:b4:a6:
         f2:94:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:53 2024 by rpki-client on console-ams.rpki-client.org