Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File:                     KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier:          0Mz2lCX9WJ5NRuVFV+sYM/3o3iy09XHMAjDUujz7hk0=
Subject key identifier:   BE:57:D9:FF:D4:CB:1D:D5:A7:AE:40:26:9C:53:11:14:7E:75:B4:AC
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer:       /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial:       01901DED93B970B963A1000938AE6A6DD21C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:03:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:47 +0000
Files and hashes:         1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: GjTq+YZTX/gpG9ZxiWxjAyq7IlkpX5vYGSNF4hiHsX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:93:b9:70:b9:63:a1:00:09:38:ae:6a:6d:d2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
        Validity
            Not Before: Jun 15 22:03:47 2024 GMT
            Not After : Jun 16 22:03:47 2024 GMT
        Subject: CN=be57d9ffd4cb1dd5a7ae40269c5311147e75b4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:13:f3:3e:7c:54:74:39:97:09:b4:b7:55:
                    a1:22:79:6b:57:e6:60:0b:b3:ac:5e:c0:7a:fa:1b:
                    3a:28:c9:0f:be:df:c8:93:5b:5f:e7:b0:bc:d1:ad:
                    08:b9:88:19:d2:79:e2:9f:23:ef:84:01:c1:36:f4:
                    e7:4a:fe:45:73:f5:1b:4c:e5:1e:97:63:1d:8a:90:
                    70:2a:74:e1:76:c9:99:54:77:e2:66:38:88:e4:18:
                    a6:2d:bd:e0:c0:7e:50:af:8a:b1:6d:90:f0:dc:a2:
                    77:59:86:ed:85:58:38:c1:62:b3:5c:97:ec:69:1d:
                    a5:8c:b3:a6:f7:ab:1e:cf:34:6f:4a:0d:2d:4f:a0:
                    58:5b:82:73:2b:f3:39:03:18:31:17:f9:7a:aa:bd:
                    3a:a2:1e:e8:55:09:b3:51:c3:93:a8:ab:74:a7:eb:
                    44:92:e0:5f:bc:3f:45:e8:c8:58:3b:08:23:47:57:
                    15:66:9b:df:a8:87:40:80:1c:d3:58:71:6a:d8:63:
                    58:b0:ec:34:bb:e9:2c:c1:54:dd:b0:91:80:f2:8f:
                    d4:38:c7:dd:65:92:9d:30:9f:dd:77:35:9c:08:42:
                    a8:6d:1b:35:a8:78:5b:b1:9c:ca:09:d3:81:09:77:
                    4e:b8:ef:64:c5:fb:62:71:fd:69:59:1d:fe:55:c8:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:57:D9:FF:D4:CB:1D:D5:A7:AE:40:26:9C:53:11:14:7E:75:B4:AC
            X509v3 Authority Key Identifier:
                keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:cc:00:55:45:a7:a9:4a:36:bc:fa:7d:eb:d7:ce:4f:f8:30:
         c4:31:93:66:8b:6a:97:c9:64:a4:5c:0b:ab:b0:ff:c6:10:ac:
         4e:13:5d:0d:93:47:47:c2:10:9b:d5:3a:52:05:0e:b0:d5:2c:
         96:b1:ee:9e:b4:fc:fb:2e:09:0f:79:2f:43:d6:b3:da:15:fd:
         04:a4:5e:8a:b0:78:65:bb:35:b2:3c:06:21:0f:0f:6b:6b:de:
         7b:89:4c:65:73:a3:6c:b2:1a:fc:2e:d7:ad:aa:f2:e0:75:a2:
         d1:c1:a0:f9:9e:4e:ac:ed:e0:3e:28:bc:a4:4f:76:10:20:b5:
         37:87:51:19:fd:0e:0e:c1:6b:00:91:b9:53:2d:ec:a1:f2:2d:
         24:a8:b7:a1:f5:ff:15:ab:60:4b:e8:27:8e:ff:f9:f3:c1:87:
         aa:40:ce:c7:f7:fa:be:98:30:99:3b:51:4a:be:8a:49:8e:d7:
         69:a9:7a:d5:6d:32:db:e7:6d:8f:b3:87:ad:22:ae:4b:58:5f:
         05:b1:c3:df:72:75:ae:98:91:70:6f:af:f8:c1:da:0a:04:af:
         82:46:44:ce:8e:d7:76:3c:a0:46:e6:11:93:e5:3d:c9:ac:1a:
         8b:2c:1a:52:32:f5:51:39:4b:f4:93:8d:b8:5e:7d:14:7a:3d:
         a3:13:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:36 2024 by rpki-client on console-fra.rpki-client.org