Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File:                     kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier:          PkvxjCYO6mZI1zZxTi5VMkG4YvCPYRAbYR95gfYz/Eo=
Subject key identifier:   88:3B:86:55:8B:6F:3A:80:E3:2C:A5:C5:C4:8B:A7:03:66:15:DE:3B
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer:       /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial:       01901E58F3B9B0D0F0F16E60C06FEBF2895A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number:          1156
Signing time:             Sun 16 Jun 2024 00:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:04 +0000
Files and hashes:         1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: Y9vT9PabFNsqKDEdJxYNBUgRohhp9cL17wUBYAlXUsA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f3:b9:b0:d0:f0:f1:6e:60:c0:6f:eb:f2:89:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
        Validity
            Not Before: Jun 16 00:01:04 2024 GMT
            Not After : Jun 17 00:01:04 2024 GMT
        Subject: CN=883b86558b6f3a80e32ca5c5c48ba7036615de3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:e2:9f:24:be:d6:52:ad:6c:38:9b:04:e7:
                    ee:db:4e:b1:ed:18:0d:9a:ac:27:b4:63:12:bf:9f:
                    67:3c:89:a2:fc:6f:5d:e4:f1:3f:92:82:78:f2:7a:
                    d5:cd:3d:a0:a6:1e:ff:fc:01:a6:09:8f:39:c5:ba:
                    2a:5c:a0:0e:2f:ae:ae:5c:af:d6:a6:f3:11:9b:4d:
                    dd:ad:ba:77:0c:fc:ef:0e:7d:69:ce:79:a5:ad:b8:
                    de:78:27:1c:24:d6:6e:e5:f3:81:07:2c:3d:8c:60:
                    93:0b:f6:6f:d8:f2:31:9e:81:54:55:fa:f2:b6:d6:
                    c8:bc:82:fd:da:eb:8c:87:43:54:1f:a7:f3:a2:fd:
                    f8:fb:2f:7c:10:7e:74:21:8f:30:7a:06:64:58:80:
                    7e:8a:b9:6d:0c:2a:0a:b0:b0:57:20:1d:94:cb:18:
                    6e:04:81:25:28:a1:7f:e2:f7:e6:5b:b0:51:84:f2:
                    fa:5e:1c:eb:65:d9:32:1f:ba:42:68:91:8d:fa:ad:
                    c5:14:50:ac:3a:55:63:8a:cd:f1:9f:92:97:94:ff:
                    38:94:e4:6b:22:29:67:f9:a6:a8:a7:b5:8a:c0:df:
                    89:31:f6:ac:be:65:d7:4a:ee:a1:a7:33:9f:ff:95:
                    39:2d:7c:12:bf:75:13:13:3a:20:a1:e3:e7:cc:c1:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3B:86:55:8B:6F:3A:80:E3:2C:A5:C5:C4:8B:A7:03:66:15:DE:3B
            X509v3 Authority Key Identifier:
                keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ab:9a:97:e9:aa:37:e6:43:59:9b:e9:56:35:c8:b3:43:d7:
         d3:9a:8a:50:08:0b:2c:ec:68:1c:82:94:45:9c:42:9a:26:f6:
         b9:22:98:56:a6:fb:79:a0:10:eb:bf:d1:86:64:51:ee:b1:c2:
         09:7f:9d:42:5d:56:46:dc:9a:bc:6c:8d:bf:4c:69:5c:84:a4:
         ec:6d:64:bc:a8:ac:c5:5c:8f:63:05:27:a8:ac:cf:cb:68:69:
         7f:25:46:2b:66:cd:b0:0f:41:5f:9e:3b:98:7f:30:ad:44:18:
         4b:fd:43:53:b1:e6:86:5e:05:1e:3d:1a:ee:24:4b:29:c5:da:
         d2:1d:aa:0a:31:9d:33:fe:49:cd:be:a1:b5:d5:8f:91:2e:54:
         1c:0d:58:08:7f:ba:e8:e6:e4:d3:fa:94:96:02:6d:54:8d:49:
         46:f9:13:f3:a9:e2:a0:fa:3b:28:d5:d2:21:ca:7f:9e:56:d9:
         fc:a3:03:ef:74:30:45:a0:b2:7c:dd:39:1a:07:2b:c5:f6:e0:
         82:b6:3b:c1:12:2d:3e:d6:cb:b9:91:03:0b:7c:40:3e:8e:24:
         78:b1:9a:1d:ab:9e:31:29:07:ad:a5:b4:c9:44:a6:0e:e1:d7:
         ee:a3:74:02:1c:45:ee:85:07:39:55:8b:86:0e:cd:2b:12:57:
         aa:f6:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:46 2024 by rpki-client on console-fra.rpki-client.org