Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
File:                     KPXiqEB6tD1tJkGkeP-UkGUlb40.mft (raw, json)
Hash identifier:          sHCKwONP0dgjF2X2gZRU7DY4hc9DMIzfgGN7vzv8F/8=
Subject key identifier:   70:18:0D:12:70:2F:98:64:2B:AE:AE:66:F2:79:3E:47:A9:57:FE:58
Authority key identifier: 28:F5:E2:A8:40:7A:B4:3D:6D:26:41:A4:78:FF:94:90:65:25:6F:8D
Certificate issuer:       /CN=28f5e2a8407ab43d6d2641a478ff949065256f8d
Certificate serial:       01901DED8101611371DF490F2480CAB49029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
Manifest number:          0C96
Signing time:             Sat 15 Jun 2024 22:03:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:42 +0000
Files and hashes:         1: KPXiqEB6tD1tJkGkeP-UkGUlb40.crl (hash: eoNwp361wPYEc+zvWRc+go8b1rMgJ1q++iCpd5XZELc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:81:01:61:13:71:df:49:0f:24:80:ca:b4:90:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f5e2a8407ab43d6d2641a478ff949065256f8d
        Validity
            Not Before: Jun 15 22:03:42 2024 GMT
            Not After : Jun 16 22:03:42 2024 GMT
        Subject: CN=70180d12702f98642baeae66f2793e47a957fe58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:30:17:d5:9b:b1:86:82:e8:c7:3b:15:2c:
                    1b:51:d4:03:c3:3f:8c:cd:1b:14:af:7f:e0:fa:5c:
                    4d:b0:9f:64:7c:f1:cc:66:1b:7a:df:4c:d0:8f:55:
                    8d:ed:7c:9b:ff:66:16:d7:41:3d:a3:c3:60:3a:fa:
                    84:48:c4:e2:28:31:bc:c9:03:1b:fc:0b:39:cd:d1:
                    ca:23:17:27:63:e0:87:23:ea:e7:d2:78:cc:fa:b1:
                    ab:bc:61:d8:90:79:4e:3e:b2:14:65:59:a1:c5:a5:
                    1a:bb:74:1b:47:f8:a6:60:80:95:e0:17:24:fe:51:
                    a6:21:37:34:94:5c:e0:e1:35:6d:6f:a5:09:d1:60:
                    da:35:a4:01:53:5c:9c:db:4c:23:89:2a:6d:e5:52:
                    cb:b6:fa:4f:a3:3a:47:aa:69:70:56:60:1e:3b:92:
                    67:d0:33:51:70:2e:76:47:10:7e:9d:4f:70:e5:93:
                    ff:78:51:e4:aa:e7:69:09:61:bc:44:b5:35:87:b9:
                    36:bc:ff:00:cc:f8:28:97:de:3c:02:9a:11:00:44:
                    5c:b1:1a:58:ac:a5:09:1f:dc:57:a4:43:7a:b6:0d:
                    f4:c1:e1:62:c0:7b:b5:ba:ac:b6:b5:82:5f:45:98:
                    35:08:bc:ca:56:a5:17:62:32:10:d4:cf:25:d3:d1:
                    cd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:18:0D:12:70:2F:98:64:2B:AE:AE:66:F2:79:3E:47:A9:57:FE:58
            X509v3 Authority Key Identifier:
                keyid:28:F5:E2:A8:40:7A:B4:3D:6D:26:41:A4:78:FF:94:90:65:25:6F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:29:54:67:c0:78:00:6c:66:e7:8f:80:36:d0:bc:e0:21:a7:
         db:8e:a5:84:34:bc:1d:d7:56:02:0b:23:70:59:2e:c6:d3:25:
         82:61:4d:57:6a:a9:15:85:35:f2:e9:df:06:a0:9c:0e:8a:0d:
         5f:74:d5:7e:a0:f1:7b:ed:b9:53:9f:36:f1:45:c0:5c:a4:d3:
         48:62:12:0f:88:af:d7:35:05:4f:92:34:af:f9:55:56:0a:bd:
         54:cb:c3:7b:de:d8:0e:12:98:fe:81:69:5b:91:dc:df:9a:f2:
         ec:ea:b4:26:04:da:9b:58:53:4f:da:e1:24:4b:3f:78:08:d3:
         8c:d6:2a:55:31:74:be:b0:5f:19:76:c6:2e:79:9c:f1:9b:0c:
         ef:30:bc:38:c8:d2:d5:b6:76:c4:42:e7:ff:f4:e1:c3:46:ed:
         71:d0:4f:7c:ac:43:90:c8:32:59:42:b4:b5:a5:77:1b:85:2c:
         3a:7d:53:2a:9f:c7:58:72:6d:b8:42:2c:57:5c:aa:0d:ed:74:
         b5:80:4e:b1:62:cc:a7:87:3e:16:8d:f1:88:dd:3a:20:c4:fd:
         7a:32:56:1b:96:7a:d3:9b:fe:c4:ee:4c:c5:79:7d:1f:a8:e6:
         3e:1e:b6:90:f1:f2:4b:23:a2:37:e4:19:64:9a:d3:6a:65:e0:
         2b:ba:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:28 2024 by rpki-client on console-fra.rpki-client.org