Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
File:                     KMvNlssXsh1iT9IXD9DXCBY68j0.mft (raw, json)
Hash identifier:          xey+AnwjDGBqwC13ButYPAHhYThA7T8rxwb+yKkwzLw=
Subject key identifier:   32:29:17:DC:F2:D1:56:21:33:E5:2D:27:6F:2D:F6:D4:D8:03:0D:79
Authority key identifier: 28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D
Certificate issuer:       /CN=28cbcd96cb17b21d624fd2170fd0d708163af23d
Certificate serial:       01901DED462FAC16D10BC29C079839C80318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
Manifest number:          0AEE
Signing time:             Sat 15 Jun 2024 22:03:27 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:27 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:27 +0000
Files and hashes:         1: KMvNlssXsh1iT9IXD9DXCBY68j0.crl (hash: oDNiU9NhBbmQKPYwHDuKUl2Iak14OONEZ73zZy0rPj4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:46:2f:ac:16:d1:0b:c2:9c:07:98:39:c8:03:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28cbcd96cb17b21d624fd2170fd0d708163af23d
        Validity
            Not Before: Jun 15 22:03:27 2024 GMT
            Not After : Jun 16 22:03:27 2024 GMT
        Subject: CN=322917dcf2d1562133e52d276f2df6d4d8030d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:34:ef:0a:f1:12:8d:2f:a2:5c:f4:a7:b9:
                    86:67:3e:7d:17:f1:12:5f:05:c0:77:58:d8:e8:6e:
                    a0:ab:96:96:22:b9:67:bd:fe:a8:5c:17:d8:78:fd:
                    f4:da:e0:39:a0:f7:12:77:4c:a8:a1:83:a8:92:18:
                    08:bd:2c:ed:a2:75:68:c9:1a:03:fe:1f:65:be:f4:
                    81:8d:6f:0b:49:19:e2:aa:34:55:b3:b9:de:7b:bf:
                    c2:72:e2:5b:06:05:5c:ef:58:ae:2f:25:79:ce:3e:
                    58:82:6b:16:08:fd:3c:c5:a9:2b:76:ab:ca:11:18:
                    55:02:44:29:f4:1a:66:1c:76:68:c1:c6:f2:8b:73:
                    41:f3:af:98:1b:18:b6:a2:05:df:ae:85:af:08:c2:
                    70:3d:69:e3:ab:4e:20:e2:38:20:5d:2d:9e:dd:e5:
                    cf:90:e3:4e:58:54:4c:05:a1:93:9f:ed:94:fb:31:
                    49:db:13:87:3f:1e:2e:f5:5e:c6:e1:88:f5:4e:b8:
                    aa:51:2b:2b:6e:a1:c6:36:63:21:38:eb:2d:7d:c5:
                    c8:64:6b:26:bd:ef:65:3b:92:ef:b3:b9:60:64:40:
                    a7:4d:94:e0:10:d4:d7:d5:b2:a0:7d:4e:2d:94:99:
                    12:53:11:d6:b0:ad:36:d9:bd:fb:01:99:f5:4c:39:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:29:17:DC:F2:D1:56:21:33:E5:2D:27:6F:2D:F6:D4:D8:03:0D:79
            X509v3 Authority Key Identifier:
                keyid:28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:08:93:4e:48:1e:5f:7e:e4:d2:39:bf:a6:8c:66:19:b0:
         16:80:41:b1:b0:3c:11:82:9f:83:d4:f8:bc:e7:14:31:fe:bb:
         af:29:c5:0d:27:5f:1b:2d:ea:de:0d:22:c6:3c:88:89:7a:97:
         ad:6e:f4:21:1e:12:ec:90:df:b0:76:c1:fc:2c:4c:f9:32:18:
         bb:23:bf:61:c7:c9:95:2c:a7:21:bc:91:b9:5e:a3:00:df:26:
         5d:59:cd:74:99:4a:b3:11:e1:d7:5d:94:23:e7:67:8d:d4:cc:
         be:f0:c2:30:45:ab:67:9e:bd:a7:8c:66:d5:18:bb:de:10:65:
         67:6a:e4:d4:f4:37:2f:b7:bf:3c:9c:51:60:1e:0e:fa:cf:83:
         ab:56:14:96:0f:f8:6c:f9:eb:33:56:64:17:63:c0:c4:03:65:
         2d:54:04:7f:d5:a6:bc:21:c6:2b:06:79:0e:26:39:dc:2c:de:
         f9:2e:99:be:df:1c:db:bc:b8:95:99:af:39:d7:be:eb:40:cb:
         c0:6b:fc:de:23:99:0f:0f:56:e4:4f:44:39:68:e7:2b:66:54:
         4a:b8:f9:e1:32:1a:ee:8c:c9:95:e6:71:ce:7c:fa:6c:46:0a:
         32:b1:93:c0:6e:20:f2:e1:38:a3:52:7a:8d:cf:6a:e2:46:c8:
         06:70:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:46 2024 by rpki-client on console-ams.rpki-client.org