Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
File:                     KMvNlssXsh1iT9IXD9DXCBY68j0.mft (raw, json)
Hash identifier:          /xBBd8A3Ld8NpWboxP92a0/W6RzFeQdf9AVpoMFRxjc=
Subject key identifier:   08:01:1F:3F:5A:30:9E:05:84:9E:1B:3E:A0:85:D7:99:35:1B:55:D5
Authority key identifier: 28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D
Certificate issuer:       /CN=28cbcd96cb17b21d624fd2170fd0d708163af23d
Certificate serial:       0190448B6724A3FFC3628C225890C2436163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
Manifest number:          0B02
Signing time:             Sun 23 Jun 2024 10:01:44 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:44 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:44 +0000
Files and hashes:         1: KMvNlssXsh1iT9IXD9DXCBY68j0.crl (hash: xQNhdlTlx4BSJxy1ByLJJVSBK5mruIwI5xZwBRE7BPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:67:24:a3:ff:c3:62:8c:22:58:90:c2:43:61:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28cbcd96cb17b21d624fd2170fd0d708163af23d
        Validity
            Not Before: Jun 23 10:01:44 2024 GMT
            Not After : Jun 24 10:01:44 2024 GMT
        Subject: CN=08011f3f5a309e05849e1b3ea085d799351b55d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:1d:55:11:25:c2:58:3d:d7:ac:7b:63:86:
                    f9:be:fa:57:fc:a6:da:64:7f:96:cf:af:0d:63:f7:
                    af:18:f2:bf:f3:4f:d6:bd:da:db:16:f8:a0:43:58:
                    38:b7:4f:38:97:23:ad:48:25:5b:61:4a:9a:0b:81:
                    ca:d3:23:26:bb:91:90:81:38:9b:22:14:67:5e:aa:
                    76:17:2f:15:4b:25:22:96:64:18:cd:93:ba:91:5c:
                    8b:2b:6c:45:de:44:12:34:0b:9d:7b:28:da:cf:98:
                    cb:75:e6:30:c0:e8:f1:e8:95:2f:37:82:c9:17:c4:
                    de:d0:ee:77:46:6a:59:ca:7a:49:bf:8d:d5:a1:66:
                    90:ef:bb:a8:bd:40:4b:3a:b0:45:b6:ab:7b:c4:fb:
                    68:8c:29:6e:45:77:18:96:3c:40:e0:67:e2:d6:01:
                    75:f7:4d:8c:43:d7:2e:54:18:1b:f2:6b:b8:d4:4e:
                    27:49:fc:a2:99:84:80:5a:f1:c8:f4:5f:12:a6:1d:
                    a2:89:d9:98:1d:7e:a1:65:03:ac:07:00:8a:cb:e0:
                    61:73:d7:ad:90:f2:0b:34:8a:ba:f7:b5:87:4e:7d:
                    cf:9b:00:48:91:0d:55:58:bc:3e:20:7f:d4:83:16:
                    d7:fe:24:7b:c9:ea:2e:0f:96:21:c0:eb:0c:07:3a:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:01:1F:3F:5A:30:9E:05:84:9E:1B:3E:A0:85:D7:99:35:1B:55:D5
            X509v3 Authority Key Identifier:
                keyid:28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fa:cb:0d:11:cd:b7:d8:83:4d:8c:45:cc:49:d4:7d:81:61:
         47:ff:51:7a:40:c4:46:c3:88:b3:1e:9e:6e:be:f6:1e:86:52:
         f3:f9:bd:bc:71:45:d9:7f:2a:52:b9:a8:c7:fd:4f:59:c5:c2:
         55:b8:0d:78:7b:88:e6:95:b7:f3:10:81:da:dc:3e:95:5c:6b:
         d3:f4:cf:52:1b:44:f2:ba:7e:88:4d:ee:a5:d6:f8:4f:02:2d:
         75:b0:66:ad:86:05:55:79:72:a4:dd:04:a0:fb:a9:25:e5:e6:
         4f:8e:c9:d4:15:51:9d:d8:10:ec:db:bb:3a:11:84:51:3d:40:
         43:ef:06:f6:03:92:9e:a2:d9:15:d1:cc:7d:5a:61:f5:9f:cd:
         04:60:b0:e7:0a:e8:70:73:d6:d8:bb:91:f7:bb:1e:c7:ee:6d:
         f7:ab:a1:ff:eb:da:32:a6:1f:43:0c:e8:a5:55:ed:80:47:06:
         53:b2:55:90:af:8f:be:cd:8f:b6:76:cc:95:be:c8:24:b6:86:
         2b:4d:a3:47:25:27:b5:16:73:39:f6:de:7e:a9:44:50:cd:00:
         43:55:b1:a4:40:24:82:85:66:f8:80:1e:e3:39:17:78:8f:e8:
         1c:e7:9e:66:a2:b2:86:a3:81:80:41:3b:b0:9b:8c:7b:4b:9f:
         34:40:0b:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEi2cko//DYowiWJDCQ2FjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4Y2JjZDk2Y2IxN2IyMWQ2MjRmZDIxNzBmZDBkNzA4MTYz
YWYyM2QwHhcNMjQwNjIzMTAwMTQ0WhcNMjQwNjI0MTAwMTQ0WjAzMTEwLwYDVQQD
EygwODAxMWYzZjVhMzA5ZTA1ODQ5ZTFiM2VhMDg1ZDc5OTM1MWI1NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSkdVRElwlg916x7Y4b5vvpX/Kba
ZH+Wz68NY/evGPK/80/WvdrbFvigQ1g4t084lyOtSCVbYUqaC4HK0yMmu5GQgTib
IhRnXqp2Fy8VSyUilmQYzZO6kVyLK2xF3kQSNAudeyjaz5jLdeYwwOjx6JUvN4LJ
F8Te0O53RmpZynpJv43VoWaQ77uovUBLOrBFtqt7xPtojCluRXcYljxA4Gfi1gF1
902MQ9cuVBgb8mu41E4nSfyimYSAWvHI9F8Sph2iidmYHX6hZQOsBwCKy+Bhc9et
kPILNIq697WHTn3PmwBIkQ1VWLw+IH/UgxbX/iR7yeouD5YhwOsMBzo91wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgBHz9aMJ4FhJ4bPqCF15k1G1XVMB8GA1UdIwQY
MBaAFCjLzZbLF7IdYk/SFw/Q1wgWOvI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS012Tmxzc1hzaDFpVDlJWEQ5RFhDQlk2OGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZTQwZWUtNzkzNS00MWE5LThlZTct
ZjlhNjk0NDlkNWZhLzEvS012Tmxzc1hzaDFpVDlJWEQ5RFhDQlk2OGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZTQwZWUtNzkzNS00MWE5LThlZTctZjlhNjk0NDlkNWZh
LzEvS012Tmxzc1hzaDFpVDlJWEQ5RFhDQlk2OGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPrLDRHN
t9iDTYxFzEnUfYFhR/9RekDERsOIsx6ebr72HoZS8/m9vHFF2X8qUrmox/1PWcXC
VbgNeHuI5pW38xCB2tw+lVxr0/TPUhtE8rp+iE3updb4TwItdbBmrYYFVXlypN0E
oPupJeXmT47J1BVRndgQ7Nu7OhGEUT1AQ+8G9gOSnqLZFdHMfVph9Z/NBGCw5wro
cHPW2LuR97sex+5t96uh/+vaMqYfQwzopVXtgEcGU7JVkK+Pvs2PtnbMlb7IJLaG
K02jRyUntRZzOfbefqlEUM0AQ1WxpEAkgoVm+IAe4zkXeI/oHOeeZqKyhqOBgEE7
sJuMe0ufNEALJA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:56:29 2024 by rpki-client on console-fra.rpki-client.org