Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File:                     kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier:          YhdiZC2njWtO2KlVP5yRdoyeH82JtOjzpVdsjkbwA5I=
Subject key identifier:   E1:A3:19:52:85:F2:C4:93:06:B7:A1:B1:25:7C:02:3F:40:1D:58:78
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer:       /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial:       019040AEBA0253E0A2FD0539150592D62228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number:          116B
Signing time:             Sat 22 Jun 2024 16:01:50 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:50 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:50 +0000
Files and hashes:         1: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: pdfd8JwLI3GgE12HbJuiPa+agsq2JuQrdrt6I5bvzFM=)
                          2: oVJIpvHEFVSZKMOPsKtfllBj_ss.roa (hash: LylZJ4lBF/jq2Hy9/s61S0y2ClDRuKyuO38SibF/GMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:ba:02:53:e0:a2:fd:05:39:15:05:92:d6:22:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
        Validity
            Not Before: Jun 22 16:01:50 2024 GMT
            Not After : Jun 23 16:01:50 2024 GMT
        Subject: CN=e1a3195285f2c49306b7a1b1257c023f401d5878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:d7:99:82:64:15:d8:de:d9:8f:af:de:8c:
                    38:02:53:be:c8:ce:87:c1:ee:e6:7c:97:fb:50:35:
                    b2:dc:b8:85:d8:8c:ad:f6:18:5e:95:5a:55:0a:e4:
                    5f:2f:de:94:56:60:52:5c:ba:3d:fe:35:27:55:fd:
                    ac:ff:2f:cc:4e:3b:80:21:c0:1e:3c:60:b6:ba:33:
                    c6:8d:0e:30:0a:66:10:27:4f:f6:77:46:90:d2:62:
                    d6:54:70:13:56:17:e6:8e:38:a6:e7:b9:02:a2:59:
                    0d:c8:b4:a1:f3:e1:07:0f:6f:21:f3:75:ec:42:31:
                    92:ee:8e:40:74:fe:a4:82:43:30:7a:39:ad:3b:71:
                    cb:b4:90:20:09:88:b9:da:1e:19:5e:c0:64:03:d8:
                    e0:76:30:57:bf:aa:81:17:b7:a1:eb:a9:00:a7:ae:
                    99:6b:e7:dd:66:f7:4a:50:16:a0:9b:0e:19:62:87:
                    1b:66:64:c8:a9:f8:10:3e:60:6b:5d:fa:8d:e3:56:
                    7c:44:22:d2:49:e6:92:94:74:e7:78:2a:87:e3:98:
                    ad:7e:5a:3f:16:aa:60:97:d0:37:44:bc:e0:34:1c:
                    6b:ec:5c:5b:a6:1c:3c:3a:33:d8:3f:69:a8:62:cb:
                    42:d9:d0:bd:da:55:2a:fe:fa:5f:bb:3a:a7:27:7d:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A3:19:52:85:F2:C4:93:06:B7:A1:B1:25:7C:02:3F:40:1D:58:78
            X509v3 Authority Key Identifier:
                keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:33:3d:35:40:69:85:71:ab:bb:7c:84:6b:b7:04:84:0b:9f:
         4a:72:a3:26:b4:60:5c:be:32:9f:b5:71:53:23:8e:17:de:0a:
         ab:ef:03:a0:cd:c5:a0:40:73:6f:46:9e:a5:e1:3c:13:7e:79:
         69:f7:7d:9a:35:7a:1b:15:b2:7b:4b:b8:5a:ae:9e:bd:99:11:
         dc:cc:97:35:a4:69:b1:2c:b1:80:ed:8f:f7:5c:7e:a7:3e:de:
         57:21:43:cf:0e:36:ac:ea:d8:65:59:60:74:a4:74:a5:e9:c3:
         7b:9f:83:8d:38:ac:77:c2:2b:10:de:d1:95:2c:a3:71:6a:ca:
         f2:a1:4b:46:0f:09:d8:6f:d6:69:31:d3:5f:14:8d:3e:8b:21:
         69:b7:47:a5:cd:c2:33:7a:b6:d3:db:25:53:26:18:d0:da:36:
         37:4a:3b:30:09:fb:79:e9:7c:25:69:a6:40:0e:85:57:55:7b:
         fa:c7:97:74:7d:4e:f4:2b:0e:b4:78:6b:87:63:43:22:49:62:
         f4:2e:91:5c:85:08:96:15:1f:c7:bb:2e:30:8e:9c:f6:92:d4:
         ef:5e:79:3b:36:e2:b0:3e:f3:c6:59:ad:ad:f5:be:d0:d1:c7:
         5b:ff:b2:07:e7:b0:74:c6:c4:ab:8c:17:92:68:bc:fa:12:b9:
         6c:46:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:41:06 2024 by rpki-client on console-fra.rpki-client.org