Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File:                     RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier:          gf27UfwhMyuk5h48XNU5pLwq4xd8Y8QSplGmDMcWMaE=
Subject key identifier:   D5:80:07:00:9B:EC:8E:10:67:25:07:4D:51:3E:91:F7:2C:2C:E1:3A
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer:       /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial:       01901F343C9CCDB23F3CE2AFBC11901F9065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number:          05F0
Signing time:             Sun 16 Jun 2024 04:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:35 +0000
Files and hashes:         1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: SprQvb+Ut2erNPQKJPL2k+oXj0HCWCZHn1PouBGiLpo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:3c:9c:cd:b2:3f:3c:e2:af:bc:11:90:1f:90:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
        Validity
            Not Before: Jun 16 04:00:35 2024 GMT
            Not After : Jun 17 04:00:35 2024 GMT
        Subject: CN=d58007009bec8e106725074d513e91f72c2ce13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:82:38:4c:8f:05:33:11:ae:0b:02:0b:80:
                    06:45:fc:24:2d:67:bc:83:68:ca:34:b7:a4:8e:9e:
                    98:07:30:d6:cc:da:42:74:d8:b5:7f:18:9c:a8:d0:
                    12:57:8c:04:1f:c0:59:00:57:dd:8b:7b:0c:fa:55:
                    6c:45:f8:67:31:7c:07:fc:23:72:35:f3:ca:f2:ae:
                    c1:80:15:66:fb:06:2d:39:50:71:c5:b3:d9:d9:2a:
                    f3:cb:6c:03:9d:16:58:cc:8f:36:2b:b6:c2:92:06:
                    12:a3:63:a1:fe:c9:ad:ed:d0:90:3b:19:e0:8f:66:
                    fa:44:50:35:56:48:92:74:21:ef:0f:6d:ab:2d:ec:
                    6f:03:ad:4e:c3:b2:c7:31:6c:8f:6a:8f:24:ff:c6:
                    b8:05:b2:e8:f2:5f:0a:2f:07:7a:21:19:a0:da:ea:
                    46:4a:ce:89:05:94:49:99:e7:3a:24:3f:a0:a7:d0:
                    22:09:23:0c:11:a3:06:18:3f:c7:28:ff:25:b2:5e:
                    4f:bb:05:ff:f7:5a:83:9c:78:22:d0:eb:73:1a:09:
                    1e:d6:30:d3:6f:bf:a7:eb:0d:ad:59:92:51:82:75:
                    00:68:f7:13:dd:b3:08:27:c2:2a:a7:d0:b2:f2:46:
                    91:3f:2a:90:83:b9:4d:47:66:32:af:5c:20:1b:0c:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:80:07:00:9B:EC:8E:10:67:25:07:4D:51:3E:91:F7:2C:2C:E1:3A
            X509v3 Authority Key Identifier:
                keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c2:38:7e:71:02:db:14:0e:f6:ed:d5:bf:a0:28:5c:2f:b4:
         99:36:17:9d:af:49:4d:a8:8a:04:ef:b2:1a:bf:db:00:09:64:
         a9:68:9c:85:d3:30:60:9a:e9:a9:6e:1b:55:6d:0c:ae:c1:a0:
         74:47:f6:20:42:f3:c5:83:14:52:e1:68:3d:3d:01:3b:7e:fe:
         33:18:89:33:5f:bd:70:1e:b7:7f:5e:99:d9:38:17:85:42:5c:
         15:48:b3:68:ef:a5:51:d1:3b:64:16:85:b0:5c:9d:97:34:21:
         d7:56:d8:a4:49:02:b4:2b:26:e1:5a:57:63:22:4e:bb:95:78:
         af:4d:cb:be:fa:3a:be:0f:d2:fc:cd:f4:2d:46:ad:bf:a1:e5:
         10:16:e1:aa:1d:30:d6:fd:e5:4e:f4:09:95:f2:d1:08:69:40:
         27:ca:8c:36:19:ee:c5:b2:73:c3:ad:d5:9e:20:0b:fc:f9:1d:
         67:29:07:8e:67:12:8f:40:60:91:2f:92:b7:f2:97:f6:6d:d8:
         04:1e:32:dc:3e:fb:b2:3d:b1:72:b1:fd:e2:a8:03:ed:1e:4d:
         66:8d:95:4c:fd:5b:35:fe:12:a3:e7:eb:8f:95:ca:7c:86:80:
         f1:8d:ac:de:46:18:a0:73:6c:48:00:ec:0e:b4:15:8b:53:f8:
         d3:e4:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:22 2024 by rpki-client on console-fra.rpki-client.org