Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File:                     ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier:          SxRbO4jB3qB1aSfQ3LibgUp/NR8zoctUu2rPCViRqwQ=
Subject key identifier:   F6:89:5A:55:1F:07:6F:12:0F:CE:42:F4:61:E4:C2:2E:15:A7:88:8D
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer:       /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial:       01901E58B571F0ED3DC52AEF2D6BAF1D7F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number:          04BB
Signing time:             Sun 16 Jun 2024 00:00:48 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:48 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:48 +0000
Files and hashes:         1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: avys5Hw6jddsuXnlBIGQw1AcIHzc4fx1/LZO/Jtzufw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:b5:71:f0:ed:3d:c5:2a:ef:2d:6b:af:1d:7f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
        Validity
            Not Before: Jun 16 00:00:48 2024 GMT
            Not After : Jun 17 00:00:48 2024 GMT
        Subject: CN=f6895a551f076f120fce42f461e4c22e15a7888d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:c0:90:eb:ec:d2:ec:4b:89:3f:c6:9c:6b:
                    3c:ea:35:a0:a6:b1:d6:ca:e8:86:71:c4:ae:aa:03:
                    cc:74:6b:c8:f1:55:40:a1:30:10:63:62:b9:01:8b:
                    3c:b6:79:63:ba:01:7d:db:3a:9d:b3:13:0a:f0:22:
                    02:bc:bd:03:75:c3:84:1d:81:3b:c6:3e:4a:b4:48:
                    bb:2a:7a:4b:9d:95:ab:a7:08:a2:88:1a:73:52:88:
                    3e:fd:06:ef:24:be:11:d0:ab:47:c4:d2:bb:38:49:
                    a6:ec:f6:da:0e:65:3b:b0:94:5d:71:81:6b:9b:c5:
                    0f:15:22:c7:dd:f3:6f:0b:d8:4a:93:7a:a8:96:d2:
                    43:b8:dc:74:33:b4:2b:5f:a2:4a:df:9f:20:e5:63:
                    a1:4c:be:8b:bc:4f:35:6d:34:51:59:eb:eb:f9:b1:
                    c7:a6:5d:48:21:2e:b7:a9:cb:9a:b7:5b:25:08:63:
                    93:41:10:30:44:be:a1:f2:b6:7a:e3:46:9f:3d:b0:
                    b5:fc:68:b3:54:b7:0b:b5:c8:66:15:a2:93:b2:32:
                    07:e4:7b:36:9d:79:99:88:0f:67:ea:87:de:3d:17:
                    56:77:72:98:79:6d:d7:26:2a:90:fd:64:cb:bd:aa:
                    f1:5b:14:6f:9b:98:31:8e:f3:ba:bd:d7:35:05:c6:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:89:5A:55:1F:07:6F:12:0F:CE:42:F4:61:E4:C2:2E:15:A7:88:8D
            X509v3 Authority Key Identifier:
                keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:d3:f8:98:60:dc:b7:5c:7b:99:5e:da:fa:13:8e:13:20:
         ff:29:0c:1c:8f:4d:e7:ab:18:30:9c:26:71:22:b5:97:c3:10:
         a3:11:e4:9e:3c:3e:1c:8c:33:f7:48:b8:d3:10:ea:6d:e2:ed:
         8b:fd:f6:11:4a:cb:a7:28:f9:11:25:08:79:6a:8a:ca:4d:09:
         17:5e:46:c7:d6:06:65:5f:1c:8d:47:7f:d7:a0:08:43:6d:15:
         b9:90:93:fb:aa:de:f6:3d:b3:d6:39:6b:04:b1:9f:b6:24:7c:
         2a:5e:a6:ff:d2:fb:d4:af:8b:02:d0:95:81:5f:fe:61:c7:c5:
         f5:c2:dc:22:0d:f2:18:9f:ea:ca:f9:62:82:48:77:36:23:00:
         ce:a7:d3:18:72:1d:f9:b2:9d:b1:75:e8:2f:ff:21:cb:be:c9:
         39:36:08:41:c5:3d:9d:a0:c3:fa:e0:3f:b2:e2:5d:ef:d3:4d:
         6f:65:de:2e:94:02:2b:6b:81:aa:68:d4:d9:8a:3d:12:99:c9:
         6d:e9:4d:42:18:bf:54:8c:5f:02:15:50:1e:12:81:e0:56:0d:
         ae:d0:60:bf:59:2e:17:0a:ab:de:99:60:d4:1c:36:51:78:f3:
         0f:bd:b1:38:c7:60:02:56:de:bb:d3:5c:34:83:fa:a0:05:54:
         e3:48:45:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:06 2024 by rpki-client on console-fra.rpki-client.org