Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
File:                     KseXKZzH3xxPAjwgeZYIti_iAsE.mft (raw, json)
Hash identifier:          sPhctsFkc+D95MqkEsayKRy1+hUydQw5i/gPDpxupRY=
Subject key identifier:   FD:08:87:9A:F3:2E:0D:9B:46:96:4A:30:57:54:02:3A:BC:F0:B4:A8
Authority key identifier: 2A:C7:97:29:9C:C7:DF:1C:4F:02:3C:20:79:96:08:B6:2F:E2:02:C1
Certificate issuer:       /CN=2ac797299cc7df1c4f023c20799608b62fe202c1
Certificate serial:       018F86A3F1FA3D249C0197E999E586F628CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KseXKZzH3xxPAjwgeZYIti_iAsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
Manifest number:          031A
Signing time:             Fri 17 May 2024 13:00:42 +0000
Manifest this update:     Fri 17 May 2024 13:00:42 +0000
Manifest next update:     Sat 18 May 2024 13:00:42 +0000
Files and hashes:         1: KseXKZzH3xxPAjwgeZYIti_iAsE.crl (hash: 96xhYXeHG6ktoaModFAESodv0FPZ1cXEao2PP/NeeAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KseXKZzH3xxPAjwgeZYIti_iAsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:f1:fa:3d:24:9c:01:97:e9:99:e5:86:f6:28:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac797299cc7df1c4f023c20799608b62fe202c1
        Validity
            Not Before: May 17 13:00:42 2024 GMT
            Not After : May 18 13:00:42 2024 GMT
        Subject: CN=fd08879af32e0d9b46964a305754023abcf0b4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:a4:bc:ce:45:28:0d:2a:e7:1e:54:9d:b4:
                    91:ab:15:b7:79:a3:19:c9:84:6e:12:3e:f3:a4:26:
                    dd:28:63:33:97:3d:07:c2:4e:a9:3d:d7:3b:12:05:
                    ac:55:e1:22:7e:02:3e:e1:48:10:fb:8a:ff:60:09:
                    8f:34:30:29:44:d3:be:69:13:34:42:84:70:60:bc:
                    90:c3:05:99:28:6a:de:ec:22:f3:c9:21:83:19:b5:
                    65:8f:ae:e7:e0:55:e6:33:55:9f:fd:4a:c0:bc:99:
                    b9:b1:95:c6:19:4f:af:d6:c0:63:58:8d:e3:25:42:
                    de:aa:f5:fc:d6:6d:2f:db:78:ef:7f:b4:2e:82:46:
                    38:d1:2b:4e:07:1f:c9:b2:31:c2:e0:45:7f:f9:e6:
                    dd:33:9f:7b:93:c7:4d:d5:a3:79:9a:e4:93:0b:db:
                    48:fa:b4:8b:ec:38:79:0a:f9:32:8f:f2:64:9e:da:
                    87:90:bf:41:56:ad:d5:26:9b:17:5a:a2:a3:3a:9c:
                    36:10:15:98:7a:e4:10:10:74:7f:a7:51:7d:75:c0:
                    bc:d7:11:3c:4c:9b:9f:b9:21:9b:ed:9c:49:bd:e3:
                    a7:95:ea:53:fb:56:98:63:b9:7f:e7:e0:cf:fc:82:
                    7e:ae:6b:f3:4a:98:de:b3:55:da:51:98:71:4c:75:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:08:87:9A:F3:2E:0D:9B:46:96:4A:30:57:54:02:3A:BC:F0:B4:A8
            X509v3 Authority Key Identifier:
                keyid:2A:C7:97:29:9C:C7:DF:1C:4F:02:3C:20:79:96:08:B6:2F:E2:02:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseXKZzH3xxPAjwgeZYIti_iAsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:85:3d:6f:5d:0f:b0:36:00:bc:87:f2:37:85:5b:de:99:f5:
         25:ef:63:06:37:d0:d5:14:b2:58:02:30:90:4c:15:95:90:a3:
         23:c5:7b:17:6e:ec:0a:f4:57:3d:d7:f5:4f:6e:04:3c:3c:d5:
         80:e0:03:4c:c0:89:7d:ce:2f:6d:e3:d4:bb:22:e4:6b:5c:da:
         f1:a1:05:a3:68:d7:ff:07:57:86:5b:73:6c:d3:76:53:88:c4:
         d8:2b:d1:de:e5:27:6f:bf:57:bf:0e:dd:4c:f6:22:9f:e3:ce:
         15:c4:7e:4b:94:0d:41:2c:8e:8b:f2:a5:e8:f3:38:ba:b9:30:
         a3:8d:75:3f:04:8b:e6:5f:b2:7e:84:bb:56:4c:93:7a:e0:7a:
         a5:3a:76:17:fe:51:d2:35:23:2b:f5:6d:bd:1c:4a:31:ed:5e:
         75:26:b7:86:b5:70:03:bb:67:f9:c4:90:c3:7a:c9:c0:04:b4:
         e5:66:38:56:c7:6b:5f:73:e3:0a:cf:0d:81:59:ef:20:78:4e:
         27:26:b9:c1:96:65:e2:80:ac:53:87:3d:a4:d6:9e:42:60:14:
         b5:f9:b4:dd:a7:c9:35:0b:42:a1:c9:c3:83:54:e6:17:a8:f0:
         5e:b1:1b:ed:27:4e:9e:60:33:fd:7e:a3:47:fc:95:55:b4:b0:
         a2:59:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:28 2024 by rpki-client on console-fra.rpki-client.org