Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
File:                     kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft (raw, json)
Hash identifier:          z74zZ6DsHW7Bfz3vNRVd9TsgdqKQJUYHDMdHIfCSTDg=
Subject key identifier:   8A:D0:D6:46:42:18:BF:49:2B:E6:85:DE:28:0F:F2:9B:88:47:EC:83
Authority key identifier: 91:CE:55:13:88:CC:BC:0E:13:06:BF:A2:8B:E6:33:BB:5D:C3:4B:F5
Certificate issuer:       /CN=91ce551388ccbc0e1306bfa28be633bb5dc34bf5
Certificate serial:       018F8DB82E7AB328640A5983C74B8C5311A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
Manifest number:          0CBD
Signing time:             Sat 18 May 2024 22:00:08 +0000
Manifest this update:     Sat 18 May 2024 22:00:08 +0000
Manifest next update:     Sun 19 May 2024 22:00:08 +0000
Files and hashes:         1: kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl (hash: i9IJ6bQf67t0J9cYG+/dcJPwFAiMhXL6u5U2CBLzqqw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:2e:7a:b3:28:64:0a:59:83:c7:4b:8c:53:11:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ce551388ccbc0e1306bfa28be633bb5dc34bf5
        Validity
            Not Before: May 18 22:00:08 2024 GMT
            Not After : May 19 22:00:08 2024 GMT
        Subject: CN=8ad0d6464218bf492be685de280ff29b8847ec83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:f0:86:29:86:1e:e8:78:01:28:f8:bc:2c:
                    d6:64:60:8c:e5:35:1c:21:fa:3d:03:5a:43:68:fa:
                    56:12:22:79:38:3a:0f:67:d1:7e:cb:28:5d:61:d9:
                    67:5d:b6:af:27:80:4e:d9:c3:8c:74:4c:1b:63:96:
                    c9:3c:94:c4:ec:02:31:ca:52:60:3f:6f:7e:61:dc:
                    8a:64:f5:73:5e:70:ed:cc:73:4b:58:e6:93:d6:d9:
                    59:ba:ea:c9:e1:32:9f:86:2c:e2:a2:ec:a8:4c:d9:
                    17:de:aa:52:06:bb:77:66:37:67:d4:5b:9f:d4:cc:
                    70:04:08:a0:70:ff:d9:c9:71:82:67:90:a4:9e:94:
                    23:0b:75:3d:fb:ea:fe:b0:c4:c7:2f:e3:3b:37:4a:
                    b8:67:96:fb:97:6d:e3:29:9b:b5:e1:82:03:69:a9:
                    4d:3d:86:ca:d8:0a:df:3d:77:14:64:92:c1:f6:38:
                    76:dd:7e:a9:72:41:e8:62:b9:ff:c0:7e:09:39:18:
                    d2:5e:f9:db:5c:d9:c5:6d:00:bb:cc:7a:e8:14:69:
                    9c:46:ef:51:de:4e:b5:d9:ba:65:06:c9:64:c6:1d:
                    5b:cd:d5:23:5d:7a:1d:38:95:8b:0b:50:23:22:8c:
                    16:12:c2:93:9c:1b:b1:9f:7f:69:0f:01:be:d8:23:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D0:D6:46:42:18:BF:49:2B:E6:85:DE:28:0F:F2:9B:88:47:EC:83
            X509v3 Authority Key Identifier:
                keyid:91:CE:55:13:88:CC:BC:0E:13:06:BF:A2:8B:E6:33:BB:5D:C3:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:89:e3:3d:ac:d5:cf:f7:2e:be:bc:b9:52:ce:95:2b:d3:eb:
         70:a8:23:99:30:00:58:dc:1b:2b:e6:76:b2:6c:57:f4:b5:30:
         ac:c5:ee:9a:a4:e8:a0:94:c5:fe:64:21:34:ab:0a:39:6d:cc:
         3d:04:13:56:98:39:f9:67:f9:5a:07:e5:fe:18:02:e3:35:19:
         0b:88:ac:d4:00:88:6b:d1:82:b2:82:24:09:b2:25:3c:a8:38:
         aa:56:2c:2e:fc:40:c0:13:2e:ca:0a:5b:77:d2:97:7e:ab:28:
         f0:23:d2:1f:75:3d:1f:9c:8c:36:08:6d:bf:dc:60:ac:5d:b3:
         4a:4a:60:e1:a1:92:a1:9b:8c:d5:07:30:10:90:2a:85:62:76:
         75:4d:2b:21:39:af:81:f4:37:b5:f6:1d:0d:90:c3:bc:a0:bb:
         c7:0b:01:42:c1:1e:59:bd:8d:d5:6e:e6:e3:85:48:5b:31:7e:
         7e:80:f3:2f:b5:af:ba:15:8f:a8:8d:6f:9b:f7:99:01:d3:71:
         0a:47:c4:32:87:54:96:cb:3c:d6:3b:76:91:8c:0b:49:41:2b:
         ec:53:6e:24:0b:57:54:e1:f9:c0:a1:4c:63:ed:2a:98:73:2b:
         40:51:27:65:8e:5b:de:3f:29:de:bd:e1:b1:62:4f:d1:c6:3b:
         1b:00:aa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:50 2024 by rpki-client on console-fra.rpki-client.org