Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
File:                     KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft (raw, json)
Hash identifier:          8WpcqPNG/A+KPGtwxetGx0fqBwd3/mizXA8KgAbcY9I=
Subject key identifier:   57:AF:69:95:38:58:76:2A:0F:EF:A4:A4:B2:84:D3:0B:DE:E5:41:20
Authority key identifier: 29:B1:21:0E:C9:10:5C:71:7D:09:8F:9F:0D:00:D9:DE:A2:32:25:39
Certificate issuer:       /CN=29b1210ec9105c717d098f9f0d00d9dea2322539
Certificate serial:       018F87B66D7859ED913EA67699B712693971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbEhDskQXHF9CY-fDQDZ3qIyJTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
Manifest number:          0E4A
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: KbEhDskQXHF9CY-fDQDZ3qIyJTk.crl (hash: ea+OJgGKa8hdUYyeY7K2gbWsU04Al7TsrKgni49WsOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbEhDskQXHF9CY-fDQDZ3qIyJTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6d:78:59:ed:91:3e:a6:76:99:b7:12:69:39:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b1210ec9105c717d098f9f0d00d9dea2322539
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=57af69953858762a0fefa4a4b284d30bdee54120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:2b:89:e2:6e:cb:85:ec:16:3a:de:e5:cd:
                    e8:bc:8a:32:e8:85:12:5a:78:55:b7:90:75:bb:6e:
                    7b:1d:d8:8d:c6:0c:99:a5:c4:5c:97:cf:0c:0f:ac:
                    b4:41:8a:0e:6f:4a:bb:e6:ff:b0:2d:55:93:6e:e5:
                    35:db:d9:f8:77:84:bd:08:4b:86:f5:6c:27:da:9c:
                    3e:bf:df:79:e4:e9:38:4e:f5:8e:7a:c8:b6:b7:9e:
                    23:7a:40:74:6c:60:0f:39:1f:05:0f:97:31:2b:5d:
                    6e:a7:b7:69:2d:5e:d1:82:4f:dc:26:b2:64:ef:66:
                    ab:21:5f:7b:f8:4a:6b:53:95:8a:0c:2b:6c:b1:4f:
                    e9:1b:48:59:d1:d4:ba:1e:9a:3d:f9:cd:f9:78:8b:
                    63:fe:39:4c:6f:56:24:cc:91:21:9e:64:a4:86:ed:
                    03:c3:fe:10:14:ae:5a:de:b0:84:e0:7f:26:50:e0:
                    ac:b1:e2:a2:30:32:06:92:06:57:fb:33:3c:d8:e2:
                    2e:19:e1:55:be:31:5c:6c:6f:99:91:48:e9:eb:90:
                    ab:aa:e1:8a:2c:59:21:83:57:1e:d1:67:ff:17:9e:
                    2f:f2:92:d5:3d:86:bf:48:b0:d9:3a:fe:a3:d6:f1:
                    99:9e:50:eb:25:f4:20:32:4b:42:1e:53:82:79:25:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AF:69:95:38:58:76:2A:0F:EF:A4:A4:B2:84:D3:0B:DE:E5:41:20
            X509v3 Authority Key Identifier:
                keyid:29:B1:21:0E:C9:10:5C:71:7D:09:8F:9F:0D:00:D9:DE:A2:32:25:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbEhDskQXHF9CY-fDQDZ3qIyJTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:48:05:fb:d6:7f:2c:04:6a:3b:5f:4c:ba:72:60:ec:b6:
         66:68:2f:ae:cc:9f:26:95:7b:7e:bc:1b:3a:f1:80:7f:d5:b4:
         f8:75:4d:a2:54:cb:7e:70:a2:58:33:73:b1:74:6b:89:b5:0a:
         29:b6:c8:0d:b2:a0:ee:2f:3a:31:ab:5c:b8:71:79:1e:43:23:
         20:eb:fa:ba:7e:01:74:b7:45:a1:57:e6:9e:bd:d2:de:17:45:
         80:22:a6:a8:10:d3:90:81:fa:06:d9:0b:75:c9:0b:d2:c9:74:
         1a:a6:85:64:4f:12:71:68:12:59:01:f6:ab:f7:64:34:d7:f5:
         47:97:0d:a9:01:04:54:b6:64:86:ea:80:4a:a1:c9:f5:07:e8:
         88:b5:d7:20:fc:52:a3:00:6a:02:11:3e:81:32:60:0d:53:ed:
         03:f0:35:d7:fc:fa:c0:07:07:e6:97:b8:b4:6d:58:7a:ea:19:
         86:72:ca:5a:b7:0f:19:2e:86:64:ac:c3:17:63:95:8f:65:7a:
         12:6c:55:08:2a:d1:d4:5e:08:c1:db:56:f2:79:6e:c1:0c:1a:
         46:d5:74:95:c0:2a:44:62:e8:2a:61:14:41:e5:cb:23:f4:ba:
         3d:61:f7:90:d8:dc:62:1f:3b:a4:77:cb:55:f1:df:f6:84:61:
         a5:94:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:43 2024 by rpki-client on console-fra.rpki-client.org