Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File:                     kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier:          dEvVirkjGy7SmjJyPbzO7jNtf825NHT1fUin0wcuar0=
Subject key identifier:   E4:B6:E4:5D:12:4A:D1:E3:7E:EA:93:A3:57:9D:D1:9C:B0:D8:F0:7A
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer:       /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial:       01958BBBC0859ACD1B3B470B864F97273803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number:          0370
Signing time:             Wed 12 Mar 2025 19:01:32 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:32 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:32 +0000
Files and hashes:         1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: HkM9HUOLzac/4OaEYYdA/KAIb1hHx5y0GrSk5RrFWO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:c0:85:9a:cd:1b:3b:47:0b:86:4f:97:27:38:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
        Validity
            Not Before: Mar 12 19:01:32 2025 GMT
            Not After : Mar 13 19:01:32 2025 GMT
        Subject: CN=e4b6e45d124ad1e37eea93a3579dd19cb0d8f07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:0c:36:aa:a3:af:ec:c8:6f:f1:f8:e1:b4:
                    db:d3:cb:b9:c0:95:3c:a3:1e:67:9c:15:81:d8:d2:
                    25:1f:c9:cd:8f:fd:6e:07:80:86:74:d4:fe:60:df:
                    de:99:98:01:df:5e:b2:54:fb:5a:42:55:e8:cd:96:
                    b5:b6:c0:aa:97:6e:7a:91:ef:23:44:12:e6:7d:8c:
                    e3:00:64:8a:bc:8e:51:7f:e6:24:d4:1d:26:c5:60:
                    12:ba:a3:cb:cd:e4:01:73:0d:b8:51:d3:1d:88:91:
                    ce:b2:c9:c4:79:7b:ba:86:a7:35:68:75:22:58:5a:
                    d9:08:e8:71:b2:61:6e:1c:5d:5d:12:58:7c:cd:ba:
                    d2:0c:69:31:97:38:d3:cd:bf:58:77:4f:12:4c:8d:
                    71:2f:23:2d:d0:40:5e:a1:8a:8a:bf:b3:68:30:bf:
                    3c:6c:63:71:3e:f9:1e:ee:24:0b:80:4c:09:14:3e:
                    e7:fb:c1:b3:43:29:3d:44:68:b3:86:3b:11:cc:85:
                    ef:52:a4:dd:73:4e:39:61:d2:8d:5a:13:20:60:af:
                    cb:5a:b1:3a:f0:c6:38:2b:a0:aa:e4:50:ad:ff:b4:
                    55:30:b6:41:bf:5e:47:c3:5a:96:6e:a1:87:21:a9:
                    08:72:08:fa:6b:67:e0:e6:ff:4b:02:18:e7:37:17:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:E4:5D:12:4A:D1:E3:7E:EA:93:A3:57:9D:D1:9C:B0:D8:F0:7A
            X509v3 Authority Key Identifier:
                keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:b6:7a:5a:c9:9b:02:87:4c:f8:b6:6e:ef:d9:de:4e:f0:
         18:71:0e:88:ed:9b:37:41:b3:11:0f:07:d6:56:37:7e:9f:b1:
         ee:9b:1e:8b:9c:5c:cd:9a:dc:da:7b:b3:8a:57:5d:53:e5:86:
         89:74:44:d2:98:c9:a7:aa:54:cb:ad:ef:b9:e5:0e:2a:11:c9:
         da:5b:74:c3:57:74:4e:d0:cb:39:9f:54:72:79:f4:33:e8:72:
         2b:19:ff:32:13:d0:ad:46:fc:14:7a:86:df:5d:68:88:8c:64:
         b7:2e:3b:e0:94:b3:bb:45:af:f1:08:8d:07:11:fd:53:77:54:
         e5:22:68:38:64:d9:98:e6:28:b2:43:5b:4a:1f:76:f3:d5:40:
         36:a5:c3:4e:ba:5b:52:3b:89:a7:98:b9:28:d5:2c:c4:2e:5d:
         2d:c4:a3:1f:c0:2c:8f:99:e0:6e:7a:f5:b4:52:eb:7b:3a:a0:
         66:5f:02:df:2b:69:39:2d:a6:31:e0:bc:14:d3:ce:79:88:76:
         4e:15:16:8d:df:a7:20:f7:f1:e4:2e:b8:22:ea:b2:aa:b8:33:
         7e:8f:0b:5e:23:d9:0a:33:2f:4b:51:fd:cd:8e:2c:29:74:da:
         f1:f7:91:b7:64:03:23:11:0b:9c:58:ca:cf:61:5f:75:11:a1:
         fa:09:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:36 2025 by rpki-client