Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File:                     kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier:          sSLxd8PzOD4zQcG3ZpZQ/2rXDkgzKARUIzAsLCTPnrM=
Subject key identifier:   E2:2F:62:8E:99:A6:98:5E:21:91:FE:8A:94:8E:80:0B:59:4E:39:2B
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer:       /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial:       019652A4EA58DCC9EC3F90E41326634DB2E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number:          03D7
Signing time:             Sun 20 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 20 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 21 Apr 2025 10:01:01 +0000
Files and hashes:         1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: BndWpVyxwoKUaFTUG8B39odCGMP2/jfM5IQaEk5osjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:ea:58:dc:c9:ec:3f:90:e4:13:26:63:4d:b2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
        Validity
            Not Before: Apr 20 10:01:01 2025 GMT
            Not After : Apr 21 10:01:01 2025 GMT
        Subject: CN=e22f628e99a6985e2191fe8a948e800b594e392b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:20:66:96:3b:0f:3e:73:92:ee:e3:35:40:
                    41:0c:49:a1:ff:d0:00:c1:69:ca:05:33:73:32:75:
                    3e:0e:80:55:a6:62:38:f7:24:1f:66:4c:cf:c0:5a:
                    60:35:73:52:61:51:45:7c:11:24:e3:bc:a1:a5:81:
                    42:07:03:a6:46:1d:6d:28:f2:11:60:4a:83:46:33:
                    2f:d5:71:4a:ab:eb:04:ac:2c:eb:8e:06:91:e4:dc:
                    37:e3:a4:72:bf:75:a2:1a:28:b5:9e:d5:0d:84:30:
                    d2:a4:8d:82:9d:b8:6b:2e:d8:29:2f:8a:e3:ee:89:
                    ee:f0:66:a9:ee:09:04:d2:d8:41:ec:49:54:bf:cd:
                    47:ea:fb:b0:08:cb:24:60:b2:d3:d9:ae:5d:86:2f:
                    2e:b8:e3:61:45:e5:bb:f0:3a:34:35:09:3a:18:ab:
                    10:f1:86:eb:9e:b0:94:01:61:b7:b6:fe:ab:79:69:
                    77:2e:82:80:48:fd:ac:25:c9:05:a6:19:67:09:85:
                    a3:3b:06:1d:05:88:b9:3a:68:5d:8a:76:5d:e7:71:
                    bc:09:18:ba:db:e8:83:8a:e8:23:65:41:1a:ef:7d:
                    77:95:87:8c:90:ee:cf:a4:17:b0:14:95:99:79:68:
                    55:56:55:1b:f1:44:a9:d0:06:87:60:3d:b3:2d:9b:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2F:62:8E:99:A6:98:5E:21:91:FE:8A:94:8E:80:0B:59:4E:39:2B
            X509v3 Authority Key Identifier:
                keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e8:40:74:68:49:75:f2:64:16:d0:3a:e0:f2:4e:95:b0:88:
         60:9a:b3:0b:d0:78:8a:e3:0c:a2:d9:7d:14:2e:f6:c4:21:2c:
         65:84:64:9a:d3:64:09:26:ec:6b:5c:95:39:13:91:12:33:8c:
         94:39:de:df:3e:37:6b:8d:1a:77:52:de:a9:6d:80:0f:e7:51:
         70:8a:21:d8:3c:1e:23:59:0f:68:ca:ec:f6:da:a7:4d:7d:4f:
         e0:77:7d:a0:6d:d5:6d:40:84:03:8a:e0:f4:4a:38:16:cd:1d:
         47:a1:79:06:d2:60:56:a3:c4:74:6b:7e:57:b2:f5:fa:36:29:
         21:0a:83:a8:d6:78:0a:0f:b2:28:42:63:1a:8a:b6:c2:b5:cf:
         50:0f:a9:54:42:bf:ca:89:9f:9b:ad:e1:d2:1c:5a:20:ae:90:
         4a:66:3c:24:bb:e4:bd:c3:2a:6d:a5:c5:4c:25:c5:f0:30:5a:
         a2:e2:bf:ed:0d:fb:ee:7a:08:b6:20:93:ea:54:03:3e:63:2e:
         e9:41:2b:c4:09:a4:46:03:2f:e9:c2:f1:0a:8f:75:a8:7b:2b:
         8b:73:41:00:fc:a6:28:74:4d:ae:6b:5f:60:7d:56:b2:19:c3:
         ca:5b:68:a2:d0:1c:27:07:18:ba:c0:35:01:46:ef:8f:b6:a1:
         6c:80:ce:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:22 2025 by rpki-client