Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File:                     kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier:          +weeStgexbuG35xcB2laXZzW+bsQ1ilWay9J7nUQcOY=
Subject key identifier:   B2:50:69:55:85:56:E7:86:04:C1:AC:52:BE:29:EA:A2:3C:70:81:1E
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer:       /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial:       018F9617419A3531F83AB29D65758F51A26C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number:          5A
Signing time:             Mon 20 May 2024 13:00:57 +0000
Manifest this update:     Mon 20 May 2024 13:00:57 +0000
Manifest next update:     Tue 21 May 2024 13:00:57 +0000
Files and hashes:         1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: hoAPkCo9UffLXAjehw2tbrrXcG+PsBmvqfDrso4AFjE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:17:41:9a:35:31:f8:3a:b2:9d:65:75:8f:51:a2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
        Validity
            Not Before: May 20 13:00:57 2024 GMT
            Not After : May 21 13:00:57 2024 GMT
        Subject: CN=b25069558556e78604c1ac52be29eaa23c70811e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:7c:27:31:3c:29:e9:83:6f:79:ec:60:b4:
                    be:95:21:d8:17:9c:9c:76:bd:d5:01:f9:b6:5b:00:
                    74:fe:c8:44:a5:48:cc:ec:50:4e:98:99:ab:d5:7f:
                    fe:54:99:9b:bf:89:5b:76:dd:1e:63:8a:90:ab:4f:
                    d3:6a:2c:0e:7e:3b:20:78:3d:d0:c3:56:57:e7:40:
                    6c:e4:38:1f:ca:ea:ef:5f:54:82:4a:04:bd:b8:02:
                    8c:0a:44:55:1e:ed:9b:20:df:a6:66:62:73:06:32:
                    01:e2:7d:ac:d3:bf:53:89:6a:e2:bf:17:02:9f:27:
                    45:76:2d:71:70:dc:79:6a:16:fa:0a:24:e2:db:8c:
                    d2:7b:c5:ad:0b:a2:e2:1d:49:d1:21:8c:83:05:e0:
                    8d:da:6f:8e:9a:b2:b5:0d:83:7e:e5:70:65:2b:4e:
                    76:a7:28:8c:75:41:5a:fa:f8:ee:f3:44:24:57:8f:
                    f1:f3:77:b0:dc:5d:2e:2d:9e:46:93:25:06:1e:f4:
                    44:e3:2b:e3:21:74:63:cf:d1:3a:fd:08:c7:c5:93:
                    a7:87:de:1a:dd:bd:0a:83:4c:d4:33:16:71:ae:98:
                    73:a5:12:1e:e0:27:5a:8b:ae:b7:41:8b:57:5b:44:
                    5d:43:dc:2e:43:39:cc:db:32:8f:0e:dc:6c:0d:83:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:50:69:55:85:56:E7:86:04:C1:AC:52:BE:29:EA:A2:3C:70:81:1E
            X509v3 Authority Key Identifier:
                keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:62:9a:6f:69:c9:2c:f2:b9:6c:0b:33:fe:b8:f6:22:b1:e4:
         5d:6b:62:4a:c9:de:f7:21:bd:de:50:56:08:88:32:e1:63:85:
         89:68:31:32:15:7b:35:0c:05:78:d5:02:07:be:86:cc:b8:9c:
         8c:9c:77:01:09:55:ad:7d:27:f1:52:2c:ff:58:49:3f:e4:37:
         aa:82:f7:a2:f9:be:c9:f1:c3:9e:27:b1:e1:0f:e8:ee:98:86:
         41:17:b9:cb:ce:28:4a:9c:fe:43:b2:e4:78:08:24:85:1b:4b:
         8e:54:c6:57:22:a2:02:a0:e8:4b:f7:c8:d0:6e:f7:b7:3a:7c:
         72:9e:5e:a1:bd:f4:66:69:36:fa:b8:4b:e6:c1:c2:5c:44:38:
         5f:79:0e:99:65:cc:41:ec:3b:6c:82:d2:ff:ee:f6:e2:a2:f1:
         df:9b:22:94:15:c2:27:b7:da:68:9b:bf:17:c4:84:3b:97:68:
         ad:22:65:2d:43:72:01:4a:8e:6b:68:3c:29:5c:d9:b3:bc:ed:
         8f:3b:ed:12:11:a1:c9:a3:c0:aa:79:9f:96:62:4a:7a:99:de:
         08:85:e2:0e:17:f5:59:85:76:a5:41:aa:9e:49:8c:20:36:dc:
         dc:aa:55:ee:5b:d2:44:3e:82:77:72:40:bc:53:6b:e4:4e:ff:
         d0:5f:21:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:30:19 2024 by rpki-client on console-fra.rpki-client.org