Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/KSqipVOMsrm-yF0LDi86CEp2KqU.mft
File:                     KSqipVOMsrm-yF0LDi86CEp2KqU.mft (raw, json)
Hash identifier:          R3/3wiKvkoJuwnyAV5GmAJONcBGOvYVq+rSkhSDJMto=
Subject key identifier:   BC:D3:72:FE:0C:4F:D1:E6:0E:9D:E8:DF:8D:F5:BA:0D:FA:0A:90:EC
Authority key identifier: 29:2A:A2:A5:53:8C:B2:B9:BE:C8:5D:0B:0E:2F:3A:08:4A:76:2A:A5
Certificate issuer:       /CN=292aa2a5538cb2b9bec85d0b0e2f3a084a762aa5
Certificate serial:       018F86A3A8B088D5EA840D669033613A5855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KSqipVOMsrm-yF0LDi86CEp2KqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/KSqipVOMsrm-yF0LDi86CEp2KqU.mft
Manifest number:          01E6
Signing time:             Fri 17 May 2024 13:00:23 +0000
Manifest this update:     Fri 17 May 2024 13:00:23 +0000
Manifest next update:     Sat 18 May 2024 13:00:23 +0000
Files and hashes:         1: KSqipVOMsrm-yF0LDi86CEp2KqU.crl (hash: pp2r60MsfxE8N36gvw95y0puUCwQ1OR34rDMshRnBxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/KSqipVOMsrm-yF0LDi86CEp2KqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/KSqipVOMsrm-yF0LDi86CEp2KqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KSqipVOMsrm-yF0LDi86CEp2KqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:a8:b0:88:d5:ea:84:0d:66:90:33:61:3a:58:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292aa2a5538cb2b9bec85d0b0e2f3a084a762aa5
        Validity
            Not Before: May 17 13:00:23 2024 GMT
            Not After : May 18 13:00:23 2024 GMT
        Subject: CN=bcd372fe0c4fd1e60e9de8df8df5ba0dfa0a90ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:5c:2f:a3:a5:6c:b4:41:31:45:4b:35:58:
                    21:b1:cb:45:55:bb:1b:35:51:3f:e7:3f:c2:e9:d8:
                    c0:0a:d6:89:e2:42:43:f2:63:85:24:57:ce:56:04:
                    a8:14:2a:28:6c:51:cf:da:0c:31:ae:cb:f9:e8:e2:
                    bc:5e:f4:fc:1c:02:46:28:57:c2:5c:44:78:40:c5:
                    7e:b8:ef:6c:fd:e1:89:56:6d:49:fd:bc:28:87:4c:
                    50:ad:4f:90:b5:81:11:22:71:e4:a4:13:ad:cb:af:
                    8f:1b:2e:51:f7:e8:56:27:9c:08:75:c7:90:93:af:
                    0b:29:73:b4:f7:47:07:be:60:de:c1:5c:6d:81:b6:
                    7d:b4:50:7a:66:65:85:bb:0c:30:62:19:8e:2f:32:
                    65:45:99:84:14:de:e9:91:c7:2d:58:00:e5:f2:74:
                    0b:cb:74:a8:f0:5c:c5:bc:86:7f:fa:dd:56:02:57:
                    f4:cd:71:0b:10:cd:54:86:3b:d7:bd:fc:a8:93:1b:
                    17:ea:80:36:f2:8b:1a:f6:9e:3b:b1:86:06:49:fc:
                    47:47:69:f4:b9:43:06:af:56:7e:50:36:c4:45:7e:
                    93:d7:a6:48:be:06:ea:21:c1:b4:e7:61:f6:5c:cd:
                    5f:2a:20:09:60:57:37:0c:ab:2f:c2:4e:df:7e:67:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D3:72:FE:0C:4F:D1:E6:0E:9D:E8:DF:8D:F5:BA:0D:FA:0A:90:EC
            X509v3 Authority Key Identifier:
                keyid:29:2A:A2:A5:53:8C:B2:B9:BE:C8:5D:0B:0E:2F:3A:08:4A:76:2A:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSqipVOMsrm-yF0LDi86CEp2KqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/KSqipVOMsrm-yF0LDi86CEp2KqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/KSqipVOMsrm-yF0LDi86CEp2KqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0c:0c:30:15:dd:24:d1:17:73:ec:80:92:22:7c:69:74:67:
         18:60:72:6e:ac:23:87:b3:ae:8f:11:70:60:02:fe:ab:62:c2:
         d1:9d:9e:d6:33:ad:e9:31:bd:53:2e:1f:bd:4f:ea:3f:32:cb:
         37:b6:27:66:22:7a:0b:15:da:ba:9b:3b:f1:34:a1:0d:49:fe:
         9f:a8:93:04:e1:fe:97:d3:1a:de:9e:40:46:a6:41:05:11:88:
         34:03:86:40:4b:49:41:c3:69:df:b2:0b:a3:01:00:c6:a0:3a:
         6e:e1:22:20:35:dd:52:2d:9c:e0:e5:70:7f:91:1e:cc:fc:4e:
         e9:1f:03:dd:9d:c1:f1:f9:7b:56:7a:ec:99:d6:53:7e:b7:88:
         de:04:34:39:ba:73:19:cd:15:1b:9b:00:34:4f:6e:a8:c4:80:
         0f:8e:53:3f:43:6f:a8:b3:0e:29:7e:d0:3a:c2:e9:ea:6f:6d:
         a4:a4:c5:af:81:77:6a:92:3b:d1:39:30:fe:b9:f3:6e:99:46:
         52:8f:a7:9c:10:5d:44:63:ef:db:6b:c8:0d:bf:b7:ac:48:48:
         26:b9:6c:79:10:b1:7e:97:5c:4e:dd:ed:8c:90:9e:db:48:1a:
         ed:e6:3f:ac:a0:a6:5b:0a:ae:d0:b8:62:21:0e:ea:f1:a6:28:
         92:b3:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:24:16 2024 by rpki-client on console-fra.rpki-client.org