Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
File:                     kYaHyFQkQhcMxR71MW05Y2CXCNw.mft (raw, json)
Hash identifier:          WM59lF5LXSyD3zkYht+aHuq4cW1eNF1wYWNAUH5HX2U=
Subject key identifier:   AB:3C:A2:D2:A5:0A:78:70:AB:75:39:75:7F:75:43:8B:B2:94:F7:5A
Authority key identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
Certificate issuer:       /CN=918687c8542442170cc51ef5316d3963609708dc
Certificate serial:       018F874AF9167AD8AE9BF7A86F79B31ED614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
Manifest number:          0D84
Signing time:             Fri 17 May 2024 16:03:08 +0000
Manifest this update:     Fri 17 May 2024 16:03:08 +0000
Manifest next update:     Sat 18 May 2024 16:03:08 +0000
Files and hashes:         1: kYaHyFQkQhcMxR71MW05Y2CXCNw.crl (hash: mCUwEEHVXT9Df9TUenh/XYhPhDEVTqhQQ/VOEdz5Afg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f9:16:7a:d8:ae:9b:f7:a8:6f:79:b3:1e:d6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918687c8542442170cc51ef5316d3963609708dc
        Validity
            Not Before: May 17 16:03:08 2024 GMT
            Not After : May 18 16:03:08 2024 GMT
        Subject: CN=ab3ca2d2a50a7870ab7539757f75438bb294f75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:19:3a:95:33:a3:7f:d6:f6:84:d8:1e:c1:
                    2a:57:69:cf:7e:00:3b:82:12:44:20:53:0c:c8:43:
                    4f:a4:33:05:01:6d:68:a1:d1:0e:b5:25:60:a0:43:
                    51:c7:75:99:51:af:63:68:5c:85:f6:6c:3d:90:b8:
                    46:e7:0a:05:0e:9c:9d:02:69:4e:b2:a0:e7:18:86:
                    f2:aa:d2:60:bd:fe:c9:2e:62:0b:4e:5e:08:86:e6:
                    db:6f:bf:48:02:76:6c:9e:07:a6:61:53:70:21:1a:
                    8b:3b:15:14:f4:f6:05:30:ea:02:a8:7a:35:07:ff:
                    ad:99:dd:2e:38:b8:18:15:a6:36:52:ef:6a:46:62:
                    06:68:cb:4b:85:39:a4:5e:ee:63:65:4d:0f:ea:b8:
                    93:f3:3d:cc:65:d9:6d:c8:c4:be:c6:5a:63:0d:b1:
                    05:23:e0:66:20:b7:9b:bb:70:02:27:5c:d7:03:82:
                    54:b7:6b:d4:75:19:6d:7a:8d:83:d6:f9:76:2a:ab:
                    ed:28:d9:5f:ff:22:56:26:18:1a:0e:50:41:65:cc:
                    6e:3a:78:3d:3b:a9:cd:b6:ee:2e:55:7b:71:2f:bf:
                    35:5b:70:eb:8b:c4:57:b1:ae:2e:e6:3b:6a:60:b5:
                    50:57:05:78:a6:57:8e:c7:2a:d9:c1:2a:64:f7:ed:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:A2:D2:A5:0A:78:70:AB:75:39:75:7F:75:43:8B:B2:94:F7:5A
            X509v3 Authority Key Identifier:
                keyid:91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:25:4a:d7:35:6f:86:15:3f:c5:5a:25:61:e4:d8:a6:4c:
         e5:70:70:9f:61:de:b6:94:1b:45:71:e3:ff:e0:0a:31:ca:0b:
         95:31:15:46:86:b1:db:20:e4:e8:db:c1:79:94:92:5a:b5:73:
         d0:88:01:8c:e6:fb:6c:a3:20:6c:a8:0c:55:4f:d0:c1:57:c5:
         bf:7a:37:ee:9a:b7:ae:bf:99:9c:14:b8:47:db:4c:bb:26:65:
         cb:27:70:8c:ba:58:07:ba:79:69:ad:3a:82:99:f4:10:3f:e6:
         a1:db:b0:9f:ff:8d:39:83:d4:27:2e:f8:75:54:f4:0b:18:da:
         7b:fe:72:d4:5a:4a:16:4f:59:57:9d:b0:1f:c0:7a:b2:3a:86:
         c9:82:91:9d:d3:e7:66:bc:2e:c9:33:84:ef:6b:bf:23:d8:64:
         63:ae:22:aa:3d:2c:82:f2:28:29:dc:07:1a:ab:2d:b5:ac:6e:
         12:a0:16:47:00:4a:16:b4:92:70:8c:29:7c:df:b4:2c:57:fa:
         95:e2:e4:60:c5:f3:dc:35:54:fc:23:c2:05:99:1c:87:f9:56:
         3b:14:81:49:09:a4:a4:c7:ee:ba:58:73:b6:23:aa:7f:e0:a0:
         a2:55:14:63:f2:98:e9:13:91:b1:42:0a:57:97:2a:be:af:ce:
         32:d2:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:11 2024 by rpki-client on console-fra.rpki-client.org