Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File:                     KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier:          2I33sGtZxxXo600xZ5pZAQla6170QkQILkuKsXM8cts=
Subject key identifier:   C7:A0:FB:F2:4F:41:B8:99:9E:C7:16:66:0E:9E:CA:E7:AA:A3:81:1C
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer:       /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial:       018F87B60E72621F5128263DBBE471558B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number:          03BE
Signing time:             Fri 17 May 2024 18:00:06 +0000
Manifest this update:     Fri 17 May 2024 18:00:06 +0000
Manifest next update:     Sat 18 May 2024 18:00:06 +0000
Files and hashes:         1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: q6DIkqX6Bz/xt5FCgOZ8I4Fxm80TLDPZQlfB9RuQE/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:0e:72:62:1f:51:28:26:3d:bb:e4:71:55:8b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
        Validity
            Not Before: May 17 18:00:06 2024 GMT
            Not After : May 18 18:00:06 2024 GMT
        Subject: CN=c7a0fbf24f41b8999ec716660e9ecae7aaa3811c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:7b:a6:da:da:15:de:96:8e:76:d4:97:89:
                    d9:56:5a:38:5a:4c:db:0c:c6:84:92:25:3d:fc:36:
                    85:1f:00:ea:f8:7a:bb:ab:83:f9:51:9b:2d:92:12:
                    8c:b1:61:c4:cd:e3:2f:09:19:59:dc:f6:e4:fa:66:
                    ca:17:17:66:b7:0d:b6:70:4b:4b:13:c1:65:6e:50:
                    eb:33:d2:f2:2e:41:07:d4:fe:79:0a:61:03:d4:cb:
                    37:1f:7d:07:08:bc:f4:8e:ef:01:8d:ea:7e:d5:d7:
                    11:89:30:8e:c1:ce:bf:f6:38:18:a3:15:5e:d9:41:
                    e4:4d:34:0e:12:f6:72:79:0f:f2:8c:f7:1f:d0:7b:
                    61:da:1f:87:7f:86:c7:c4:b3:40:09:0f:59:a5:d8:
                    a9:37:3a:e2:08:79:d7:ae:64:54:b4:a4:e4:5b:86:
                    3d:3e:5a:87:57:7b:9c:25:ce:25:eb:62:b3:72:6f:
                    bd:4d:f3:82:f1:52:fd:38:6d:e8:45:d1:92:db:5d:
                    44:77:ae:89:ea:ce:f7:61:ec:3a:58:55:03:c0:51:
                    63:ee:57:fe:86:d7:c8:7a:3e:b9:16:8e:73:1e:d4:
                    85:92:ed:7f:3e:66:06:de:40:49:fa:c3:83:c0:9e:
                    bf:91:ec:f3:b8:4e:c7:cb:f2:c3:64:70:b3:e6:53:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:FB:F2:4F:41:B8:99:9E:C7:16:66:0E:9E:CA:E7:AA:A3:81:1C
            X509v3 Authority Key Identifier:
                keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:e7:03:0b:3d:32:41:7b:59:fd:34:5d:ac:ce:a6:a8:fb:
         ab:b4:c5:ed:ec:d3:82:09:d9:0c:d0:1b:c1:c3:5d:35:d5:ee:
         b9:0d:9f:4b:61:72:0d:c9:40:0c:d0:a6:0f:83:d3:5e:25:37:
         1b:43:ca:e3:52:ac:5f:74:ee:a5:ac:f3:40:5a:b2:ea:cd:e3:
         d4:ba:2d:9b:5f:53:b7:28:20:fd:a4:fc:b0:bd:28:f9:6c:37:
         6f:29:14:6e:eb:e0:c6:cd:35:9d:76:8b:42:be:e7:bd:b2:30:
         8d:8b:de:f1:29:18:79:db:fe:22:e2:20:ad:84:d7:4f:d1:8a:
         37:c3:c6:c1:5c:7a:92:c3:81:58:5d:03:45:0b:3d:74:34:be:
         8e:4c:0e:c2:52:ef:21:75:d5:c0:ff:84:64:32:af:22:7d:7a:
         b6:e7:89:18:cb:5f:14:90:a7:b2:0f:77:15:47:db:ba:9d:56:
         54:0f:b2:4a:60:1f:9b:2f:40:fd:5e:d4:70:40:ce:4c:f9:19:
         77:73:4b:5f:a3:aa:27:37:a9:97:81:00:aa:d6:21:01:cc:71:
         24:a9:1a:ce:4b:95:42:e3:83:a4:13:be:e2:80:6e:99:a7:f9:
         5b:14:68:33:2a:e8:f8:69:44:c1:c1:a9:00:14:d8:e6:b8:94:
         2b:88:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:30 2024 by rpki-client on console-fra.rpki-client.org