Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File:                     kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier:          TJf/Dcv8MYs9lfJVghGyRxCv9wm2F8gY4Ud5HFT0wPU=
Subject key identifier:   2D:9D:1B:56:E5:23:48:A0:B2:30:42:BE:8A:BA:6B:6D:CB:28:EB:84
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer:       /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial:       019356F7325C79945BC47D38488E253B02D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number:          039B
Signing time:             Sat 23 Nov 2024 03:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:01 +0000
Files and hashes:         1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: m7vgpdnmG8GvC3Ku7khzdXG+jxoi/tlH9wmiIy9uePQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:32:5c:79:94:5b:c4:7d:38:48:8e:25:3b:02:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
        Validity
            Not Before: Nov 23 03:01:01 2024 GMT
            Not After : Nov 24 03:01:01 2024 GMT
        Subject: CN=2d9d1b56e52348a0b23042be8aba6b6dcb28eb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:4b:aa:7f:2c:e4:26:0b:b0:fb:99:51:0e:
                    67:18:5c:e6:55:c1:27:6e:00:20:93:7a:c9:ff:91:
                    a0:b5:28:ee:a2:d0:c1:59:76:d7:7f:36:7f:94:8d:
                    ff:1f:b0:ac:23:5e:2a:8d:32:0e:f1:7b:0c:c5:07:
                    32:58:c4:92:99:a6:2a:58:c7:62:05:f3:1c:85:69:
                    98:9d:d3:b8:95:4f:be:27:c7:c5:61:d3:27:7d:a5:
                    0d:9b:bd:87:6a:c8:13:79:a7:3e:38:f9:17:7a:6f:
                    fe:b0:44:e9:c1:c0:b0:db:cd:cb:8f:20:0d:e1:b9:
                    e3:03:c6:45:b0:70:3d:32:05:25:a3:15:66:56:69:
                    c5:2b:fe:e5:b4:8e:89:0d:28:df:6c:1d:7f:fc:c3:
                    88:a0:d3:ec:61:0f:89:b3:ed:f8:8d:35:9e:55:03:
                    17:9d:d4:bd:99:31:ad:3d:db:ec:6e:a5:a5:fc:e7:
                    b0:9e:f7:36:99:b0:05:21:96:21:dc:43:6a:b4:1d:
                    5c:75:49:30:4a:a2:3a:9e:8a:f2:4f:db:dd:72:a8:
                    46:d1:8b:2c:66:ff:59:35:51:98:12:63:7a:17:f8:
                    af:d1:5a:84:ff:e8:d9:2f:57:14:82:98:4d:52:2d:
                    0f:53:e3:81:72:8d:f8:7d:3c:d8:b4:25:51:63:14:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9D:1B:56:E5:23:48:A0:B2:30:42:BE:8A:BA:6B:6D:CB:28:EB:84
            X509v3 Authority Key Identifier:
                keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:20:fb:09:71:5a:c6:ff:29:9f:2a:37:c0:69:5d:9a:23:
         f7:a4:03:b5:31:b7:87:48:cf:f4:a3:41:d2:d1:79:6e:0b:4b:
         be:1b:2b:d3:38:4d:33:69:4a:89:f1:2b:eb:b8:52:13:c3:6f:
         90:7f:a3:a4:ec:88:9b:46:71:c4:96:96:b6:69:9e:8c:50:05:
         39:a0:39:58:6d:3c:52:01:4f:15:c0:e6:44:d9:02:50:77:f6:
         7e:9c:a8:d2:ca:11:a1:c4:b1:58:95:e4:7c:74:19:3a:82:65:
         f1:6f:dd:73:7f:8a:15:c4:77:29:55:63:05:96:b4:81:2b:4b:
         df:c8:b7:84:5b:08:1e:23:68:3f:ca:e5:b7:86:b5:be:86:88:
         18:0b:33:09:9f:88:03:4e:5f:44:eb:a7:23:8c:41:d4:43:aa:
         68:eb:aa:93:c8:b0:10:55:c9:38:f5:b4:2f:69:c8:4a:42:73:
         4a:38:c8:7b:c8:30:28:c8:e8:04:40:3d:a0:34:3f:f0:46:d5:
         7e:3e:e3:af:87:12:2f:23:b5:60:94:90:d3:af:b1:84:0e:29:
         8e:95:e8:1e:1e:83:9e:17:c8:f9:c0:2f:ea:49:11:fa:70:e5:
         ad:84:ff:0c:b7:89:d3:48:c6:0b:54:db:a0:22:e6:8b:3e:ee:
         43:82:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:51 2024 by rpki-client on console-ams.rpki-client.org