Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File:                     KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier:          fzT6bqVbgBNBrSMSaOKEZPE9cJn9Hz8oXTeIlfImIlo=
Subject key identifier:   65:44:A6:B4:8E:B1:7F:6B:84:FD:9D:A4:4A:E0:93:C2:2D:AE:0B:0B
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer:       /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial:       018F87B61AA867C5CABA159CBDA1E56F67FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number:          0EAC
Signing time:             Fri 17 May 2024 18:00:09 +0000
Manifest this update:     Fri 17 May 2024 18:00:09 +0000
Manifest next update:     Sat 18 May 2024 18:00:09 +0000
Files and hashes:         1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: /QUeDoCjogcfwW9MT8fV2vQAwUmXW6QJMIRK6+dHfEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:1a:a8:67:c5:ca:ba:15:9c:bd:a1:e5:6f:67:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
        Validity
            Not Before: May 17 18:00:09 2024 GMT
            Not After : May 18 18:00:09 2024 GMT
        Subject: CN=6544a6b48eb17f6b84fd9da44ae093c22dae0b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:6b:d2:a9:e4:a0:92:3e:26:1e:7b:71:2b:
                    5d:42:a0:49:de:74:0c:98:aa:c6:72:56:ea:85:a7:
                    73:fd:35:e8:b8:03:ca:a4:f8:e2:a8:27:36:9f:8d:
                    8e:44:1d:00:63:56:c7:f6:d4:ad:57:7f:bd:38:93:
                    ff:82:ac:03:34:02:6d:fd:a1:ba:c1:dc:72:8e:1e:
                    7c:af:65:dd:ff:4b:66:e8:e7:4d:19:53:1d:8b:5a:
                    b4:e7:90:90:f8:99:31:9a:cd:13:e7:19:c8:ce:da:
                    f7:2d:1d:a2:92:ee:6b:78:95:a0:c5:85:81:a4:cc:
                    81:cc:6f:5e:1e:30:0e:3d:a4:8c:a2:ef:52:7e:78:
                    03:ca:5b:60:ed:04:e9:b4:82:58:95:0b:0a:0c:b6:
                    0a:30:12:12:24:04:73:83:f1:c0:ad:6e:80:01:9c:
                    8d:36:1d:57:6c:87:2b:8e:5c:b8:b1:40:0b:19:55:
                    f1:3f:61:8a:fa:25:ec:06:c5:52:e1:1b:bd:63:99:
                    e9:0b:fd:0d:a5:f8:69:b5:d5:9b:98:ed:df:81:a2:
                    89:33:03:7f:ac:53:56:06:aa:8e:cb:17:29:4d:b7:
                    96:53:7a:52:d4:32:ac:93:95:66:45:80:38:14:50:
                    f0:72:7a:86:ac:8c:28:5f:ba:14:5a:c3:d6:f0:94:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:A6:B4:8E:B1:7F:6B:84:FD:9D:A4:4A:E0:93:C2:2D:AE:0B:0B
            X509v3 Authority Key Identifier:
                keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:bd:80:8a:eb:d8:40:5d:9f:8e:1f:f3:b8:50:88:b7:eb:09:
         4e:e5:ee:85:2e:83:20:b0:02:9f:ab:ff:b2:72:bd:54:af:9d:
         19:af:93:94:51:9a:b3:ae:f9:a0:3c:71:15:20:71:a8:76:bd:
         67:5a:13:86:e5:42:57:3f:e0:b2:d6:bf:8c:c9:2c:b0:0b:fd:
         a1:be:db:2d:2f:36:79:aa:d4:77:b1:62:a1:e4:e0:8b:11:1d:
         05:e3:e0:da:f2:76:c2:32:12:93:ad:15:8a:78:3a:9a:7d:3a:
         04:ce:a7:f5:07:f6:9a:b2:76:fc:31:0c:99:24:dc:65:38:5b:
         0b:59:34:8e:9f:62:dd:6f:df:56:19:79:ad:e5:ff:94:77:e0:
         bb:f5:d0:67:61:5a:b2:50:2a:c3:a5:42:20:36:2d:06:99:66:
         77:7f:67:fb:59:33:9f:88:72:b2:21:84:aa:c8:43:36:50:07:
         a0:9f:80:ac:79:9d:db:de:03:42:f1:50:49:01:7c:2b:f4:06:
         ad:07:00:ca:04:78:b4:2c:27:8c:75:5b:c1:1d:4c:f8:95:12:
         ea:76:78:f9:df:15:71:bd:34:60:b5:6c:f2:ac:6d:10:bb:91:
         0a:85:0d:e7:7d:04:e8:4b:73:ca:88:36:48:51:1d:6c:f3:73:
         1a:04:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:22 2024 by rpki-client on console-fra.rpki-client.org