Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File:                     KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier:          Ohu15XAdhSb83yKDybUG36XRnTKzBsr91ead9H6sEDI=
Subject key identifier:   3C:20:3D:10:07:21:43:D7:FB:5B:C0:F9:11:60:BC:BF:B7:C6:E8:41
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer:       /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial:       018F885B698F9995AB77491A94125B759B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:43 +0000
Manifest this update:     Fri 17 May 2024 21:00:43 +0000
Manifest next update:     Sat 18 May 2024 21:00:43 +0000
Files and hashes:         1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: DnMo5+san8mkzM0EB1bZYePtYrZT77BvowBkOXgaawQ=)
                          2: hUMhaoiVG-zSA51X1uyBi2GeE-Q.roa (hash: I/ihK9B7XDTUZkdCTbm8zLpmpjYodyXqkgd21HJv/88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:69:8f:99:95:ab:77:49:1a:94:12:5b:75:9b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
        Validity
            Not Before: May 17 21:00:43 2024 GMT
            Not After : May 18 21:00:43 2024 GMT
        Subject: CN=3c203d10072143d7fb5bc0f91160bcbfb7c6e841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f8:43:b0:e6:15:3c:82:df:6c:0e:3a:51:0b:
                    d0:1b:5e:bf:19:59:d5:16:ac:57:3c:ae:63:b9:08:
                    fe:8d:8e:7e:b3:f7:14:44:a0:87:0d:0e:3c:b0:5e:
                    89:45:0c:42:cf:15:26:db:71:ed:e6:c7:29:ed:9f:
                    15:e6:7a:24:df:62:2f:94:0e:91:33:eb:66:10:9d:
                    c7:dc:fe:19:97:56:8e:27:5f:03:49:fc:5b:ee:67:
                    02:87:10:96:91:52:b2:f8:a4:51:78:cd:1f:55:96:
                    99:d0:56:90:b3:16:2c:84:11:38:60:8c:a3:93:ee:
                    e0:65:04:06:a9:52:35:33:45:85:92:40:2b:12:ad:
                    ef:7c:69:b8:e3:07:ab:f6:9c:d2:56:36:da:89:98:
                    19:23:46:39:86:b4:5f:31:3d:64:f4:cc:78:ad:af:
                    7b:09:2d:5b:c4:20:db:ac:e5:91:45:9f:96:11:de:
                    36:1a:5d:78:c0:ea:c5:57:62:40:f8:fc:15:2a:bc:
                    6c:84:ef:31:b4:14:c3:6e:d2:f5:20:99:37:63:cd:
                    94:c0:e7:4c:ad:5d:53:91:8e:b8:2b:cc:03:8b:d0:
                    e0:23:7e:02:bb:34:81:83:38:11:e4:a9:4f:06:74:
                    83:43:3e:6a:ac:13:5e:cb:5b:64:e7:79:00:bc:15:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:20:3D:10:07:21:43:D7:FB:5B:C0:F9:11:60:BC:BF:B7:C6:E8:41
            X509v3 Authority Key Identifier:
                keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:37:95:15:c9:bc:44:0a:dc:5d:0a:e5:5f:a4:1e:7d:fd:0b:
         49:d2:17:b0:55:15:ad:f7:b1:0f:b5:4b:f5:35:a7:06:1b:9a:
         3f:38:27:2e:58:7d:eb:67:81:27:35:13:36:67:ce:27:d5:fb:
         11:ad:9f:87:94:c7:f8:99:0d:6c:f7:13:dc:26:ec:c3:f6:e7:
         84:3a:52:cc:bd:9a:67:7a:3f:51:cf:b2:d7:12:bc:5f:09:a1:
         44:c7:53:14:4e:22:c3:0e:48:df:61:80:ab:db:90:ce:7c:99:
         0b:03:3d:f1:8d:84:a2:0f:5b:65:01:c8:82:59:2e:7a:99:10:
         d0:50:cb:76:73:cf:62:ef:98:19:23:c3:b6:9a:2f:01:69:95:
         0a:de:c9:b8:91:bc:24:1c:8b:85:e8:02:04:04:e7:86:f2:a5:
         e1:2d:91:ed:53:60:3e:13:e9:85:59:27:6c:e8:03:44:5e:b8:
         de:c0:01:f8:3f:2c:9f:4d:62:53:74:32:07:3f:d1:52:06:b1:
         d8:e3:2f:d4:ef:bb:83:50:35:06:11:99:71:c1:fb:6a:46:d7:
         38:8b:29:80:28:db:8a:64:7e:a5:93:61:1a:c3:28:64:db:10:
         22:33:d1:15:01:59:84:d5:a4:d2:33:5c:7a:8f:1d:18:91:55:
         5d:09:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:16 2024 by rpki-client on console-fra.rpki-client.org