Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
File:                     KrmiSem1jILhRV6yM5RVsDHn3d8.mft (raw, json)
Hash identifier:          hGL3KtC0JiihN/LQwqIMYIskqTtEpKvY9H4mncaE05w=
Subject key identifier:   E5:9B:9F:E1:E7:C8:94:60:7C:5A:C9:15:73:9C:71:41:58:28:A6:B0
Authority key identifier: 2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF
Certificate issuer:       /CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf
Certificate serial:       018F87B693103D42DB7EC26EFC89C85D214F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:40 +0000
Manifest this update:     Fri 17 May 2024 18:00:40 +0000
Manifest next update:     Sat 18 May 2024 18:00:40 +0000
Files and hashes:         1: KrmiSem1jILhRV6yM5RVsDHn3d8.crl (hash: hgqyDixig0+iU1Ujb1IdqK0IIRtcKIAKqaf+6M8w8Cs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:93:10:3d:42:db:7e:c2:6e:fc:89:c8:5d:21:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf
        Validity
            Not Before: May 17 18:00:40 2024 GMT
            Not After : May 18 18:00:40 2024 GMT
        Subject: CN=e59b9fe1e7c894607c5ac915739c71415828a6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:3f:da:5f:c3:28:d2:4c:6a:ba:fd:ab:ad:
                    be:c9:41:54:7c:31:67:43:b6:e2:22:2e:ea:f4:87:
                    b2:d1:38:76:5e:be:a4:f2:e5:e3:ca:00:d0:1e:20:
                    7b:dd:13:5e:00:4e:3a:c3:a9:3e:a6:db:3a:25:e7:
                    3e:01:9e:ac:ed:84:42:6e:90:51:14:c1:af:48:46:
                    c7:d8:0e:70:90:f1:46:12:88:a7:d8:fd:84:0e:2f:
                    53:ce:55:b6:80:38:9f:36:7c:4e:61:0f:55:9d:80:
                    26:69:d9:39:70:ba:79:38:c2:bc:59:d8:b0:5c:05:
                    00:76:62:7f:b4:8d:30:3f:f2:40:26:02:61:84:34:
                    be:c9:3d:d9:4a:5c:55:35:9e:39:11:a4:c9:50:73:
                    53:de:01:fd:c5:b1:e4:e8:4a:7a:82:f1:ac:4d:d3:
                    ec:cf:ca:73:26:06:6b:27:f6:bb:e4:8d:d4:e0:bd:
                    29:ee:11:0c:ab:17:13:9b:13:99:e7:fc:5c:3f:70:
                    bc:4c:04:8a:67:50:f7:66:1e:8d:1b:d4:54:80:13:
                    21:bb:7a:ab:c0:8b:d7:a8:08:ce:32:67:a0:a2:c2:
                    ff:f5:30:88:d3:de:d1:5c:21:e0:b9:72:67:90:ee:
                    f2:78:04:41:e4:fe:21:fb:64:43:d2:71:af:0c:1d:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:9F:E1:E7:C8:94:60:7C:5A:C9:15:73:9C:71:41:58:28:A6:B0
            X509v3 Authority Key Identifier:
                keyid:2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:82:55:e0:1e:cb:88:df:c2:ee:4b:5d:41:5c:d0:87:45:38:
         d1:f6:85:74:87:37:3b:6f:1d:b0:5e:c4:cd:a2:7a:33:a0:33:
         d9:e6:aa:91:66:99:1c:ab:17:d0:e0:e1:18:6b:73:16:3e:d3:
         f5:cb:6a:e6:7e:81:5e:31:b4:c5:b6:ab:57:c8:ec:27:fe:43:
         31:a2:e6:66:7b:9d:a9:a5:bf:01:c2:ea:1c:71:d2:51:7d:02:
         42:f4:52:ff:75:a7:f4:21:a9:4f:f4:2a:e5:03:4d:e0:e6:47:
         ef:eb:09:84:26:06:16:79:22:92:2e:96:e6:67:d1:e6:e5:ef:
         d8:57:8f:bf:e4:31:7f:a8:b4:fd:70:2b:3c:86:fe:de:6c:56:
         e7:17:06:da:25:68:2c:e3:69:4b:01:99:39:b0:c0:b7:68:a3:
         e5:2b:45:38:ec:7f:40:0c:75:f0:13:e7:e0:49:c7:20:8c:d6:
         10:a3:c7:b5:10:1d:2d:44:39:a5:36:c3:18:8c:21:a8:9b:fb:
         5d:11:fe:96:ab:13:fa:a6:12:25:25:26:6d:66:d4:e9:23:1f:
         39:0d:a0:03:76:dd:4d:ed:1a:62:82:08:49:12:76:24:70:49:
         8b:ff:d6:85:0b:58:83:71:52:fb:bc:f6:9f:87:a4:b0:f7:a3:
         65:e9:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:56 2024 by rpki-client on console-fra.rpki-client.org