Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.mft
File:                     ixKTXKQem95_LaybfEaTYxPVUUQ.mft (raw, json)
Hash identifier:          RujUcYPX9lYZml5IsbqmUmSS2J+DNY9ucdflKZrZYRY=
Subject key identifier:   90:EF:26:95:43:4C:6B:A4:CD:37:28:9E:16:D9:06:3C:31:FB:D7:40
Authority key identifier: 8B:12:93:5C:A4:1E:9B:DE:7F:2D:AC:9B:7C:46:93:63:13:D5:51:44
Certificate issuer:       /CN=8b12935ca41e9bde7f2dac9b7c46936313d55144
Certificate serial:       018F8823F6D4E8500BE96B1C7A1CA3C72E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixKTXKQem95_LaybfEaTYxPVUUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.mft
Manifest number:          0652
Signing time:             Fri 17 May 2024 20:00:09 +0000
Manifest this update:     Fri 17 May 2024 20:00:09 +0000
Manifest next update:     Sat 18 May 2024 20:00:09 +0000
Files and hashes:         1: ixKTXKQem95_LaybfEaTYxPVUUQ.crl (hash: P6MjPIQif3Q6o4TPvArpDh47xMFRJD9cxOUViImTnaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixKTXKQem95_LaybfEaTYxPVUUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f6:d4:e8:50:0b:e9:6b:1c:7a:1c:a3:c7:2e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b12935ca41e9bde7f2dac9b7c46936313d55144
        Validity
            Not Before: May 17 20:00:09 2024 GMT
            Not After : May 18 20:00:09 2024 GMT
        Subject: CN=90ef2695434c6ba4cd37289e16d9063c31fbd740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:14:a4:5b:bb:f5:d8:df:c2:0f:71:e3:54:
                    f6:be:bc:38:24:9c:4c:34:23:d8:d1:5a:df:c1:52:
                    a3:24:22:9a:48:f1:60:54:2f:64:2f:4c:45:0b:08:
                    53:04:e0:1c:4f:e6:62:cf:8b:8b:2c:ac:0a:3f:1d:
                    2a:b7:43:17:b7:96:fe:dd:26:3b:53:09:45:7c:f4:
                    49:22:e8:4f:31:13:8a:d6:55:88:95:4a:d4:27:df:
                    9b:f4:11:f2:29:6f:a1:f9:fc:b9:df:29:4e:83:e2:
                    20:14:da:ab:7f:f8:07:dc:5f:32:61:5e:6a:d9:70:
                    d7:9c:09:48:31:de:7a:e3:84:69:a6:c6:98:8c:e1:
                    12:65:5c:96:ce:db:ac:6c:ac:a6:6c:90:ff:87:5c:
                    14:fd:66:10:e9:c0:fe:c5:84:c6:ba:fe:32:a6:32:
                    1d:66:d2:be:d1:30:f4:06:6b:fd:d1:22:22:8d:0d:
                    5e:d8:2d:3c:ba:f3:0c:20:87:49:98:aa:cc:c2:e4:
                    1e:e0:35:ba:7a:84:0f:fd:29:de:d7:ae:83:0b:3b:
                    3a:1a:2d:98:48:67:12:36:a8:7b:ca:50:f8:4a:39:
                    7d:eb:6a:2b:0f:12:a5:0d:c8:aa:34:93:22:74:8f:
                    57:ae:53:22:78:16:b7:b8:1a:cf:ac:b8:3c:68:9c:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EF:26:95:43:4C:6B:A4:CD:37:28:9E:16:D9:06:3C:31:FB:D7:40
            X509v3 Authority Key Identifier:
                keyid:8B:12:93:5C:A4:1E:9B:DE:7F:2D:AC:9B:7C:46:93:63:13:D5:51:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixKTXKQem95_LaybfEaTYxPVUUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:14:31:f0:55:3f:3b:12:e1:6a:78:ac:ac:6f:ee:cc:40:50:
         1a:45:bf:9f:84:f9:a4:92:32:97:99:55:c0:d8:ec:96:4e:21:
         15:16:c4:b3:b8:17:70:b4:27:37:8a:5e:bd:51:6f:d9:fd:dd:
         0b:94:cf:19:5b:75:7b:cc:bf:62:d0:d2:0f:37:fb:e4:30:63:
         fa:a6:91:3b:eb:d6:1c:2f:25:89:9b:b6:2b:64:1a:c7:e6:8d:
         81:c1:1a:a9:cc:29:05:b9:9d:ae:a8:f3:f0:5b:25:e1:54:c7:
         27:31:0e:c2:cc:97:aa:38:c5:e9:fa:a0:a4:1a:dd:3d:66:38:
         5d:d7:0d:80:45:4d:96:74:5b:8b:53:1c:27:02:99:87:5d:bf:
         86:79:e3:16:7e:db:0a:b8:74:aa:64:f1:df:b0:0d:24:09:08:
         dc:99:8b:8b:5a:22:25:3f:66:c2:67:63:48:56:56:50:15:57:
         b6:df:dc:b8:55:fb:07:96:28:02:ec:5e:e0:2b:e3:08:98:f8:
         87:02:93:37:94:1a:d5:3a:18:fc:80:7e:f0:b3:0d:2a:47:d1:
         5d:6c:2d:b4:03:87:9a:e6:8b:53:42:68:a9:2e:06:b3:0f:3e:
         de:2b:9a:dd:36:80:e3:6b:94:45:9b:1b:8b:f1:eb:ca:3b:f3:
         d9:1a:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:40:54 2024 by rpki-client on console-fra.rpki-client.org