Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File:                     Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier:          Zh9sByO/wzkxWL8walNYX8rFhOTmpPHB6xBBoXBeDhA=
Subject key identifier:   BC:5E:65:95:D8:78:0B:89:63:17:03:FC:B9:87:6E:2E:C4:06:94:74
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer:       /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial:       018F96BBDA4CED1DD086731BE264EF1D9238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number:          0164
Signing time:             Mon 20 May 2024 16:00:44 +0000
Manifest this update:     Mon 20 May 2024 16:00:44 +0000
Manifest next update:     Tue 21 May 2024 16:00:44 +0000
Files and hashes:         1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: qoWc394tzRVyayt4V4Oz1bd5icOF3gBrZz9GiQCDQZc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bb:da:4c:ed:1d:d0:86:73:1b:e2:64:ef:1d:92:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
        Validity
            Not Before: May 20 16:00:44 2024 GMT
            Not After : May 21 16:00:44 2024 GMT
        Subject: CN=bc5e6595d8780b89631703fcb9876e2ec4069474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:95:cd:b8:36:e3:58:47:2f:4e:e6:68:8f:05:
                    c1:74:c7:b3:0a:89:44:31:be:e3:1d:8e:ef:9d:22:
                    51:4e:c5:c7:58:c7:ae:12:21:cc:8f:77:95:e1:fb:
                    99:af:24:f1:cc:2a:df:c9:c9:1f:00:c9:19:5c:83:
                    4f:88:64:58:63:48:c3:5b:7e:9b:80:c3:ae:77:31:
                    c0:ac:94:a7:69:87:46:88:b7:07:28:5d:c7:7a:dc:
                    11:de:cc:7d:ab:d4:78:fe:98:8a:3f:7c:4d:af:b7:
                    82:1e:03:89:98:de:80:c7:03:65:61:97:c2:32:36:
                    b0:1c:fd:98:7b:74:02:63:56:d0:1a:03:32:9f:99:
                    56:ab:d8:a6:0b:7f:76:5c:11:b1:7c:e7:cc:94:cd:
                    37:a5:82:e8:e0:3f:0c:e9:ea:85:3a:ac:ed:cf:4c:
                    ef:69:2d:80:93:18:e3:53:d5:b8:23:01:ea:e0:50:
                    2a:8b:ec:05:ad:d3:b3:8c:64:87:0d:09:56:4c:13:
                    a4:d8:58:01:5f:fc:41:2b:c3:f8:d7:dc:36:99:31:
                    6b:81:39:ba:c9:d2:3f:2b:66:03:bd:05:94:93:93:
                    c6:6a:48:1d:ff:0f:c5:d8:0e:6d:f5:6c:cb:82:98:
                    c9:88:26:02:91:12:05:6d:56:96:84:f5:54:9f:c5:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5E:65:95:D8:78:0B:89:63:17:03:FC:B9:87:6E:2E:C4:06:94:74
            X509v3 Authority Key Identifier:
                keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:2c:12:ff:bf:71:8b:98:a8:65:8a:ff:10:bd:1c:79:f8:
         50:51:c0:37:20:62:fb:15:46:b7:97:6b:5d:a1:f9:a3:1e:36:
         ac:c5:64:eb:d7:e4:72:5a:fe:86:3f:d2:a4:03:24:e5:df:24:
         9f:f5:21:bf:4b:be:7f:5e:d7:21:11:75:71:fe:d7:d5:d9:de:
         53:f3:c8:9d:8e:07:c3:cf:01:e7:2d:a6:73:25:51:89:11:06:
         a2:e8:d9:f3:35:52:9d:1e:c8:42:e9:28:d0:a8:e4:68:9e:86:
         79:e1:4c:f4:aa:8d:4e:d9:9d:2e:30:58:d7:9f:16:46:d5:8c:
         d2:bf:1f:9c:70:f5:e6:9f:24:ef:90:74:1c:5f:c3:09:76:66:
         d3:03:64:ab:e6:96:09:4d:8f:0f:4f:d1:53:9a:e8:8e:83:c5:
         71:b9:c9:07:83:c4:6a:0d:6e:93:f9:37:06:34:3f:56:9c:a1:
         a9:8c:a9:a5:71:e5:4b:18:51:ba:85:f2:60:40:c1:66:a3:60:
         d5:90:b3:8e:00:1d:62:4f:d5:a9:44:7c:8e:4e:fe:67:6e:31:
         85:70:b9:10:b6:dd:6c:b3:cf:d5:5c:d5:7a:e5:b6:74:74:fc:
         d1:dc:fe:d2:54:d4:9f:2d:82:a4:f3:19:4c:a1:29:58:b0:25:
         ac:61:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:18:55 2024 by rpki-client on console-fra.rpki-client.org