Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File:                     KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier:          tzWiThPzsHncF0WxdrQmMmTCobW//PMrq2KvW8kYGsg=
Subject key identifier:   2E:CC:0E:52:D8:EF:8D:D1:C2:78:EB:46:EE:20:10:83:FE:FB:8A:34
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer:       /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial:       018F87489C42717137C43C8B2C3AFDCAF1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number:          0B70
Signing time:             Fri 17 May 2024 16:00:33 +0000
Manifest this update:     Fri 17 May 2024 16:00:33 +0000
Manifest next update:     Sat 18 May 2024 16:00:33 +0000
Files and hashes:         1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: lY/fA/+J+6lOcDWLV5p53VO73MJjKyGV97942rXe3qQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9c:42:71:71:37:c4:3c:8b:2c:3a:fd:ca:f1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
        Validity
            Not Before: May 17 16:00:33 2024 GMT
            Not After : May 18 16:00:33 2024 GMT
        Subject: CN=2ecc0e52d8ef8dd1c278eb46ee201083fefb8a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:88:4d:19:a0:89:cc:1b:f2:43:54:a8:40:
                    7a:3c:c5:d8:47:e0:27:60:17:57:4e:27:0c:d5:60:
                    f2:f3:e8:a7:b2:ae:eb:48:38:b6:f4:2e:24:b8:4b:
                    21:39:d0:5e:42:e2:94:7f:5a:f5:74:f1:81:1f:c0:
                    5c:6f:08:71:a7:94:21:46:7e:9f:35:1c:91:f5:b6:
                    c0:0c:3f:48:a6:0a:28:60:94:aa:17:c5:cc:3d:4d:
                    27:79:bb:97:e4:31:e9:57:81:88:eb:87:48:b8:85:
                    52:fa:e8:1a:99:f2:39:22:a3:2e:8c:d8:d6:ff:7b:
                    f9:8e:ff:05:02:01:ba:56:b5:59:12:38:35:c0:82:
                    1e:5e:92:1a:6f:e8:60:0a:f9:34:9b:9e:57:d1:ae:
                    c9:9c:e9:e9:bd:0d:81:ad:4a:b3:e9:ae:93:41:bd:
                    b5:fd:d2:00:ce:15:3e:08:4c:6b:18:4a:83:c4:63:
                    ba:65:6f:da:5b:39:84:56:30:66:74:91:a8:38:10:
                    5b:2d:eb:bf:8a:a7:5c:b1:a0:8e:b1:16:db:c0:d5:
                    2d:a3:bd:76:51:2a:d4:d2:37:1e:36:05:26:bf:31:
                    09:58:d6:c0:20:98:63:6d:ba:41:69:2d:c1:cf:e1:
                    cd:e1:18:83:a3:55:06:18:57:2b:48:36:ed:db:9e:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CC:0E:52:D8:EF:8D:D1:C2:78:EB:46:EE:20:10:83:FE:FB:8A:34
            X509v3 Authority Key Identifier:
                keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b5:52:24:5f:9e:f4:30:8d:06:e0:db:e3:4b:d4:52:06:07:
         12:24:50:03:43:be:f1:8f:2d:45:27:d8:d8:60:fd:c9:c3:a4:
         b1:e9:5d:27:dc:54:a5:ee:4c:64:fa:06:7a:57:23:e7:1b:d4:
         49:f2:8b:5f:99:01:57:05:2b:f2:53:c4:dd:4a:9b:fc:cd:21:
         68:ba:ae:f9:2d:23:92:89:02:94:0b:b8:6d:75:3a:43:1f:8e:
         76:24:57:f0:77:5c:e9:af:c8:2e:15:f3:ff:80:08:90:be:0b:
         9a:66:a2:1a:c4:e0:e3:4d:33:fa:91:db:e0:b0:6d:69:13:dc:
         f3:40:a5:23:9d:f9:7c:f7:90:28:af:96:d9:a5:fb:d7:a2:93:
         47:b0:e6:2d:9c:ec:4f:c2:3d:6a:15:e4:a6:75:24:96:9b:43:
         3e:26:1c:a3:4d:4d:9f:74:68:28:e0:b5:57:bd:e8:6b:01:b7:
         50:a2:1a:09:cb:89:51:45:74:59:0c:e3:d5:e0:41:a6:c7:e0:
         41:36:f0:44:7d:9a:93:40:39:19:eb:bc:b9:d0:2f:3f:b1:a3:
         70:67:35:9b:c7:85:e7:82:cc:12:cc:a4:3c:19:b9:a1:7f:3d:
         83:54:14:90:ce:35:0b:02:48:7a:7e:26:d1:8f:5a:7d:3d:20:
         04:b7:32:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:12 2024 by rpki-client on console-fra.rpki-client.org