Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File:                     KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier:          HbZhCA7JtwsE5f36GmW902YCbiWpeEA4H60OA88gvyc=
Subject key identifier:   BF:6A:84:A8:CE:86:D2:ED:C4:7E:18:5F:12:DB:A7:D6:9E:DF:96:83
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer:       /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial:       018F8749BC1B76ED251FEBE6EEFDBFFBC133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number:          0E54
Signing time:             Fri 17 May 2024 16:01:47 +0000
Manifest this update:     Fri 17 May 2024 16:01:47 +0000
Manifest next update:     Sat 18 May 2024 16:01:47 +0000
Files and hashes:         1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: uTMdzp2bjNj4F4Gnsd8eUeq0UIb1QTkNjBlal+cNI3k=)
                          2: sWflfyfMsdM2wmvGb2Qi3dbXW1w.roa (hash: tuCDQIaWE6AneyKNnjzd8cqpEPv8AKzSKZYpRcYEHZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:bc:1b:76:ed:25:1f:eb:e6:ee:fd:bf:fb:c1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
        Validity
            Not Before: May 17 16:01:47 2024 GMT
            Not After : May 18 16:01:47 2024 GMT
        Subject: CN=bf6a84a8ce86d2edc47e185f12dba7d69edf9683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:dc:bd:d7:aa:f7:4c:7a:63:c2:e1:a7:30:
                    3c:ec:b9:e3:64:84:89:67:4a:ee:98:f8:81:25:38:
                    93:68:2d:62:a8:21:55:bb:e5:13:1c:ab:c5:7b:00:
                    8d:36:de:05:89:96:43:74:12:88:7e:bd:ac:40:a1:
                    16:75:0b:61:1f:64:db:af:2d:85:ac:4f:99:73:92:
                    00:b3:9b:3d:95:79:50:4f:92:35:d2:2b:9d:bd:8b:
                    b9:4e:92:c6:5b:ab:02:c8:fc:94:fc:a6:54:e6:5e:
                    8d:ce:66:5b:8f:cc:ea:6d:8d:f9:5d:90:19:58:77:
                    ce:fa:2f:b8:e3:9e:6a:83:e8:a2:78:cb:fd:f5:78:
                    99:be:0c:5a:16:a5:3d:45:09:65:71:7c:0f:6f:64:
                    0e:22:3b:a4:db:eb:e0:03:6f:42:f4:54:76:b8:21:
                    10:e7:5f:26:17:79:b1:b2:cb:4d:c7:2c:67:c0:fa:
                    03:61:7a:87:f2:54:26:78:cf:4a:43:db:f9:ad:84:
                    99:1b:54:99:9f:dd:ec:0b:c5:cb:f5:73:4a:2b:af:
                    b6:ed:23:ac:ec:dd:cd:52:e6:fe:f9:ca:5b:32:85:
                    95:42:29:07:84:07:b8:6f:16:16:b5:92:94:09:09:
                    ca:6f:7e:59:00:72:54:f9:cd:3c:a7:18:a7:f2:fa:
                    4f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6A:84:A8:CE:86:D2:ED:C4:7E:18:5F:12:DB:A7:D6:9E:DF:96:83
            X509v3 Authority Key Identifier:
                keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:27:52:7e:1f:32:55:04:92:92:ef:ac:24:f8:7b:ff:27:9a:
         8a:0e:32:1b:b3:4e:04:7c:f9:7f:91:51:21:c9:26:bb:dd:77:
         e5:7b:f1:01:95:62:c8:1d:17:39:04:d5:d5:1b:87:7a:82:fe:
         56:b1:8b:d1:de:68:9f:5f:86:0c:8e:c9:31:6f:9c:de:48:3b:
         dc:eb:b9:c8:7e:63:18:1a:b7:fd:e3:09:c7:2c:b4:e3:49:55:
         7d:e1:30:f3:f6:be:b4:d2:42:bb:f8:76:bf:d3:3e:08:2d:eb:
         31:b7:5c:70:dd:c8:2e:71:34:ca:45:7b:99:78:ce:95:04:f2:
         2c:a4:f7:40:62:0c:df:52:7b:92:8b:0c:a3:35:55:be:2c:af:
         23:68:64:31:3d:17:c8:e0:cc:ab:b5:df:c5:76:f3:c3:27:ac:
         53:da:fd:d3:fa:01:de:5d:fb:c2:f7:b7:30:ab:58:c0:d6:df:
         42:a2:15:fd:e8:c7:0c:3c:d0:c5:ac:5f:15:c8:d5:a0:58:12:
         78:21:96:16:bb:67:d9:6a:8f:30:40:11:a9:09:05:6c:e2:fe:
         15:dd:fd:cd:22:47:d1:af:50:58:77:5c:a6:a7:d1:e5:d6:53:
         27:6b:5f:eb:8c:5f:b8:a4:b9:c5:a5:3a:ae:99:c0:ca:94:ee:
         f9:81:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:03 2024 by rpki-client on console-ams.rpki-client.org