Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
File:                     RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json)
Hash identifier:          0MhofmwCXd3z1dJ6VCsNOSeXWTHkpj/6TQW8RYFANXc=
Subject key identifier:   38:0D:B7:95:9C:05:7C:82:01:92:29:57:99:2F:FF:0F:79:74:12:DF
Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
Certificate issuer:       /CN=459ccc1bb01160686806db35a93351b21b3e60dc
Certificate serial:       019045D4011871DBE677FE1CC315F46883F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
Manifest number:          0F50
Signing time:             Sun 23 Jun 2024 16:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:40 +0000
Files and hashes:         1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: 9Ks0Bb0b5AZBMoQR40hGHVEtVpX0B/TQTcbpFFoXE9A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:01:18:71:db:e6:77:fe:1c:c3:15:f4:68:83:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc
        Validity
            Not Before: Jun 23 16:00:40 2024 GMT
            Not After : Jun 24 16:00:40 2024 GMT
        Subject: CN=380db7959c057c8201922957992fff0f797412df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:98:14:97:36:50:21:75:79:1b:5b:ac:e4:
                    4f:07:96:e9:a2:2d:29:c7:fb:3d:f2:c4:68:a6:58:
                    90:53:31:d9:05:60:84:69:cd:b0:0e:0b:4c:c5:e8:
                    c9:10:5a:a1:d8:b0:ab:03:58:e8:56:81:61:c9:b2:
                    33:d0:2c:3f:26:dc:ee:ca:66:d4:bd:42:f1:b7:8b:
                    30:58:45:65:a5:3d:df:e8:a8:3b:c1:8a:c0:0b:a7:
                    f5:d0:70:49:0a:fe:08:dc:65:86:70:84:13:7e:07:
                    43:ba:ee:63:d8:93:16:2f:bb:4f:b5:a9:84:2f:08:
                    78:a1:ae:54:c9:47:69:f9:79:f7:2c:75:a5:ce:0f:
                    20:aa:ac:b5:82:f7:0e:5f:cf:25:fc:c1:7d:f8:d1:
                    66:b9:a2:e4:06:52:5d:4b:dd:eb:b9:9d:a7:3b:9e:
                    8f:3d:c5:42:d8:84:e2:a2:1b:b7:4b:ee:fa:54:2f:
                    e6:2f:e5:0b:48:58:c8:64:71:81:a9:72:20:a8:73:
                    cf:20:3e:48:f1:42:82:66:98:a9:f9:b9:c5:0d:e2:
                    0f:5b:1a:84:00:a9:44:90:02:bc:0a:8a:d4:12:fb:
                    07:d1:6e:9c:59:8a:1f:96:98:e9:f4:af:54:1b:f3:
                    a9:69:a2:44:16:2c:ac:87:20:10:fe:b7:52:41:96:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0D:B7:95:9C:05:7C:82:01:92:29:57:99:2F:FF:0F:79:74:12:DF
            X509v3 Authority Key Identifier:
                keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:aa:47:39:56:73:2f:a5:f0:80:56:20:6e:37:aa:59:27:
         af:f6:82:ad:2a:d8:f0:65:f8:c9:15:23:83:4c:26:2c:7e:06:
         c6:ff:33:b5:f9:90:52:82:40:af:30:60:50:18:3c:13:49:72:
         b6:e1:87:7c:a2:46:5b:7e:5e:df:93:52:52:e9:66:01:46:cf:
         a7:50:a2:a1:7c:25:64:8a:df:a2:c7:9e:bf:ab:d2:c5:d9:91:
         a3:1a:8e:20:3b:80:da:39:79:d7:1e:1b:88:82:15:bf:a4:5a:
         dc:94:ca:76:15:c0:4b:cc:57:96:79:e0:69:1b:49:aa:39:fa:
         e8:da:d4:93:da:e5:d1:bc:6f:d6:e3:92:63:89:03:7f:c2:7d:
         bc:d3:2a:aa:29:ee:14:11:05:7c:31:30:52:b3:7b:30:ee:b4:
         0d:b5:da:a8:4b:73:34:93:85:a9:38:11:e0:5f:5d:5b:1b:b0:
         e4:e1:3f:8b:9a:0b:b4:36:a7:62:8e:76:d8:b7:ca:82:96:14:
         af:b2:78:4c:13:ac:2d:34:2d:ad:4f:b1:77:07:3c:37:2f:47:
         6e:fc:1d:50:3a:ef:b8:76:95:c2:d5:47:34:a1:17:a5:62:c4:
         60:65:10:86:0a:79:32:1c:97:be:6a:1c:80:fc:b4:7a:42:46:
         84:e1:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:08:50 2024 by rpki-client on console-fra.rpki-client.org