Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
File:                     ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft (raw, json)
Hash identifier:          y42WKqEvfTu6xbwUROVeA5yCMU3N40fOSgpuitddAGc=
Subject key identifier:   3F:DD:32:7E:97:E1:CA:A5:B3:D9:E9:7F:CA:B0:2D:24:E5:29:76:70
Authority key identifier: 64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92
Certificate issuer:       /CN=64b90f34525f80025ea77cb618e7519982ab8592
Certificate serial:       01901DEC98492D9FAD48BFF33AB9BA1157DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:02:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:42 +0000
Files and hashes:         1: ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl (hash: lRZjEXJGP2hcgFa8LgW1BjX4ow5ZdheLW5+5QCmQv1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:98:49:2d:9f:ad:48:bf:f3:3a:b9:ba:11:57:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b90f34525f80025ea77cb618e7519982ab8592
        Validity
            Not Before: Jun 15 22:02:42 2024 GMT
            Not After : Jun 16 22:02:42 2024 GMT
        Subject: CN=3fdd327e97e1caa5b3d9e97fcab02d24e5297670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:fc:02:0d:c9:f1:68:bf:2e:0c:49:56:f1:
                    d6:3f:e9:dd:2a:c5:42:55:f3:b8:79:32:2a:47:52:
                    e9:7a:bb:e6:72:bd:4f:2b:df:b9:79:c3:00:42:78:
                    d5:20:eb:02:58:97:79:2a:7b:61:f0:b8:c6:7f:36:
                    3c:46:c1:40:ca:58:83:1b:1b:6e:61:a3:f5:15:59:
                    c9:c5:26:66:ef:c7:e6:79:99:36:d9:74:49:14:cb:
                    f9:44:2d:a8:99:e2:8b:38:c7:af:4f:81:bb:f0:ec:
                    2e:39:98:92:64:da:fe:d0:99:0a:a3:e0:e4:ce:8e:
                    bf:94:dc:58:0a:c8:16:8c:60:df:14:d9:fb:0b:8f:
                    80:19:a9:05:80:d5:40:8d:45:d9:ed:78:5d:29:c1:
                    e7:47:96:7c:46:74:9d:00:f1:7f:cc:6d:12:c3:62:
                    03:4b:8a:37:b2:b5:61:0a:25:4d:7d:2f:25:c7:ce:
                    ea:9e:ad:9b:ef:d5:9f:c3:87:b9:29:a6:b0:71:28:
                    ce:88:d4:bb:d1:58:b2:6c:92:a0:43:60:a5:59:ae:
                    b6:11:f9:0d:b4:d6:78:48:e7:be:ed:36:7c:d2:0a:
                    3c:67:05:1f:cd:67:20:c5:e1:5e:a9:72:f4:a7:a2:
                    ef:88:19:01:6c:a2:4f:72:40:ac:dc:45:cd:19:29:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:32:7E:97:E1:CA:A5:B3:D9:E9:7F:CA:B0:2D:24:E5:29:76:70
            X509v3 Authority Key Identifier:
                keyid:64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e4:f0:56:17:42:b6:1b:1b:53:7f:8e:d0:19:23:72:32:ca:
         1c:97:b4:00:1e:0a:ec:20:ed:e6:2e:7f:74:12:af:b3:e6:80:
         4d:c6:1f:4d:60:2e:ac:8c:26:c0:c2:8d:28:e0:6e:4a:16:dc:
         1a:29:42:43:dc:29:aa:6a:36:f8:69:96:7e:db:2f:f3:ce:e9:
         b2:a2:cd:02:5b:47:49:10:ae:bc:2c:f2:a0:39:87:49:29:ef:
         0a:6f:5a:b8:9b:c2:f2:4f:d9:1e:db:c3:bb:26:62:fc:41:81:
         66:ac:0e:dc:57:68:dd:d8:d9:15:5c:59:2d:1b:d5:3d:1b:38:
         b4:fc:68:12:1f:01:09:9c:4a:f5:09:40:47:1b:63:d3:8e:b4:
         6b:da:7d:43:72:6e:84:d8:f2:39:ec:6b:3f:fc:d7:fa:21:18:
         8f:76:44:68:6b:dd:7a:4d:f1:57:ba:51:0f:e3:26:51:fe:12:
         e6:5e:3e:ff:86:66:e4:bc:ae:6f:6a:a3:bb:dd:39:11:42:61:
         df:ad:e4:7f:1a:da:d7:75:58:bc:b5:61:7f:86:1a:b2:51:9c:
         20:38:3c:b0:dc:d3:e7:c7:bd:a2:47:12:de:b9:31:cf:bc:9b:
         0a:0f:d2:6e:28:76:7c:2a:78:9f:9d:37:a8:c5:90:f4:f9:c8:
         d1:8c:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:41 2024 by rpki-client on console-ams.rpki-client.org