Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File:                     mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier:          cyKdC1lP+yfSJtTxB+TGINaTDFzWHV8I9yDhTlQiOTg=
Subject key identifier:   D0:60:44:DB:31:A9:7B:BF:6B:9C:D6:B4:BA:53:4D:DC:20:D4:C1:E9
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer:       /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial:       01901FDA7394B91823EEE75815BA74FF6639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 07:02:08 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:08 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:08 +0000
Files and hashes:         1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: 6YXGwNclXGZDtnTStAc32zNiENJg8azTn07VRJrAdb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:da:73:94:b9:18:23:ee:e7:58:15:ba:74:ff:66:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
        Validity
            Not Before: Jun 16 07:02:08 2024 GMT
            Not After : Jun 17 07:02:08 2024 GMT
        Subject: CN=d06044db31a97bbf6b9cd6b4ba534ddc20d4c1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:55:b9:bc:33:88:88:38:86:e8:c1:ff:73:
                    23:bf:d4:7f:82:be:68:8e:4c:1c:c8:62:3a:d3:2f:
                    4d:ff:a4:d9:25:2c:20:87:ef:ee:00:ba:10:f7:c8:
                    a8:1e:6e:27:18:84:11:ab:9e:27:b6:ab:8f:ad:49:
                    48:45:e8:8a:1b:97:aa:1b:2a:70:13:a2:d2:73:1f:
                    e2:db:08:16:07:39:56:c4:1b:8f:f7:5a:5f:a4:27:
                    d1:d4:a3:62:15:ed:ff:6b:80:a0:0d:11:c5:50:85:
                    a9:78:12:cf:10:ab:51:23:7d:2e:15:ba:52:58:7b:
                    7e:06:5e:1d:32:94:c2:4c:21:31:c4:24:5e:4a:bc:
                    9b:3e:65:52:60:40:00:c8:b3:50:2a:a0:82:f0:7f:
                    50:83:4d:e4:8b:75:c1:74:73:4f:a9:fd:19:99:f1:
                    db:be:3d:05:38:94:d5:cb:e7:da:75:10:37:43:ff:
                    27:87:69:b5:84:92:33:ca:2b:bb:0d:54:70:8c:6c:
                    01:b6:34:ae:50:11:d3:53:14:08:02:d3:9b:22:c3:
                    8b:79:bc:9d:e3:dd:88:af:f6:04:a9:3f:ba:4c:43:
                    cc:6a:62:4b:89:d3:46:94:c8:1e:36:d5:fd:ee:7f:
                    d6:30:83:89:05:ac:3d:82:be:45:1d:7e:58:0a:c0:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:60:44:DB:31:A9:7B:BF:6B:9C:D6:B4:BA:53:4D:DC:20:D4:C1:E9
            X509v3 Authority Key Identifier:
                keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0f:74:79:ac:6c:82:40:48:9f:1d:88:11:c9:d8:78:95:41:
         9e:0b:8f:a5:a3:3b:65:b8:50:4e:38:c2:e5:18:31:56:fb:6f:
         62:47:98:cb:2e:13:71:72:2c:1d:77:6a:81:bc:b1:b3:2f:59:
         a0:d4:36:d2:e4:89:23:95:b1:a6:3b:d1:c3:cb:ae:5a:ec:0b:
         57:a3:75:ce:03:3a:c9:cf:5b:d1:6c:03:33:79:77:fa:d7:46:
         b1:32:c3:fc:31:af:2e:6f:91:c4:fa:e0:25:a9:d3:86:15:a7:
         dd:ea:8f:26:c8:66:39:3f:0f:c7:fd:29:60:15:f1:df:14:22:
         7e:80:7d:1f:83:d9:9b:87:1f:89:27:2c:27:e2:44:4b:7b:0f:
         77:37:bd:16:6f:f6:0b:f4:26:b3:bb:15:8f:6f:6b:10:ac:cb:
         56:75:7b:16:5c:30:6f:32:21:6c:14:e7:03:2f:f8:8a:56:db:
         3c:b6:ed:71:b6:32:9e:b8:52:4a:57:f1:7b:6b:4d:5d:89:0b:
         ba:f4:92:e5:da:e9:8e:32:d5:31:42:0e:08:ea:ed:b4:e0:40:
         8a:a9:9e:6d:04:ee:5f:d7:0f:a3:9c:c5:e5:14:97:76:62:65:
         ab:3b:8e:a0:3c:bb:0e:4c:5f:5b:bc:62:f1:a7:3d:2e:98:fb:
         a4:a3:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:56:11 2024 by rpki-client on console-ams.rpki-client.org