Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File:                     ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier:          oo4hlIDZdxUP9K2Iz4HrCRQaIuMcfJBxoPMZfiQ9yK8=
Subject key identifier:   73:C6:A8:FD:E1:F3:6D:91:AE:17:02:28:FA:AA:A6:1E:14:55:7E:78
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer:       /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial:       01901D46A4404FD39D056197A6A442079A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number:          0E18
Signing time:             Sat 15 Jun 2024 19:01:27 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:27 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:27 +0000
Files and hashes:         1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: 8E01us1DiCfbMbqZutSeISedAr9Vnw0Jv97TccksF7I=)
                          2: qgmT6giBQNedAqq1X3QTUXXuqU8.roa (hash: m6t1v6ysaNmdguDi6/I/aYd3UL4zuCQ5xfdNdkezv4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:a4:40:4f:d3:9d:05:61:97:a6:a4:42:07:9a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
        Validity
            Not Before: Jun 15 19:01:27 2024 GMT
            Not After : Jun 16 19:01:27 2024 GMT
        Subject: CN=73c6a8fde1f36d91ae170228faaaa61e14557e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:72:45:6a:bc:5f:f2:75:d6:98:6a:e5:81:
                    6e:be:bd:a3:88:97:09:6e:16:6d:8f:8b:ae:47:1c:
                    ac:2e:71:0f:46:86:d0:15:03:66:0e:62:2c:f1:14:
                    73:78:6b:4e:0e:da:17:7c:45:57:96:75:3c:d9:9f:
                    fc:be:99:52:b0:e2:ca:72:05:1a:68:4f:d5:b8:50:
                    58:83:d6:1e:a1:57:2b:cc:37:6f:a9:2d:17:06:95:
                    69:49:e3:11:29:19:60:81:69:96:b1:9c:63:1a:5f:
                    e5:7d:73:60:ab:2c:3c:7b:13:ac:f4:12:c1:49:e6:
                    59:6c:af:a0:18:fc:26:1b:3e:b5:6f:67:81:a8:fc:
                    e7:bb:e1:da:1b:b3:03:57:a4:c4:82:85:9c:8d:c4:
                    39:e6:07:f5:9c:a2:73:fb:d4:04:53:0e:a1:35:ea:
                    48:62:55:55:c3:66:24:62:75:d4:f4:f2:be:83:94:
                    59:b1:5f:72:0b:5f:df:f9:3e:8d:95:49:16:ef:5f:
                    c2:7b:1a:eb:a9:b7:f3:bc:7b:6a:1f:74:0c:da:14:
                    e8:ec:c5:a7:ca:ca:da:e0:52:f0:97:1d:97:29:29:
                    f5:b6:28:fc:89:97:fd:fa:d4:b3:01:12:56:a1:92:
                    bc:bd:ba:51:34:57:5f:12:8e:01:d6:c4:5a:b5:8b:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C6:A8:FD:E1:F3:6D:91:AE:17:02:28:FA:AA:A6:1E:14:55:7E:78
            X509v3 Authority Key Identifier:
                keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:ef:c9:e1:63:6b:9f:8a:8b:70:ab:1e:e8:22:1f:b1:d7:
         25:9d:86:6a:07:e3:13:74:be:b1:dc:7d:70:06:1e:a0:ab:75:
         97:c5:bd:a2:28:85:7c:05:cb:da:5b:5d:5f:a7:85:09:12:e9:
         48:a7:47:c7:27:c2:2a:43:bb:02:57:0e:83:bf:06:10:f9:1e:
         8b:af:b1:ea:04:d4:9a:97:52:65:62:81:2e:91:db:2d:7f:74:
         e7:45:d4:6c:80:84:42:5d:02:58:e3:e6:18:8b:35:5f:84:33:
         44:27:69:19:c0:d5:b0:d6:6a:d2:97:56:c9:94:d7:ee:6f:7c:
         53:6d:46:4a:f6:6b:fa:23:e7:e7:bd:3b:f5:99:b8:ef:4a:38:
         2c:4c:a5:9d:23:a8:e5:e4:39:08:88:6e:ab:ce:2f:58:ff:29:
         4d:c4:2c:1f:ef:4e:12:9c:89:09:c0:c0:3f:06:bf:c4:b4:f6:
         46:02:cb:83:52:b5:6c:ab:fe:74:69:df:7a:2b:1f:d9:06:75:
         49:9e:fb:aa:be:ff:53:f0:a2:3b:49:d5:6c:3a:29:87:67:0d:
         d6:d1:fc:fd:c9:a0:88:8a:f6:00:bf:98:fa:84:bd:97:b1:f6:
         cf:52:9a:13:55:3f:15:cf:ab:86:84:34:86:f8:e9:b7:3c:2e:
         dd:ec:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:09:23 2024 by rpki-client on console-fra.rpki-client.org