Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
File:                     ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft (raw, json)
Hash identifier:          trXiBfYZvAqvhWyLMOiXlrmgrDBkOjzAKUuQ0Rvm9P8=
Subject key identifier:   1B:4D:54:04:1C:09:B4:6C:B8:14:1A:01:4F:FC:6B:DA:E2:64:7B:3D
Authority key identifier: 64:11:5A:CD:7C:7D:A0:B7:C0:AB:98:FC:79:C1:9B:74:B5:54:4D:BB
Certificate issuer:       /CN=64115acd7c7da0b7c0ab98fc79c19b74b5544dbb
Certificate serial:       019367EC4B2089203E6930680F51A2AA8018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
Manifest number:          0C47
Signing time:             Tue 26 Nov 2024 10:02:39 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:39 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:39 +0000
Files and hashes:         1: ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl (hash: tAkK+ZowtnDPd4kEROLDN+mxfFmDP8XLyJL+E/nfX60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:4b:20:89:20:3e:69:30:68:0f:51:a2:aa:80:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64115acd7c7da0b7c0ab98fc79c19b74b5544dbb
        Validity
            Not Before: Nov 26 10:02:39 2024 GMT
            Not After : Nov 27 10:02:39 2024 GMT
        Subject: CN=1b4d54041c09b46cb8141a014ffc6bdae2647b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:d5:87:64:54:89:e4:17:bb:eb:a3:f7:e5:
                    17:14:40:04:a6:d5:5c:74:9c:fc:e9:2c:a2:68:64:
                    fe:8d:15:91:38:ae:fa:bb:00:64:ad:0b:32:d6:15:
                    2b:7a:99:e4:a2:f2:9b:f3:75:45:98:db:9b:8c:69:
                    64:5c:84:ea:fe:ae:89:23:9c:dd:dc:e4:49:50:5c:
                    b9:eb:c2:8b:c3:da:30:6c:45:6a:62:6d:12:a6:78:
                    e2:aa:35:54:40:28:42:8f:a7:c7:3f:ed:29:6d:ee:
                    62:9f:26:c2:c8:e1:46:5d:b7:0a:f3:42:4a:1f:f5:
                    5d:8b:5b:45:4a:3b:53:ef:f5:a5:9a:27:0a:f3:aa:
                    9d:a2:90:ee:0f:e5:26:3b:79:7d:d9:6e:f5:ed:d1:
                    1a:9b:e6:6e:09:dc:95:5e:b3:c5:d6:cf:c4:ec:10:
                    2c:af:35:5a:db:ab:0c:3d:71:b8:a3:b7:e4:a9:ee:
                    4e:a6:ce:be:17:92:1c:f8:b6:9b:df:6a:6c:83:e5:
                    e5:4d:f8:73:b0:4b:5a:6d:8a:0e:ed:09:03:b0:c1:
                    9f:55:bb:75:65:16:ca:d7:d6:88:93:8b:dc:62:58:
                    29:14:42:71:38:e5:00:e0:f8:be:d3:ec:39:89:95:
                    2e:0d:7c:bc:1d:6d:fb:5b:2e:64:43:71:18:ca:9c:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:54:04:1C:09:B4:6C:B8:14:1A:01:4F:FC:6B:DA:E2:64:7B:3D
            X509v3 Authority Key Identifier:
                keyid:64:11:5A:CD:7C:7D:A0:B7:C0:AB:98:FC:79:C1:9B:74:B5:54:4D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:72:ea:2f:8f:3d:a2:37:21:03:47:a2:59:12:04:b7:9e:54:
         f6:d6:7d:54:63:71:9b:05:24:72:d6:1c:4d:a1:08:31:67:1c:
         bb:18:ef:47:28:49:ca:f8:76:a6:a5:60:62:f8:c7:2b:99:67:
         77:4e:d1:f7:36:16:e7:87:17:2e:da:19:6b:5e:2c:0b:86:96:
         de:22:24:4b:6b:5f:37:fa:ea:76:ca:12:e9:3e:1b:f2:c7:4d:
         ba:10:99:cb:0d:f7:06:f5:20:86:27:b2:48:fe:f1:74:27:c7:
         dc:f8:4e:b5:8b:82:bf:9e:2e:cc:0b:03:71:ca:8c:fe:42:cf:
         c6:99:2a:7d:d3:1b:8e:b4:6d:45:26:91:a1:de:1e:24:59:1a:
         97:c2:1e:c5:8d:8d:b2:02:d4:85:19:63:a0:2e:39:72:ca:03:
         6c:f4:4a:2a:63:03:e6:64:5c:1b:1b:b6:54:64:17:bf:64:72:
         26:b5:2e:8b:71:a2:85:dc:27:52:a2:f2:7c:c8:86:42:57:61:
         8f:de:a0:23:72:be:ec:68:81:a4:8a:c9:2e:40:ed:13:d1:ce:
         90:45:4c:d2:47:e8:26:32:b3:99:1d:21:a9:4d:93:c5:4d:ab:
         7e:3e:98:7a:7e:2f:be:45:cb:f1:60:cc:13:2d:75:b5:ec:84:
         f8:a0:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:06 2024 by rpki-client on console-ams.rpki-client.org