Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File:                     ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier:          uaHUFoEY3kNYMpqueDXFe0iga8l5yyoG63m6ay/EuEs=
Subject key identifier:   96:07:3B:6B:30:C2:A3:AE:96:48:F2:CD:64:9B:99:01:BC:DB:39:32
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer:       /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial:       01901E5890341652567392F786EC26B5C25F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number:          0719
Signing time:             Sun 16 Jun 2024 00:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:38 +0000
Files and hashes:         1: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: /G03VeqMaj58AArGZnzKTAaIV3dVMo1tCiy4bFlqd2g=)
                          2: _AZaOUpMnqIFdAhlz3wVcas8QYk.roa (hash: e96qKabKzoLsOMa2CrulCB5Usi34MSKaf3xrHIXBEOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:90:34:16:52:56:73:92:f7:86:ec:26:b5:c2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
        Validity
            Not Before: Jun 16 00:00:38 2024 GMT
            Not After : Jun 17 00:00:38 2024 GMT
        Subject: CN=96073b6b30c2a3ae9648f2cd649b9901bcdb3932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:a2:f5:00:fd:cf:e6:3b:a2:b2:23:6e:3b:
                    7d:a9:2d:73:08:6a:99:28:8c:01:48:12:75:fc:bb:
                    3d:5e:2e:7b:d1:9e:73:bf:83:f8:16:42:a3:5a:74:
                    89:39:8c:cc:e2:5e:bd:ea:c6:9d:53:42:ff:c5:70:
                    bf:12:c4:94:08:16:b5:07:7a:0d:4f:c9:80:76:cf:
                    a4:7b:4c:f1:a9:23:1d:16:3a:d9:e3:8c:c3:f7:ad:
                    65:e5:dc:75:f8:28:c4:5c:56:a8:60:3c:08:42:85:
                    d0:56:b3:42:dd:c4:b0:c9:87:e0:25:cb:0f:6b:84:
                    01:59:05:09:b3:41:66:16:f6:26:26:ba:b0:4f:8e:
                    d6:59:10:d5:7f:a9:8f:ec:3f:df:e4:ec:c6:2c:de:
                    46:d0:c3:cd:06:5b:db:ef:79:d0:91:9f:af:8f:4a:
                    5d:5c:23:17:65:2e:3f:1f:18:2c:1c:7a:b9:81:6e:
                    6a:b4:2c:20:2a:52:97:14:8d:34:b6:4d:9e:31:34:
                    99:0f:64:57:bb:07:a1:b3:4a:aa:f6:2c:1e:8b:63:
                    d4:93:da:a8:94:a4:42:fd:49:0d:28:9e:a8:19:b9:
                    c9:43:06:1b:e8:78:01:dc:3f:37:22:29:bd:9d:9c:
                    99:a5:15:74:da:b1:6d:51:96:a2:f8:64:9a:dc:dc:
                    2b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:07:3B:6B:30:C2:A3:AE:96:48:F2:CD:64:9B:99:01:BC:DB:39:32
            X509v3 Authority Key Identifier:
                keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e2:18:5f:1c:5f:1d:75:cf:95:4b:38:53:cc:45:a9:93:db:
         3e:26:6f:9f:e1:99:f0:10:be:35:9a:5e:9c:0c:c9:bc:94:92:
         68:79:1c:59:6e:b4:c2:3d:47:bc:92:9e:39:2e:3a:fb:0b:b4:
         8e:55:38:f8:d0:f3:45:f5:ec:e9:00:c4:73:63:47:2a:9b:00:
         ad:ec:b1:b0:3b:9b:33:4d:b4:72:00:cb:97:f3:f2:35:ef:c1:
         bb:7d:83:1d:54:d8:bc:33:33:83:48:23:be:73:79:09:ea:49:
         14:9e:a3:b1:11:61:e9:40:65:97:ef:88:d6:9b:fe:91:b8:be:
         45:88:84:27:0d:ed:9c:af:17:0c:00:22:16:4e:4c:96:38:2a:
         b4:af:40:67:9f:07:23:26:ec:1c:51:03:c3:40:2f:2b:2d:13:
         d8:64:35:d9:74:44:01:c5:63:81:93:3d:ef:18:c2:83:ed:98:
         ab:c2:dd:51:27:34:bb:14:06:02:ce:64:94:9c:41:64:66:15:
         2e:44:6a:8d:c9:c0:53:b9:b7:d7:fa:c6:6c:86:22:fe:4f:98:
         f3:3e:ca:76:80:d4:5d:33:06:7d:4d:85:47:54:02:c1:b9:5b:
         36:d7:cc:ee:5f:06:21:99:d0:55:e7:b1:2b:c5:27:41:9b:af:
         72:28:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:11 2024 by rpki-client on console-fra.rpki-client.org