Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File:                     ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier:          bStm32GcBUmc4f8jwc3uRQJiDPxI2AxYWx2+jkogZB0=
Subject key identifier:   7F:80:16:8D:F7:AA:CD:1F:94:52:F5:96:AD:9F:CA:6E:13:A6:58:15
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer:       /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial:       01903B504F36CBAD506442D7458C32C2BC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number:          0728
Signing time:             Fri 21 Jun 2024 15:00:36 +0000
Manifest this update:     Fri 21 Jun 2024 15:00:36 +0000
Manifest next update:     Sat 22 Jun 2024 15:00:36 +0000
Files and hashes:         1: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: 6aYVcYxE2HXXKm7ucTjtI8uuHFnfcvBXo33Do9gApTs=)
                          2: _AZaOUpMnqIFdAhlz3wVcas8QYk.roa (hash: e96qKabKzoLsOMa2CrulCB5Usi34MSKaf3xrHIXBEOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:50:4f:36:cb:ad:50:64:42:d7:45:8c:32:c2:bc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
        Validity
            Not Before: Jun 21 15:00:36 2024 GMT
            Not After : Jun 22 15:00:36 2024 GMT
        Subject: CN=7f80168df7aacd1f9452f596ad9fca6e13a65815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:12:2e:2a:71:95:df:d4:ef:65:95:47:2e:
                    49:1a:20:9f:5e:15:3f:2d:bd:6f:e3:f2:c7:f6:2c:
                    f2:f0:f0:3c:af:6d:c8:83:56:28:39:f9:a8:95:f9:
                    2c:8e:67:b0:7b:86:03:f7:20:82:ac:eb:26:92:25:
                    03:76:9b:9c:88:7e:50:5b:ab:96:a8:d2:0f:75:c2:
                    d9:bf:27:4f:32:8f:6f:7e:eb:c8:93:5b:bb:9a:30:
                    20:6d:d1:e7:f8:1d:d7:ff:89:cb:8a:9c:df:ab:08:
                    bf:22:cd:d5:74:ed:92:96:ea:da:b7:1e:c3:96:58:
                    2c:29:11:10:04:aa:45:f0:75:fb:6f:ee:5f:c3:45:
                    cd:f0:55:d9:34:3b:4d:60:ec:49:e7:2a:88:ce:64:
                    a4:59:9f:ae:90:ea:d6:e6:b7:75:09:a7:68:81:43:
                    5a:8c:3e:aa:cf:99:8a:46:49:87:28:3f:07:90:55:
                    b1:29:fe:4f:75:51:62:3c:1e:7d:28:f1:2a:9c:1e:
                    07:31:d7:b6:69:7b:d7:2a:35:54:e1:30:fd:e2:24:
                    31:a9:fb:56:c2:7d:cb:74:90:76:d3:31:39:44:c5:
                    e3:12:95:27:b0:d0:69:46:71:c1:47:b7:b4:4a:7d:
                    59:9f:d3:4c:f9:3c:33:59:49:7d:b6:1c:d0:34:ea:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:80:16:8D:F7:AA:CD:1F:94:52:F5:96:AD:9F:CA:6E:13:A6:58:15
            X509v3 Authority Key Identifier:
                keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:91:0d:78:c1:43:0f:62:e4:cc:04:a1:c7:16:3e:d6:0b:73:
         7b:39:b2:6c:6c:e4:c8:a5:e9:ae:dc:ea:b9:7a:6d:2d:5c:7b:
         fc:41:9c:87:aa:28:59:8c:2f:b8:c2:18:24:0f:3a:c2:ec:d3:
         65:f4:4f:69:72:ac:b4:93:ea:47:4f:20:16:27:26:ed:f5:da:
         91:28:60:fb:d2:4a:3d:b3:d9:c7:d0:fa:17:cb:3a:00:eb:a6:
         25:2a:bf:af:71:ae:2a:96:9c:12:bc:55:24:81:ac:ab:eb:63:
         2d:46:8b:ef:a0:f8:64:60:4d:40:e2:16:ac:be:e4:a5:44:82:
         eb:36:a2:c9:fb:50:d6:3b:06:60:6e:52:e1:1a:0b:30:e7:1e:
         8c:b7:c3:4b:5a:98:4d:16:90:f4:31:b5:10:fa:ec:82:a4:df:
         fb:19:6a:21:ce:20:25:5f:c7:0f:84:f9:d0:03:63:a1:31:26:
         4b:44:7f:4c:cf:42:97:db:e9:80:ce:d6:28:4f:04:4b:ad:0d:
         d8:8c:77:44:96:b7:95:e6:71:16:9d:7b:37:6d:bd:2e:50:0a:
         e0:b3:78:27:b5:ff:7a:7a:d4:77:bb:15:9c:3f:27:20:60:0a:
         9a:51:12:7d:d7:c1:a1:df:6d:4b:d1:92:22:2a:9c:af:37:08:
         a3:f2:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:55:00 2024 by rpki-client on console-ams.rpki-client.org