Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File:                     Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier:          Rh6EEEYM5zUFdYRJNFN48IASDwtZJ3fWn9H/zjQVnMc=
Subject key identifier:   B9:57:A9:68:48:2F:46:74:44:F4:8B:2D:98:A0:F5:0D:22:C4:9D:67
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer:       /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial:       0190411BA84AEA4B60875376132EED409096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 18:00:49 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:49 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:49 +0000
Files and hashes:         1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: Y4ERlFrV65WD8ABpqHkX04zGZ4KhWz2GuxUqxie3j9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:a8:4a:ea:4b:60:87:53:76:13:2e:ed:40:90:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
        Validity
            Not Before: Jun 22 18:00:49 2024 GMT
            Not After : Jun 23 18:00:49 2024 GMT
        Subject: CN=b957a968482f467444f48b2d98a0f50d22c49d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:af:5a:63:ab:26:67:3c:48:70:c6:4f:47:
                    97:c8:32:43:2a:b1:cc:1a:ae:e4:36:7b:f3:92:80:
                    17:3e:82:d7:d8:2a:c8:1c:87:84:08:31:9a:ee:a0:
                    a4:9c:70:f1:72:02:4f:d3:19:b0:c3:61:93:3a:9b:
                    c6:ff:f8:4b:4b:0f:80:6f:a7:de:0b:be:c1:01:a7:
                    2f:9e:05:06:e1:96:a2:48:5a:27:d3:5e:df:0f:49:
                    78:35:64:41:53:a8:f8:b8:cc:8c:7d:e6:be:e9:02:
                    1c:ff:52:25:ea:27:39:79:f6:70:ca:83:0e:8d:70:
                    6e:36:93:5d:0e:0f:bc:cf:a4:79:56:40:f5:35:a8:
                    0f:7f:8a:ea:b8:1b:02:e7:7e:ba:94:a2:48:b0:43:
                    f3:a4:96:56:0a:a0:34:71:92:43:75:2a:cc:94:a8:
                    18:47:61:39:38:96:1f:ce:56:0b:cf:17:34:aa:3a:
                    4e:b0:1d:45:f2:95:b3:31:bc:72:29:96:35:89:49:
                    00:03:72:be:e2:1d:89:86:a9:05:0e:8d:04:00:ac:
                    98:0b:69:cf:91:2e:c4:dc:d1:ed:0b:96:fd:af:49:
                    28:bb:0f:23:a8:8e:6e:6b:2e:2e:ea:ad:06:67:88:
                    bd:27:65:fa:73:9f:73:c9:70:d3:f1:11:19:b7:f2:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:57:A9:68:48:2F:46:74:44:F4:8B:2D:98:A0:F5:0D:22:C4:9D:67
            X509v3 Authority Key Identifier:
                keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:38:cf:b0:d6:94:19:e6:be:df:af:f7:88:c7:d2:cd:99:71:
         73:21:e4:0b:35:37:32:f2:1e:a6:b2:f3:71:6b:37:42:c0:20:
         48:33:a3:cf:31:c6:56:69:18:9d:c5:31:7c:62:dd:c5:bf:74:
         f2:a8:00:19:b3:53:3e:af:04:da:e1:0e:ae:18:84:e3:22:76:
         41:03:7e:6e:66:7a:e9:3a:38:e8:e2:34:1f:d5:88:81:a1:b8:
         31:4d:81:1a:48:ec:78:5a:59:84:ab:20:bd:7c:f6:d9:96:bb:
         e3:b8:79:76:69:da:82:a6:27:07:11:b3:6d:b7:31:42:6c:60:
         76:4a:07:d5:13:52:4a:95:64:71:b2:71:8f:c9:b9:6c:b3:d1:
         65:d3:0d:7d:48:a9:5d:8e:3e:14:15:f0:f3:da:e6:ff:32:e4:
         97:e6:53:24:b1:82:f6:41:40:ae:09:d3:cb:e0:b8:a7:bd:4a:
         11:6f:f7:9c:1d:3b:01:d1:fe:a4:4b:ff:66:32:2b:b9:7f:ca:
         64:6f:c7:e5:3b:be:48:cb:62:1e:a9:dd:7b:97:b8:2c:5e:e9:
         5a:6d:13:02:67:71:ea:7d:a4:66:f7:42:8c:63:45:57:68:e0:
         32:26:4e:02:30:20:dd:6d:9e:93:1b:6a:65:92:8a:65:b9:0f:
         f0:f7:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:43:53 2024 by rpki-client on console-ams.rpki-client.org