Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File:                     Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier:          AxSTBm3oGaFcfCWOaI7BjFsU+tdLgHPesylbc0f4TBQ=
Subject key identifier:   8C:FE:50:20:75:9D:3D:AE:3C:F1:1A:81:0F:4E:B2:A6:DA:3C:0C:35
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer:       /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial:       01901E588B486EDBCDF69BBAE6125C733A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:37 +0000
Files and hashes:         1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: kXbqGNA5HpBjfQDEDaMOpsDGbzKYEI6JomQH7NIQyzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:8b:48:6e:db:cd:f6:9b:ba:e6:12:5c:73:3a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
        Validity
            Not Before: Jun 16 00:00:37 2024 GMT
            Not After : Jun 17 00:00:37 2024 GMT
        Subject: CN=8cfe5020759d3dae3cf11a810f4eb2a6da3c0c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:a7:7b:57:6a:3a:f4:a1:e4:24:cf:5b:86:
                    ec:18:24:dc:1d:d2:db:be:88:20:72:d9:eb:e8:ed:
                    2d:7c:ea:8b:5c:92:c2:61:ce:54:43:bf:b6:83:47:
                    bf:22:e1:25:ff:5c:9d:fc:9a:a8:ee:9f:fc:07:02:
                    0c:92:62:06:5b:a9:ca:72:5d:0f:bb:8a:28:98:f1:
                    5f:89:28:1b:c6:39:a2:28:42:8d:c2:d2:a3:c1:0c:
                    1c:45:62:c1:d8:34:cd:df:05:9e:01:91:4a:30:1c:
                    04:63:e3:d4:17:d5:21:31:24:d5:dd:18:56:79:6d:
                    54:ae:7a:c6:e0:03:09:32:52:8f:3b:98:3d:27:7a:
                    6e:67:19:b6:4b:19:fc:b5:1c:4a:eb:7f:12:b7:49:
                    52:08:7f:29:66:9c:e5:5c:10:37:9b:ce:30:7f:31:
                    aa:b6:ee:12:7c:45:b8:ac:4a:b5:cf:be:04:af:7d:
                    8e:a6:8d:a2:35:c3:15:d0:79:74:84:ca:51:35:8d:
                    d6:1c:43:df:3d:37:6d:79:d5:ec:fe:1a:d2:32:57:
                    ef:2a:f7:77:d0:72:b1:d6:ef:72:d2:b2:ad:54:7a:
                    e4:9e:21:04:bd:ac:0a:47:44:09:e1:c2:9f:5f:ef:
                    f0:67:11:b7:87:93:3e:e9:1d:0d:2b:de:e9:a5:0a:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FE:50:20:75:9D:3D:AE:3C:F1:1A:81:0F:4E:B2:A6:DA:3C:0C:35
            X509v3 Authority Key Identifier:
                keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:4b:ec:e8:29:5f:82:8b:2e:a4:ab:94:3b:ed:15:ef:c6:31:
         43:4d:14:93:b1:9e:2b:57:b7:94:80:2c:01:1e:bb:cc:e5:3a:
         78:bd:bd:fa:cf:c4:84:e2:4a:25:5f:c1:fb:b0:d4:85:45:c0:
         7c:ab:1a:86:f8:94:59:58:65:b8:1d:c3:b7:68:2c:77:4c:4d:
         d7:85:94:4f:fc:e9:e5:93:a3:c6:3e:7c:da:6a:e5:22:f5:62:
         f2:16:1a:4e:ff:ac:9c:8f:19:77:57:ea:d8:05:2f:6d:9f:83:
         00:75:e1:e1:63:74:49:99:1c:aa:af:12:21:2c:68:dc:91:93:
         59:fa:cd:d9:d0:d3:06:04:03:c0:40:08:5f:d4:1d:ec:7e:03:
         28:ba:9d:27:89:ac:0f:86:31:fa:fd:22:cb:12:e0:2e:b2:47:
         c7:09:4e:de:be:47:d1:ce:d1:fc:eb:21:1b:bf:37:51:f7:ee:
         69:54:4d:26:e8:a9:7a:f4:59:1d:bd:15:b8:f9:0e:6f:a4:ab:
         96:54:f1:89:4c:2e:29:b5:40:bd:ac:c2:7c:f3:26:7b:7d:b3:
         c7:f9:1c:bd:82:cc:a3:3a:77:07:79:43:5e:1a:7f:b9:ac:5e:
         28:96:08:2f:ce:39:f7:3a:d8:9a:ac:43:aa:f3:66:27:22:ef:
         3d:0b:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:29 2024 by rpki-client on console-fra.rpki-client.org