Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File:                     zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier:          Qa9AaV2HJ7MAPg9irc/5RQ+u4YZRfO5Isg4IM5XJ4F0=
Subject key identifier:   7B:CC:92:6A:94:EF:56:31:03:80:09:6E:9D:81:32:90:88:F1:72:D9
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer:       /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial:       01901EC71B563739AF0BE4B11052AECF9457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number:          0545
Signing time:             Sun 16 Jun 2024 02:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:23 +0000
Files and hashes:         1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: TAn2gYqhcNb6OtNUjPmSGyDqOdwwUi3tvhiFwxVDxM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:1b:56:37:39:af:0b:e4:b1:10:52:ae:cf:94:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
        Validity
            Not Before: Jun 16 02:01:23 2024 GMT
            Not After : Jun 17 02:01:23 2024 GMT
        Subject: CN=7bcc926a94ef56310380096e9d81329088f172d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:92:e5:2e:a2:74:f7:a9:84:a1:47:ff:a8:
                    10:c9:c7:66:95:90:4a:53:04:d1:08:19:f0:27:24:
                    5d:57:e7:7a:1b:0d:56:a7:08:d2:a5:05:0b:76:8c:
                    f5:20:09:f7:7a:7f:69:36:be:3d:a9:32:8b:a2:7f:
                    96:2d:6a:24:ef:34:5a:04:d2:0a:5c:8d:92:1e:72:
                    81:ea:d5:bf:3f:1e:89:aa:c7:df:17:70:0f:4c:1b:
                    38:11:6e:48:1e:db:4a:8e:cb:c3:94:ec:b6:95:f3:
                    98:55:e4:09:9b:57:fe:6f:d9:51:91:0d:77:29:2b:
                    99:f4:fa:86:36:93:72:9a:bc:68:8a:37:d0:e5:40:
                    b0:c3:5d:a1:08:f9:93:20:d8:ae:4b:c4:68:3e:df:
                    37:72:0d:d1:b4:ca:d9:ab:1c:71:e5:9d:8d:0f:5e:
                    21:8c:82:e4:fb:a0:0b:75:f2:8d:ef:11:a0:92:fc:
                    e9:82:1d:d4:ed:2d:82:4a:5c:14:c6:39:a0:e0:b0:
                    54:ae:a2:f4:1f:89:e2:fe:02:84:ab:81:10:97:26:
                    ad:1d:c8:76:72:76:a4:4f:f3:6f:58:b6:0f:47:a9:
                    f2:f8:95:8e:ad:f8:77:63:70:ed:c4:5a:f0:26:03:
                    06:94:a7:91:f2:6c:48:05:a8:67:8d:43:5a:c8:e8:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CC:92:6A:94:EF:56:31:03:80:09:6E:9D:81:32:90:88:F1:72:D9
            X509v3 Authority Key Identifier:
                keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:44:64:fa:e1:e5:a7:7f:05:4b:f0:52:23:9c:f0:2c:30:df:
         c3:fc:d1:88:f0:27:2c:59:e9:0a:1c:30:97:39:9e:54:5d:e9:
         58:04:28:b3:e2:54:b4:d8:d9:81:04:f5:de:4b:48:1b:93:d4:
         e5:86:f2:e0:c1:86:65:96:40:49:e3:95:51:4e:b3:a1:d3:5d:
         61:35:8e:01:42:95:06:b5:e1:cd:a4:9c:2f:1b:21:2b:cd:f6:
         f7:2e:b1:51:9b:bf:58:52:42:16:a3:aa:6d:9d:55:61:0e:e7:
         16:ed:7b:41:78:4e:26:7b:aa:94:38:c7:53:c2:16:ee:b9:f4:
         09:4d:27:3d:ae:3b:87:2c:73:e1:e6:20:f1:8a:22:a3:b9:93:
         a2:b6:bd:29:3c:38:aa:21:28:41:3c:06:66:b4:20:5c:c3:f7:
         da:36:23:22:9a:ba:24:6f:e7:72:13:a1:5d:6e:3f:0d:2d:13:
         93:c6:a1:35:9f:4c:fa:18:02:77:f8:e3:35:22:42:49:ca:b6:
         2a:89:ca:54:bb:98:21:ce:af:92:b4:02:fc:c2:fb:44:0c:94:
         85:40:a4:d9:30:c2:32:4c:3e:1d:cd:d8:1c:b7:40:a9:30:d6:
         00:5e:be:9e:06:91:0b:7c:2c:45:2a:b0:9a:56:2c:15:17:b4:
         b6:47:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:17:45 2024 by rpki-client on console-ams.rpki-client.org