Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File:                     zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier:          WfOechnx/aXAEHjQPzhH/cx7npjCuMSDhXtEjkjimv4=
Subject key identifier:   5F:09:01:78:09:0C:C1:5C:0D:89:A4:28:20:41:91:5C:0E:52:11:FE
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer:       /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial:       01904566C9AE0C0D28C2883C64014AD5266D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number:          0559
Signing time:             Sun 23 Jun 2024 14:01:22 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:22 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:22 +0000
Files and hashes:         1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: 6nfEJSEqXRa/9jw40+HnzxpUD1nLBx1n9jKLqgNyX7Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:c9:ae:0c:0d:28:c2:88:3c:64:01:4a:d5:26:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
        Validity
            Not Before: Jun 23 14:01:22 2024 GMT
            Not After : Jun 24 14:01:22 2024 GMT
        Subject: CN=5f090178090cc15c0d89a4282041915c0e5211fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e2:70:9d:4c:fe:91:6f:26:f3:2c:2f:9b:7b:
                    dc:a3:97:80:60:a6:5d:1a:40:89:86:3e:1b:33:5b:
                    1f:20:2f:97:6a:a3:92:d6:40:4e:6d:34:84:f9:97:
                    0e:f2:a9:5c:31:56:29:2f:62:62:bc:fa:7f:16:fc:
                    c8:20:e8:0f:7d:5b:09:d0:8c:91:37:ba:aa:0f:f3:
                    69:8f:f1:3d:02:00:9f:15:f9:e2:dc:12:09:5f:bb:
                    f3:1e:8a:74:91:bc:00:6c:cd:dd:3e:98:0c:60:10:
                    ec:61:10:c5:ed:55:98:2d:09:f9:87:2f:74:d5:16:
                    c6:d3:10:34:82:3a:a6:d8:05:ec:4e:ae:74:c5:71:
                    19:75:96:a8:fb:2a:28:06:22:4e:a4:0a:5f:bb:03:
                    fd:82:13:d8:9e:e3:91:41:6d:fc:76:9b:10:2c:17:
                    16:0a:83:f4:ed:49:ac:ff:8f:03:4f:cd:e4:e5:4e:
                    0f:92:30:5e:f7:8d:7f:7a:5f:8a:56:70:0d:3a:b8:
                    be:f7:8d:ab:71:54:c7:29:cf:86:e2:e5:34:4b:fc:
                    57:ad:a0:0f:9a:9f:fb:1f:db:48:9f:12:3b:85:f2:
                    9e:d2:89:04:7d:0f:1d:6d:a7:83:c1:70:58:9b:7c:
                    3c:ed:4d:19:1f:ea:a1:c4:90:b0:e4:36:22:c3:b1:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:09:01:78:09:0C:C1:5C:0D:89:A4:28:20:41:91:5C:0E:52:11:FE
            X509v3 Authority Key Identifier:
                keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:c1:ad:41:ee:b7:f4:ed:ef:62:bd:df:22:42:2d:0c:8b:
         cf:8b:97:1a:da:04:4e:41:6b:7b:3c:a5:69:f9:7e:16:d8:44:
         c4:ff:16:6c:22:7f:17:58:4c:5b:b4:8e:04:ac:cd:fe:68:10:
         a5:0b:33:74:94:3b:d5:20:3d:33:8a:d1:09:bd:65:8f:9f:39:
         3f:08:77:ec:da:1e:3e:10:49:69:2c:58:62:8b:c5:04:8a:3b:
         5d:16:a6:c9:b6:ed:0a:f4:59:8e:5a:7d:47:59:00:81:12:b5:
         6a:15:ef:e7:d0:39:0f:ec:6f:c7:27:a4:d8:d0:99:d0:a8:05:
         fe:e5:e8:ab:98:2a:e0:c6:a6:a8:dd:89:f4:49:d7:a6:a2:75:
         b2:53:82:33:88:7d:fc:85:74:17:72:fe:98:be:1d:f8:a1:fe:
         03:cc:30:a0:88:42:d2:96:59:b0:92:63:6a:1b:4e:38:2f:af:
         62:01:82:1e:a3:27:f0:41:2f:a1:cf:91:0f:cf:48:49:3a:83:
         76:ff:67:75:df:48:46:bf:98:3c:82:28:bb:b2:29:3c:f5:d8:
         0b:b2:59:39:f2:2b:ff:95:6a:09:f4:f3:cc:f0:7f:3d:6d:4c:
         c3:c3:a6:0f:9f:6c:94:5d:5b:c0:cd:26:17:8b:6c:5d:e4:ac:
         2f:72:4b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:06:40 2024 by rpki-client on console-ams.rpki-client.org