Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File:                     ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier:          ewysOh1NgTbfHTpryZ52s5DvkULa2bcZtFctV9vZiHk=
Subject key identifier:   7A:16:45:69:1B:DC:C4:51:59:E2:CD:C1:97:78:36:C4:8F:65:DF:08
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer:       /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial:       01903A3DE16A2F87B010ABFBC7FACB81AB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number:          11D0
Signing time:             Fri 21 Jun 2024 10:00:52 +0000
Manifest this update:     Fri 21 Jun 2024 10:00:52 +0000
Manifest next update:     Sat 22 Jun 2024 10:00:52 +0000
Files and hashes:         1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: hdL++SfVRwA7QP4fv4WeBwqFYoFtRSi4T/fx5FLZ2Fw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:3d:e1:6a:2f:87:b0:10:ab:fb:c7:fa:cb:81:ab:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
        Validity
            Not Before: Jun 21 10:00:52 2024 GMT
            Not After : Jun 22 10:00:52 2024 GMT
        Subject: CN=7a1645691bdcc45159e2cdc1977836c48f65df08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:9e:6a:75:2f:b6:5b:99:23:8b:58:f9:65:
                    16:9a:ba:d9:8f:26:c0:32:d0:65:ff:e8:17:23:96:
                    a5:28:2c:3f:24:56:c3:e9:c3:f4:30:30:df:fb:a7:
                    d9:a7:7c:4c:2f:ec:37:18:9a:8c:86:6f:36:35:8c:
                    1e:8a:ef:4f:26:6e:b1:16:39:de:9d:c6:58:ed:ba:
                    2f:52:d2:34:42:02:af:64:1b:fd:ed:cc:b7:73:2c:
                    d7:73:56:2a:80:e0:f5:95:9a:6f:37:d9:1c:f8:54:
                    1a:9d:8a:12:86:d2:f1:bb:37:ee:67:16:c9:bc:5a:
                    b6:e1:45:7e:ed:e8:1e:44:3f:b6:27:2e:c5:78:a8:
                    c6:0c:58:50:30:df:74:d9:b5:d3:ae:eb:7c:aa:d8:
                    d9:e9:c4:ba:b6:2a:92:ea:80:18:dd:d2:6d:95:a7:
                    12:8c:9c:6a:34:2c:8a:32:96:52:76:24:be:e1:98:
                    50:2d:52:d0:cc:0a:97:5b:98:1b:02:dc:ad:33:89:
                    3c:10:85:6f:ed:b9:eb:17:48:d4:7a:38:b1:c3:c1:
                    36:00:e9:44:a9:80:5f:e2:31:05:0b:43:f9:72:92:
                    38:73:26:67:7a:b9:fe:53:07:3a:b3:44:cc:c3:0b:
                    37:55:48:41:de:b8:8a:14:12:d9:f6:4a:c7:3f:13:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:16:45:69:1B:DC:C4:51:59:E2:CD:C1:97:78:36:C4:8F:65:DF:08
            X509v3 Authority Key Identifier:
                keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:9f:67:54:46:5c:79:6f:b6:b9:84:5e:1a:cb:89:d9:d9:
         10:8a:52:c6:39:c2:7a:f1:38:f1:05:1f:83:d1:34:cc:70:1a:
         fd:c6:1d:3e:9c:5e:5f:bf:81:c7:3f:aa:a8:7f:a2:20:4e:45:
         46:39:11:88:18:4c:0a:e5:f2:6f:ba:66:dc:07:1e:13:e3:bd:
         ec:f7:00:52:ff:3f:e0:87:af:1b:65:c7:3f:0b:99:a7:81:41:
         3a:4d:fd:3b:b4:01:8f:6b:25:81:1f:ab:d2:08:a6:5c:94:34:
         96:e8:5f:76:3e:b8:a2:9d:28:cc:b5:54:2d:7d:73:df:1a:3f:
         57:44:01:1b:b5:4a:7d:35:9f:9f:46:83:5e:37:93:7f:78:60:
         ad:cd:73:11:c2:9d:71:74:c7:7d:cc:4d:86:a0:84:35:24:40:
         ee:17:07:0a:9c:3f:57:ce:07:17:a1:fe:f6:82:b1:5b:cc:20:
         3a:7c:2f:9e:f8:ec:cb:1b:7a:be:75:07:64:1b:69:a8:5e:cd:
         c0:db:d8:7c:31:39:94:d1:3d:76:16:29:1e:f6:7a:98:dc:10:
         4f:5c:2c:73:03:4a:0a:b6:3a:43:26:f0:36:f9:90:c1:c7:39:
         85:7e:ac:55:7e:f8:40:19:06:3b:42:bb:e2:a0:27:cb:4c:ec:
         60:17:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:35:37 2024 by rpki-client on console-ams.rpki-client.org