Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File:                     zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier:          aE5OYg+/CRFxhIDf3HKqJhJDwDUroSskRtY/48sEsOE=
Subject key identifier:   3A:0E:48:72:E1:AF:7A:55:4D:FC:BA:5E:0D:DA:D8:4C:43:8C:36:7C
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer:       /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial:       0190448A83BE4027E5A6B75D003E6B8D8DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number:          0B7B
Signing time:             Sun 23 Jun 2024 10:00:46 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:46 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:46 +0000
Files and hashes:         1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: GoAi+UQPmkUmXZs01pwOEcbPABB/jsSWHonuMPOA7ws=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:83:be:40:27:e5:a6:b7:5d:00:3e:6b:8d:8d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
        Validity
            Not Before: Jun 23 10:00:46 2024 GMT
            Not After : Jun 24 10:00:46 2024 GMT
        Subject: CN=3a0e4872e1af7a554dfcba5e0ddad84c438c367c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:a1:a1:86:96:fb:50:4a:9c:56:f5:ae:4d:
                    4b:15:60:fa:f7:e2:e3:1c:74:47:07:0e:80:81:ff:
                    8b:aa:bb:be:18:c1:bb:68:7a:84:da:d7:96:77:9a:
                    95:e5:13:14:de:de:5a:a8:51:4d:3e:47:05:14:c8:
                    02:95:54:73:d0:9f:c7:ba:0e:82:7a:67:38:5a:15:
                    aa:43:f8:22:22:f5:1c:d5:9a:03:7f:52:85:5c:ee:
                    fa:da:e2:00:3d:42:be:28:03:2b:35:c6:67:05:28:
                    b1:42:b4:77:76:82:b8:98:ff:cb:05:d6:a4:09:d0:
                    61:ca:f7:56:e4:f7:33:0f:fa:fb:5f:58:fa:96:3c:
                    d6:84:3f:71:e6:23:a0:d1:0c:ce:e8:8a:94:c0:5e:
                    86:b0:01:cc:e7:74:e7:1c:d3:19:c6:81:3b:dd:84:
                    ac:a6:00:cd:d1:fb:bf:a3:7e:b3:3f:3f:8e:7e:a7:
                    1b:89:3e:f2:37:3c:91:8e:3d:77:d9:28:a7:0a:1c:
                    ca:26:82:b7:24:f8:3a:c6:b6:6c:6d:5c:11:be:bd:
                    a9:29:d1:b2:af:7d:c1:96:54:32:2b:83:16:91:f7:
                    25:fb:db:05:52:ff:5f:97:67:ac:fd:92:51:6f:d7:
                    40:de:fe:13:7c:d0:44:5c:af:d2:81:89:0b:3c:47:
                    72:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0E:48:72:E1:AF:7A:55:4D:FC:BA:5E:0D:DA:D8:4C:43:8C:36:7C
            X509v3 Authority Key Identifier:
                keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:12:e8:33:b5:a0:7b:d7:4d:ae:89:e4:37:65:c9:df:bd:65:
         ac:78:dc:d8:2d:46:ed:16:e4:2a:22:0e:53:e6:ed:82:e3:30:
         e5:60:af:24:59:1b:26:88:be:79:2e:ef:79:49:4c:31:83:e4:
         6f:39:f7:98:24:bc:a7:9f:29:66:84:7d:c0:b3:dd:04:8b:84:
         62:51:e7:9b:c7:7d:2f:14:1b:93:2c:bd:4c:24:a3:c2:eb:1a:
         d1:25:85:68:36:03:26:f6:da:bd:61:68:b9:4f:38:11:9e:27:
         4d:a2:c6:22:e6:e9:b1:1c:aa:ff:10:15:f2:cb:93:d6:82:b8:
         69:a7:c1:94:a5:0a:4e:48:ca:14:b1:70:b7:25:51:72:d9:06:
         66:0f:5b:6e:27:49:13:ca:89:70:f1:5e:ad:0a:42:b9:f5:b9:
         38:66:32:06:8e:85:9a:08:5b:a4:ad:5b:5f:4c:9a:51:10:dd:
         c1:b6:dd:70:dc:2e:7f:70:63:74:c6:c1:59:22:4a:66:50:50:
         1d:25:a3:c4:b4:69:40:67:cb:af:e7:7a:f0:3f:28:ad:ce:e6:
         f1:63:d9:b0:bf:4a:09:cc:e2:06:29:d6:7a:4e:d0:f0:c4:c7:
         37:78:f4:de:66:9b:24:20:05:e2:da:6b:5e:5a:4b:bc:ac:7d:
         d0:83:59:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:42:21 2024 by rpki-client on console-ams.rpki-client.org