Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft
File:                     zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft (raw, json)
Hash identifier:          NKS5Qv/bShJT8i9FdI+lkgzu0E2Caywmu7h+NxtptlE=
Subject key identifier:   AA:5B:F9:76:03:2A:FB:98:7F:EB:6A:7D:1D:1F:8A:13:1C:7D:78:B1
Authority key identifier: CD:83:FD:52:ED:82:70:F9:F3:A7:78:18:9B:9B:69:22:5E:24:8A:45
Certificate issuer:       /CN=cd83fd52ed8270f9f3a778189b9b69225e248a45
Certificate serial:       0190332BC11B3254260D50CFB8B45B644C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYP9Uu2CcPnzp3gYm5tpIl4kikU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft
Manifest number:          0D84
Signing time:             Thu 20 Jun 2024 01:03:43 +0000
Manifest this update:     Thu 20 Jun 2024 01:03:43 +0000
Manifest next update:     Fri 21 Jun 2024 01:03:43 +0000
Files and hashes:         1: zYP9Uu2CcPnzp3gYm5tpIl4kikU.crl (hash: sNrl4e/lNOwkhOVb2PRQi5V4Nh96JDkSjcUDSzrldMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zYP9Uu2CcPnzp3gYm5tpIl4kikU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 01:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:2b:c1:1b:32:54:26:0d:50:cf:b8:b4:5b:64:4c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd83fd52ed8270f9f3a778189b9b69225e248a45
        Validity
            Not Before: Jun 20 01:03:43 2024 GMT
            Not After : Jun 21 01:03:43 2024 GMT
        Subject: CN=aa5bf976032afb987feb6a7d1d1f8a131c7d78b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:2e:2a:5f:a7:1f:36:80:57:90:6f:3d:67:
                    9e:f0:63:c2:83:65:1f:27:bb:a1:7c:59:bd:7d:b2:
                    f8:09:01:24:75:cf:9c:d1:c4:85:41:9c:7a:e6:d5:
                    81:de:06:f0:4c:87:4e:6c:12:1e:28:41:2e:ed:ac:
                    72:c5:f1:eb:c2:95:81:5a:9e:7b:ca:b1:60:6c:81:
                    a0:62:76:96:3b:02:66:47:17:e6:dc:0d:65:9d:79:
                    9b:46:20:f7:ab:76:9b:bc:68:a4:34:c8:de:21:e3:
                    4b:13:67:42:a7:84:2f:42:5f:b4:bf:64:96:dd:53:
                    f0:03:a1:ac:13:13:f3:47:ee:50:dc:d3:6d:f0:91:
                    20:1b:04:b6:4c:58:38:bd:59:f7:0d:80:b5:41:56:
                    e7:2b:42:7e:06:e2:22:41:94:9e:82:3b:4e:33:f5:
                    fd:c0:b1:3b:f1:dd:63:b5:fc:8c:bc:01:56:6a:04:
                    b4:10:0b:4f:ec:cd:d8:42:43:0f:37:75:14:41:93:
                    23:ca:0b:11:f2:7a:bc:ce:8c:0d:df:5b:0b:52:a0:
                    c1:66:78:40:67:10:e4:ed:a4:dd:bd:28:13:6a:62:
                    fb:11:17:f0:7a:56:ae:b8:34:a8:fc:15:7a:63:b6:
                    42:e4:8e:05:d9:f1:4b:15:13:98:cc:db:5b:be:47:
                    3a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5B:F9:76:03:2A:FB:98:7F:EB:6A:7D:1D:1F:8A:13:1C:7D:78:B1
            X509v3 Authority Key Identifier:
                keyid:CD:83:FD:52:ED:82:70:F9:F3:A7:78:18:9B:9B:69:22:5E:24:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYP9Uu2CcPnzp3gYm5tpIl4kikU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:2c:be:db:e6:ee:1e:6f:af:d5:f7:d5:66:44:e5:d0:bb:
         78:84:c7:3c:d0:01:16:04:91:cc:72:02:a5:cf:8c:27:d4:67:
         a9:1d:35:21:34:e7:31:ac:25:5d:29:e9:fa:67:2f:da:17:08:
         1d:ef:54:c1:50:ac:6d:05:23:ba:1d:b3:15:e6:77:e7:73:45:
         fa:38:e4:5e:bd:89:e6:a1:b5:08:91:a8:12:b6:b9:8e:82:d5:
         0d:35:31:97:e3:db:06:d9:8a:d6:32:7b:33:80:6b:f3:e5:9a:
         2b:00:30:ca:5d:60:6c:72:dc:4a:50:9c:ba:21:c5:a3:c7:91:
         8b:a4:10:ad:b9:c6:e5:09:6e:58:1b:d4:57:27:bb:2b:a6:fc:
         71:e1:a1:b6:2d:10:87:56:8e:55:6e:75:1e:f5:cf:29:2d:05:
         29:2f:a0:33:42:e0:91:46:42:45:1e:d2:f5:a3:4f:e4:4a:48:
         af:74:03:d8:65:0d:33:ca:ed:1b:a7:d3:31:6c:ca:30:67:8f:
         31:f2:85:53:c6:c5:29:c3:73:89:56:95:14:a1:e0:0f:20:0b:
         93:75:15:60:4f:0c:66:00:fa:88:b4:f7:0d:8e:2e:39:3b:a7:
         19:30:0d:f0:da:1c:34:da:da:4b:6d:7a:8a:0e:44:ca:7b:f1:
         3e:49:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:56:13 2024 by rpki-client on console-fra.rpki-client.org