Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft
File:                     zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft (raw, json)
Hash identifier:          4GGluddmRVUeVUMYt8djWqCEfaaRmWyxtWJCwWwAyLU=
Subject key identifier:   EF:BC:A0:27:6A:B4:C8:A9:9C:90:EA:48:B0:F9:5D:14:7A:84:54:B1
Authority key identifier: CD:83:FD:52:ED:82:70:F9:F3:A7:78:18:9B:9B:69:22:5E:24:8A:45
Certificate issuer:       /CN=cd83fd52ed8270f9f3a778189b9b69225e248a45
Certificate serial:       01901BFDDC0BCBF7B8AE75F390F5F848D0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYP9Uu2CcPnzp3gYm5tpIl4kikU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft
Manifest number:          0D78
Signing time:             Sat 15 Jun 2024 13:02:19 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:19 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:19 +0000
Files and hashes:         1: zYP9Uu2CcPnzp3gYm5tpIl4kikU.crl (hash: 8tCdBN+0gSOin3L6vzYdsduWL4vKeopQaMtEF1BoKJc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zYP9Uu2CcPnzp3gYm5tpIl4kikU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:dc:0b:cb:f7:b8:ae:75:f3:90:f5:f8:48:d0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd83fd52ed8270f9f3a778189b9b69225e248a45
        Validity
            Not Before: Jun 15 13:02:19 2024 GMT
            Not After : Jun 16 13:02:19 2024 GMT
        Subject: CN=efbca0276ab4c8a99c90ea48b0f95d147a8454b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:58:4a:b2:06:14:bb:bc:52:02:e8:38:4f:
                    f7:97:4b:45:20:b1:84:39:2b:a4:95:b3:f5:33:89:
                    ce:b7:44:f2:91:d1:92:89:d5:5f:a3:ed:11:4f:71:
                    2d:37:05:8c:ba:9e:48:37:65:27:8f:d7:19:50:9a:
                    65:f2:03:e3:ac:c8:d6:62:5b:a1:1f:be:a5:21:0f:
                    fe:23:1d:ed:be:05:dd:ea:df:11:9e:49:7f:a6:7c:
                    f6:6a:49:50:82:22:23:c2:9d:ac:f2:92:a8:7e:56:
                    21:89:63:44:2b:38:01:e7:59:15:1e:18:f7:a8:1d:
                    ef:28:5d:65:ed:16:a7:ad:63:23:9d:fa:0e:70:cf:
                    0b:1e:49:3f:a9:3c:94:69:c3:67:d1:fd:6e:7d:e9:
                    c1:fe:7b:fa:5d:70:31:52:ad:1c:af:21:fc:b8:30:
                    cd:60:d7:0d:ca:a1:5e:7e:60:8d:40:61:ae:f2:d9:
                    9b:c2:ba:34:1e:72:9c:09:15:6c:97:76:c3:bd:50:
                    74:e8:4a:e4:14:5d:02:1a:52:5f:11:93:bc:c3:23:
                    65:30:49:7c:18:2b:d0:10:c5:be:42:d2:14:8c:3a:
                    6a:a8:57:02:22:65:bc:bd:53:2e:e0:ec:be:0e:26:
                    0a:08:50:d5:a7:f4:0f:b6:3c:56:bc:ac:fc:6d:ca:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BC:A0:27:6A:B4:C8:A9:9C:90:EA:48:B0:F9:5D:14:7A:84:54:B1
            X509v3 Authority Key Identifier:
                keyid:CD:83:FD:52:ED:82:70:F9:F3:A7:78:18:9B:9B:69:22:5E:24:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYP9Uu2CcPnzp3gYm5tpIl4kikU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:58:8d:b7:e1:92:da:98:22:5b:ed:69:3e:24:25:28:41:f5:
         bb:43:3f:e0:2d:cc:bf:f2:a3:8a:33:14:83:12:cc:07:ee:96:
         0a:65:8d:b1:4c:8d:89:2b:29:99:45:38:db:9a:a1:80:a0:63:
         da:e1:61:c1:4c:2a:0e:64:51:99:79:7d:d2:ca:8a:d6:0d:52:
         f2:ba:a7:a8:2e:55:6e:93:c5:fb:f0:eb:13:69:00:51:34:5d:
         fc:88:72:cb:61:25:4a:79:8b:44:c8:db:c9:33:60:b3:29:bd:
         41:84:b8:79:03:2d:6d:2c:79:3d:5b:a2:53:44:70:4a:0b:73:
         b1:3b:f7:7a:59:56:7c:96:40:af:a7:02:c5:5a:96:a6:f7:2d:
         4a:a3:e3:a6:8c:71:8c:e4:c3:88:34:1f:b9:f9:a5:5e:8a:82:
         80:3b:56:42:54:39:f9:38:f0:25:5e:f9:43:52:4a:4c:3f:85:
         38:99:63:29:e9:0e:86:b2:a7:32:42:e7:53:99:c7:49:29:ed:
         8e:07:fa:60:36:ba:ed:8e:10:1d:b0:87:c8:06:68:60:31:72:
         ca:5c:f6:50:a9:fc:9d:83:38:ad:36:76:36:7c:fc:28:2c:45:
         10:99:50:ea:fa:98:36:21:87:37:fc:43:4b:4a:59:94:98:41:
         77:91:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:38:45 2024 by rpki-client on console-fra.rpki-client.org