Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File:                     ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier:          keTzUgI7sOJzb6clglSs+uxaIj/v3NierItGtmGKHWI=
Subject key identifier:   78:A6:0C:A7:0F:C7:79:A4:9F:15:E2:05:69:4E:8B:A4:B6:B3:9C:E8
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer:       /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial:       01901BFC66B2C2D86F0A6F839C89A65EE9FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number:          0372
Signing time:             Sat 15 Jun 2024 13:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:44 +0000
Files and hashes:         1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: GjLwvze9LXfjTShHgktVa/pz7doMV6tWYJARlKE7Fa8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:66:b2:c2:d8:6f:0a:6f:83:9c:89:a6:5e:e9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
        Validity
            Not Before: Jun 15 13:00:44 2024 GMT
            Not After : Jun 16 13:00:44 2024 GMT
        Subject: CN=78a60ca70fc779a49f15e205694e8ba4b6b39ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:30:b9:47:fd:e1:7b:00:46:ce:22:bb:ba:
                    a3:5b:51:6d:6d:c3:9d:4f:7b:8e:e9:c8:ce:d8:be:
                    b4:f8:66:e6:20:ff:e2:e8:62:de:00:8d:34:94:6b:
                    c7:6e:9c:b9:db:7e:87:c5:44:a4:b1:e6:67:8d:ce:
                    f9:e9:98:9a:ee:70:73:06:ac:c0:1a:7b:cc:6c:24:
                    13:ae:56:90:63:18:e1:23:af:36:a4:28:60:2f:3e:
                    03:43:99:33:6b:79:4a:57:f3:c9:3e:35:af:2f:22:
                    35:c7:86:d9:78:95:d4:dc:cd:be:6e:34:06:8c:b1:
                    99:cc:bc:b2:44:9e:4c:a4:20:37:fe:2b:36:c7:10:
                    ff:fc:7d:b9:08:14:3c:ca:5f:6e:99:ac:36:ae:59:
                    93:ba:8d:91:9f:56:8f:c3:68:69:fa:f0:36:f3:40:
                    21:96:74:39:ef:30:2e:68:13:e5:16:d8:fa:85:63:
                    e5:92:a7:29:33:44:b5:18:b3:02:cb:3b:17:6d:4d:
                    41:92:b7:05:35:16:d4:8b:29:56:3c:23:45:12:95:
                    bf:6b:a8:20:ba:28:23:b4:31:cb:22:79:0f:c8:bb:
                    4f:74:99:4c:ac:c4:15:80:e1:e7:22:77:d3:e5:09:
                    20:69:c9:ec:5c:fd:9d:4e:07:f8:e0:b6:13:dd:19:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A6:0C:A7:0F:C7:79:A4:9F:15:E2:05:69:4E:8B:A4:B6:B3:9C:E8
            X509v3 Authority Key Identifier:
                keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:5a:03:d8:3c:90:f6:ed:bc:9e:3b:13:92:58:df:5d:ac:
         3c:35:15:8c:c6:cb:a7:da:d4:16:1a:bb:60:b9:fc:f9:5e:3b:
         7f:8d:4c:72:9e:b9:de:da:81:0b:57:55:2e:04:93:83:c0:43:
         28:9d:7e:10:1c:8d:df:cb:e8:0c:40:7e:c2:d9:5a:10:d5:e7:
         99:d9:a2:b1:01:5f:2d:04:ae:d8:c0:f9:d0:1c:80:04:34:d3:
         18:d6:8a:35:86:1b:32:4b:21:ee:49:e3:e2:59:49:7c:c3:04:
         1c:4e:2e:3e:69:4b:35:95:80:c5:87:c9:22:54:bd:14:d7:3a:
         b3:02:9c:4a:27:b4:d6:2c:f3:85:87:84:b1:b9:e2:f6:ed:44:
         84:2d:13:73:14:b5:a1:38:46:a4:67:17:09:d9:ee:33:3c:ed:
         2d:37:e0:60:ad:d8:99:9a:00:8b:64:ac:51:14:ad:de:04:cd:
         58:3b:b6:91:a7:8d:a9:54:ee:f2:e6:74:00:2c:39:c2:55:37:
         70:8f:e1:13:ab:92:5b:2c:7e:3b:1d:dd:ac:59:39:ec:f7:38:
         e8:c6:14:b9:78:fa:f5:0b:9e:3c:66:06:83:45:d6:8c:4c:07:
         2c:bd:46:72:a3:e2:44:93:1d:62:96:2b:e1:52:9b:18:03:17:
         2d:4c:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:52:44 2024 by rpki-client on console-ams.rpki-client.org