Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File:                     ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier:          PeZHC46sUcqrjGaqePs8BC/I4Z1MKvTK6RFv3/NvbZc=
Subject key identifier:   10:13:5D:0F:EA:24:55:10:66:BD:33:89:7D:3D:7F:FC:9C:9E:25:7F
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer:       /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial:       01901F34923A5D9E9C2F33D8DBD795BB99D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number:          0836
Signing time:             Sun 16 Jun 2024 04:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:57 +0000
Files and hashes:         1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: fG78TSjmtI+1U4KDsaYLRb8OwYWSFkJ+Vjkj0wvqPak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:92:3a:5d:9e:9c:2f:33:d8:db:d7:95:bb:99:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
        Validity
            Not Before: Jun 16 04:00:57 2024 GMT
            Not After : Jun 17 04:00:57 2024 GMT
        Subject: CN=10135d0fea24551066bd33897d3d7ffc9c9e257f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:3a:e1:ef:cb:cd:70:8c:21:78:cf:87:c6:
                    18:8c:a1:80:14:0f:f2:bd:cd:8f:5c:ac:d9:15:95:
                    3b:e2:27:37:c5:ef:98:a4:af:0f:c0:9d:eb:ba:77:
                    e6:1e:26:02:64:c0:6d:11:18:ac:7d:23:d3:a1:59:
                    bd:07:7d:cc:62:fe:d8:02:5e:cf:45:08:1b:51:d3:
                    a6:a9:17:15:88:ba:76:ac:15:3a:97:14:25:6e:7a:
                    ea:6c:0d:95:d1:57:e7:fe:a8:c2:34:e4:7d:88:ad:
                    bf:17:87:f2:89:09:99:0d:6e:85:85:e4:28:b1:6d:
                    00:c4:aa:84:76:f0:d9:cc:f8:8e:fe:13:03:14:59:
                    31:c9:2b:d8:95:76:92:89:6f:c5:39:67:2b:b0:30:
                    23:f5:dd:86:6e:e7:fa:f9:38:e5:19:3d:be:16:69:
                    b9:2c:cf:40:2c:ea:87:ef:07:b9:2b:29:16:ca:7a:
                    37:ec:a7:48:45:44:8b:49:e0:2a:c7:68:0c:4f:44:
                    06:cd:30:11:05:cd:6e:5c:e9:16:da:0b:d1:b2:02:
                    22:b5:d2:e2:a4:54:57:6b:88:a3:e9:12:1d:e3:e6:
                    f8:78:65:38:43:ce:6b:e5:72:3c:aa:06:70:01:ab:
                    fd:46:26:62:25:3b:10:01:a8:3f:9e:83:7a:4c:a5:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:13:5D:0F:EA:24:55:10:66:BD:33:89:7D:3D:7F:FC:9C:9E:25:7F
            X509v3 Authority Key Identifier:
                keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:a3:a8:f0:64:66:8f:9c:0f:96:9c:ff:98:13:16:f6:30:
         48:ea:f4:8c:e5:27:8f:ab:d1:d5:e3:f6:4d:c4:85:10:1c:c6:
         f2:e5:d7:cb:ca:fe:48:6a:18:08:6c:a8:65:eb:be:8e:c0:18:
         b8:eb:67:51:2a:b8:eb:8d:04:4b:7b:13:c7:b6:d0:99:f9:9d:
         b2:20:42:54:98:e4:87:11:e3:2e:68:fb:40:49:2d:c8:ae:ab:
         fe:18:8d:c9:00:7e:b1:3b:50:28:39:ac:ea:27:9c:29:be:cc:
         a5:40:94:24:06:c0:7c:11:2b:c1:8c:7c:47:ff:0a:d8:7b:d6:
         0a:bc:27:23:56:fc:0c:a2:0c:a1:0e:01:9e:4b:70:fb:9d:ec:
         07:2d:d0:eb:6f:cb:6c:ab:57:8c:26:02:11:4e:d7:5e:ba:01:
         47:a9:1a:bf:18:6b:27:fb:31:68:2a:6d:87:a4:02:cf:af:cf:
         db:f3:80:76:9d:41:38:9f:d0:1d:37:0f:95:d5:d3:45:7c:a6:
         71:7c:a6:8d:6c:7b:3b:3f:18:39:d4:76:63:dd:ae:6c:7f:ce:
         cb:52:c5:40:77:07:52:0b:29:ee:d1:70:8f:2a:6a:89:ec:5d:
         24:72:a8:80:3a:b9:d6:8f:26:6d:b6:44:fd:31:7f:bc:20:ae:
         e3:15:60:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:41:43 2024 by rpki-client on console-ams.rpki-client.org