Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File:                     zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier:          pRQLK0YbVzQGXwM9tHf7RK34qEZxdGt0oHPlCbsXPFA=
Subject key identifier:   76:99:02:41:0E:DB:BA:8E:3E:98:13:DA:28:27:C1:FC:3C:C9:68:26
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer:       /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial:       01903AE485E682A1426534BE2FEECEB6431F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number:          07D0
Signing time:             Fri 21 Jun 2024 13:02:53 +0000
Manifest this update:     Fri 21 Jun 2024 13:02:53 +0000
Manifest next update:     Sat 22 Jun 2024 13:02:53 +0000
Files and hashes:         1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: vDXk+Gz4LGaqoLunJfFgz5wIfmPH394c6zILAilISp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e4:85:e6:82:a1:42:65:34:be:2f:ee:ce:b6:43:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
        Validity
            Not Before: Jun 21 13:02:53 2024 GMT
            Not After : Jun 22 13:02:53 2024 GMT
        Subject: CN=769902410edbba8e3e9813da2827c1fc3cc96826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:8f:17:e1:ff:a3:a9:69:d2:29:1c:3c:ea:
                    8c:18:93:98:d3:29:9f:26:15:b7:55:27:75:e6:2a:
                    24:de:21:7b:a7:4b:1c:2d:f0:13:de:8c:9a:0f:e6:
                    39:83:c2:0c:4d:40:35:d8:9a:13:b9:ab:a2:0c:58:
                    12:b7:95:eb:ec:54:dd:ea:34:c9:36:99:b2:83:09:
                    c8:2d:39:49:1e:43:b6:50:68:d8:da:4d:1d:2f:e1:
                    be:82:2d:3d:6f:89:01:c3:5e:7b:39:4e:78:de:70:
                    76:10:9c:d4:12:51:0f:16:4b:85:c2:d0:fc:dd:87:
                    1d:93:33:aa:58:94:5c:bb:11:26:6e:5a:ab:28:c9:
                    a0:c8:46:55:1c:34:1b:37:5e:f7:d0:d0:8c:f7:f4:
                    71:b5:4b:39:7d:99:ca:29:76:f5:9e:53:02:3f:0a:
                    d5:49:00:da:3b:eb:29:28:12:d2:5a:5a:ab:6c:84:
                    22:b4:97:51:ea:c1:49:d7:db:a3:c1:bf:8d:45:89:
                    2e:21:23:52:88:bb:fe:33:c7:96:25:70:b5:8c:05:
                    07:44:d5:80:27:81:4c:7f:b7:db:87:3d:b1:d7:f1:
                    d3:e3:40:a2:19:98:51:0d:59:ec:ec:26:54:b5:b0:
                    fc:25:23:57:a3:06:eb:03:9a:4e:af:0f:0e:f2:ab:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:99:02:41:0E:DB:BA:8E:3E:98:13:DA:28:27:C1:FC:3C:C9:68:26
            X509v3 Authority Key Identifier:
                keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:43:66:5d:a2:b1:4f:d1:84:d4:cb:09:6f:2b:37:a9:76:1f:
         d2:68:09:0b:53:8b:86:44:22:bf:a7:c5:5b:3b:f9:7a:61:f5:
         aa:d2:ef:bf:75:cf:4b:26:0a:f8:b3:3b:ab:d4:ec:98:3b:41:
         92:2f:f7:1f:64:07:7c:47:95:8d:8d:89:f2:87:3e:e9:4e:10:
         72:f4:f1:a9:86:92:4e:4a:bc:d1:61:55:25:82:34:b4:a8:41:
         41:eb:ea:f1:cc:5f:78:52:ac:7c:2c:86:47:55:ef:57:14:43:
         df:bc:e7:d9:eb:a7:08:a8:7d:16:3f:ef:fb:85:34:3f:8b:2f:
         c7:d3:45:c7:3e:e9:e6:67:93:1e:d3:30:30:fd:dd:b4:f4:c8:
         64:47:9b:a2:7b:81:f7:c2:6c:1a:ac:89:4a:d5:1d:f6:89:bd:
         3f:46:07:eb:90:c3:96:59:75:22:91:30:18:12:a0:fe:d0:b1:
         3a:d8:56:72:c4:75:3b:97:a0:6f:40:3f:80:4a:66:74:a5:2a:
         58:b2:84:47:0f:45:48:f9:7c:b5:ed:40:ee:dc:2d:3a:0f:ca:
         56:b4:44:be:83:88:66:ff:2b:07:be:06:fd:9e:73:f3:57:f5:
         d1:ee:54:22:da:11:43:fe:3a:7d:36:6f:91:30:58:d3:f6:fb:
         01:9c:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:55:03 2024 by rpki-client on console-ams.rpki-client.org