Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File:                     ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier:          22XzH0PtNQOTmS2ZIefsWqS9TNGBBeLmRTzDR7KoO8M=
Subject key identifier:   BD:3C:7D:27:07:2F:C0:E0:E4:87:CB:74:E4:E3:26:81:06:3A:32:4C
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer:       /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial:       018F86A3940C0FFB6A575B58629E5EF7F7A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number:          0ADB
Signing time:             Fri 17 May 2024 13:00:18 +0000
Manifest this update:     Fri 17 May 2024 13:00:18 +0000
Manifest next update:     Sat 18 May 2024 13:00:18 +0000
Files and hashes:         1: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: IKfRCU2F+oJeFjqgy9+waeO6BNwXh0+ATTt4Nos0ULs=)
                          2: kCJbmjf4kU16aCbBqdApD1zRGH8.roa (hash: coEqC3nXBFZnJ7Rau2XICXaAoWASb4MuUpy1F+M3QLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:94:0c:0f:fb:6a:57:5b:58:62:9e:5e:f7:f7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
        Validity
            Not Before: May 17 13:00:18 2024 GMT
            Not After : May 18 13:00:18 2024 GMT
        Subject: CN=bd3c7d27072fc0e0e487cb74e4e32681063a324c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:15:44:af:5f:f3:7c:8b:90:9e:96:a5:a6:
                    45:82:3c:ec:1e:18:32:20:f9:49:26:42:97:88:2c:
                    d1:d7:86:5f:bd:44:9e:7d:56:d2:74:3d:68:2d:27:
                    50:c0:74:ba:29:07:ad:30:8e:d0:37:97:27:e4:1d:
                    f7:5f:01:a0:18:b1:7d:94:b8:b7:89:5d:57:92:2b:
                    12:18:6c:d4:dc:c0:c5:d6:4e:b5:ec:a2:56:74:86:
                    62:81:1c:fe:09:68:f8:d7:3a:bb:ec:3a:2f:cc:7d:
                    1e:15:ac:e5:d9:b3:e8:19:4e:d4:25:81:87:5b:20:
                    40:32:db:42:8c:5e:1c:4b:12:a7:89:34:f9:02:25:
                    e1:e3:ab:44:00:f6:04:bc:ec:20:99:3f:17:16:a2:
                    e0:ac:71:0d:3d:80:75:4e:db:f0:45:50:b2:b0:98:
                    61:28:cb:a7:7f:36:bb:ac:3c:ae:14:70:e2:ac:8e:
                    d6:0b:b4:64:e0:71:7f:e1:26:f2:d1:25:03:00:a1:
                    45:ff:cd:c4:5d:97:ee:47:be:71:24:8a:75:97:a6:
                    8f:5e:ad:bd:7c:57:59:c1:d0:70:e1:84:9b:8c:d5:
                    52:b6:c7:de:e2:9f:b0:a2:1f:4a:11:92:af:1d:86:
                    26:c3:e5:c0:fb:85:32:4f:4b:e0:fe:f0:7e:a5:a8:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3C:7D:27:07:2F:C0:E0:E4:87:CB:74:E4:E3:26:81:06:3A:32:4C
            X509v3 Authority Key Identifier:
                keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8d:70:2b:2a:f8:57:b4:04:3e:a0:a0:e1:56:52:be:a0:70:
         eb:65:d9:19:77:52:d3:84:fd:f2:5e:b6:7f:3a:7c:d1:cc:57:
         4e:1c:2a:80:b0:b5:f3:65:31:ba:98:29:5a:c5:22:55:9e:ba:
         02:ab:a9:10:9b:3d:ad:fa:b9:8d:dd:d6:bc:b8:82:0d:ad:92:
         83:14:1e:21:71:97:da:c4:69:01:fc:35:93:ec:cc:02:ac:4c:
         35:d2:96:27:b7:9b:d5:73:59:b8:04:60:86:49:8e:40:6d:a2:
         73:aa:66:e0:a6:4d:4e:d5:31:27:39:79:05:39:06:68:5b:8e:
         3b:80:f3:18:03:92:07:4f:38:68:c1:1c:e6:98:c3:3c:5b:13:
         98:9c:df:f7:40:a7:e9:dc:c0:fc:05:53:3f:0b:52:bf:da:53:
         5f:59:1c:f6:11:34:8e:6c:27:51:8a:d9:cc:c9:74:2d:37:27:
         85:3c:22:e2:69:9c:bf:3d:c3:67:2b:9f:e3:92:f0:c2:e8:0d:
         65:99:69:83:44:fd:32:ba:68:7f:85:10:f7:cc:af:7c:c2:de:
         42:fb:2e:b2:44:e3:8d:5f:9f:63:77:a1:e0:66:53:09:ee:c0:
         bd:ab:00:4c:8c:5c:55:20:a0:3c:f9:ea:52:d4:08:1e:39:b7:
         f6:21:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:25 2024 by rpki-client on console-fra.rpki-client.org