Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File:                     2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier:          b4oJ9Af3pL4Dq/9M9oxyiFqE1SYhmqmT6TtVOnWEm+U=
Subject key identifier:   60:C8:DB:48:FF:FB:99:CC:2C:6A:4E:50:89:B4:31:1C:38:F7:8B:6F
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer:       /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial:       018F551441B4858A57514B36B2AC90EDC893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number:          083F
Signing time:             Tue 07 May 2024 22:02:21 +0000
Manifest this update:     Tue 07 May 2024 22:02:21 +0000
Manifest next update:     Wed 08 May 2024 22:02:21 +0000
Files and hashes:         1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: WVWkzuee3uTZBq9w2TF0+W4Ya696EdXwMmTcNw0cFgQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:14:41:b4:85:8a:57:51:4b:36:b2:ac:90:ed:c8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
        Validity
            Not Before: May  7 22:02:21 2024 GMT
            Not After : May  8 22:02:21 2024 GMT
        Subject: CN=60c8db48fffb99cc2c6a4e5089b4311c38f78b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:3b:d1:6b:be:13:75:c3:b6:14:d8:92:c6:
                    b6:c2:08:bd:26:78:f8:3a:3f:40:70:2c:69:75:dc:
                    59:53:82:3c:11:f3:3c:75:4c:33:bc:cc:bc:85:64:
                    b3:e9:ce:8e:20:d3:ed:4f:58:d4:28:74:a3:a5:d1:
                    e9:0b:d8:0b:73:14:79:f7:15:02:93:b9:e5:f2:ba:
                    43:72:b4:1b:8c:c5:4c:7f:3a:75:90:06:7a:7e:3f:
                    92:21:9e:05:69:80:73:95:28:71:4a:89:6e:62:ea:
                    58:b0:16:60:a9:78:d9:b7:7a:46:9f:4c:23:66:65:
                    b9:7b:21:f2:ec:83:31:af:63:94:9d:8f:b2:3e:cf:
                    67:94:0c:2d:63:65:a9:92:1a:d0:f0:44:ff:e1:d5:
                    de:e9:ba:ac:3c:2a:0a:9e:9f:29:48:ab:b3:44:48:
                    9b:3d:e5:2c:9d:ea:ea:7c:fc:b9:2b:60:58:07:c7:
                    c1:db:56:40:e1:01:dc:63:f8:27:33:88:2b:09:62:
                    f6:d4:6d:a2:bd:95:91:95:88:2b:37:1f:b8:9e:74:
                    f8:62:38:31:72:25:58:da:d1:59:14:de:f1:94:b4:
                    de:e7:d1:f8:2e:f4:5f:2d:ea:48:d3:ed:58:30:7a:
                    2a:66:2f:b4:31:d8:5a:a4:fa:d7:41:5f:54:f6:bb:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C8:DB:48:FF:FB:99:CC:2C:6A:4E:50:89:B4:31:1C:38:F7:8B:6F
            X509v3 Authority Key Identifier:
                keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:9b:10:2e:04:48:88:0c:0f:a1:74:26:2e:9b:b0:7f:2d:
         6a:92:98:5e:d9:1d:7a:3c:34:61:2f:80:43:c8:2e:c1:a3:6a:
         32:32:b7:36:e5:80:df:bd:94:80:72:4a:5f:14:39:48:4a:ce:
         0f:41:7d:a7:03:1a:cb:9a:59:a6:79:5f:99:b0:ad:2b:fd:b2:
         eb:e2:17:9e:71:e0:2c:60:88:a8:a1:a6:f1:65:8a:5a:8e:e4:
         d1:3b:df:1b:bb:08:34:c7:61:8c:99:87:f8:9f:17:ae:5e:42:
         d8:76:db:ff:f6:e5:b1:c3:41:4a:f5:72:b4:fc:80:ee:83:2c:
         12:72:16:7d:5d:58:8e:20:c8:4c:57:2d:06:86:74:d7:92:6b:
         82:d9:cd:fd:27:0c:fd:66:9d:7e:d9:a9:d1:75:fe:d3:41:0b:
         00:67:a4:ec:23:e3:71:15:e1:21:36:ea:fe:d0:a5:58:26:c8:
         54:ee:b3:f9:5e:68:1b:78:71:93:10:06:45:53:10:8f:5b:93:
         e9:11:48:d5:27:4f:91:ed:ec:5c:19:1d:b5:41:b7:f9:d2:41:
         64:f4:19:0d:5a:f8:c5:9b:cb:71:da:72:83:f7:4f:eb:1a:ce:
         17:60:ff:b4:33:53:d8:b4:0e:3c:cb:17:79:de:58:d3:20:24:
         30:37:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:26:01 2024 by rpki-client on console-ams.rpki-client.org