Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft
File:                     zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft (raw, json)
Hash identifier:          HaDS9yZ8jTSuBTWtU3Oqs3XhpYwf5FDTK7YXzNWCFvk=
Subject key identifier:   F7:DD:3B:87:C4:6C:08:3B:C4:FD:3B:35:5B:37:D1:57:33:3E:D5:12
Authority key identifier: CD:06:DD:8C:F2:33:40:76:2E:0D:82:92:C4:76:07:45:01:F0:46:BD
Certificate issuer:       /CN=cd06dd8cf23340762e0d8292c476074501f046bd
Certificate serial:       018FB2A103B89354E855E02404B64EEE0534
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQbdjPIzQHYuDYKSxHYHRQHwRr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft
Manifest number:          0C85
Signing time:             Sun 26 May 2024 02:00:47 +0000
Manifest this update:     Sun 26 May 2024 02:00:47 +0000
Manifest next update:     Mon 27 May 2024 02:00:47 +0000
Files and hashes:         1: zQbdjPIzQHYuDYKSxHYHRQHwRr0.crl (hash: At4l09CiEye9X25Rdmv9raNtfalNnLu+PNC8KzrEzIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQbdjPIzQHYuDYKSxHYHRQHwRr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:a1:03:b8:93:54:e8:55:e0:24:04:b6:4e:ee:05:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd06dd8cf23340762e0d8292c476074501f046bd
        Validity
            Not Before: May 26 02:00:47 2024 GMT
            Not After : May 27 02:00:47 2024 GMT
        Subject: CN=f7dd3b87c46c083bc4fd3b355b37d157333ed512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:7a:9b:a7:e9:9f:5a:e9:60:f4:e9:20:70:
                    0f:31:98:46:3d:d9:bf:92:10:28:cb:c7:e5:35:09:
                    e7:a5:e1:b6:92:1b:b1:33:69:91:d8:4d:bc:1e:02:
                    04:87:d2:63:0c:02:75:e2:8d:4d:2a:44:c7:91:79:
                    5b:1b:c9:ca:7d:b5:2f:28:fa:11:2c:00:3b:0f:9b:
                    5e:b9:7a:8b:2a:54:b6:dc:3e:5f:f2:69:d1:f0:fa:
                    99:d2:af:90:c5:24:86:c7:86:65:c4:d8:59:cc:bd:
                    f3:d1:51:1b:9b:bc:15:f6:ec:d6:cf:2f:55:75:d3:
                    0d:c4:7a:05:70:3d:73:4b:16:3d:c6:ec:5a:40:89:
                    73:f1:aa:33:3f:e5:3f:a0:e5:75:6e:13:6e:ae:94:
                    25:fb:8b:43:e8:0b:ad:c9:b9:98:ac:d2:1f:54:53:
                    8a:03:36:bd:c0:ca:15:51:dd:b0:bd:23:1d:5c:fa:
                    f7:72:b9:b4:38:df:ca:90:48:37:5d:50:80:12:99:
                    6d:b0:64:41:e1:77:42:18:06:48:76:55:de:8b:56:
                    cd:1f:ad:02:31:c9:d0:0b:b6:2e:f4:ec:7b:92:29:
                    55:aa:78:29:94:fa:c4:58:fd:dd:88:35:fc:85:1e:
                    be:34:2b:10:8d:ed:0e:59:02:da:0b:bb:ef:ea:a4:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DD:3B:87:C4:6C:08:3B:C4:FD:3B:35:5B:37:D1:57:33:3E:D5:12
            X509v3 Authority Key Identifier:
                keyid:CD:06:DD:8C:F2:33:40:76:2E:0D:82:92:C4:76:07:45:01:F0:46:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQbdjPIzQHYuDYKSxHYHRQHwRr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ab:1e:f2:80:57:f2:3b:76:ca:49:11:1d:01:3a:f8:62:ef:
         9e:e2:ba:ab:dc:38:bb:d8:96:83:de:77:e5:51:84:a2:07:1a:
         e3:77:fa:a4:20:a2:2b:3b:56:3b:61:6f:6e:78:2f:58:24:66:
         4b:4c:0b:15:13:2f:25:32:d2:3a:a2:6b:8c:24:0e:73:24:9a:
         70:cf:43:43:64:b4:86:5a:e6:b5:55:38:ac:5a:35:50:37:e8:
         c1:16:a2:10:ed:6d:d8:71:34:bd:ff:0f:25:de:ad:2a:68:71:
         4e:f9:ba:1a:b6:e8:a4:19:d6:de:55:fa:96:93:cf:3c:a6:a9:
         91:89:18:17:54:53:54:77:3b:82:79:ce:ec:e7:82:2a:7b:d1:
         cb:c2:2f:06:76:0b:9e:e7:f0:0c:bd:b1:b8:33:c6:f6:86:30:
         de:e7:81:2b:d1:95:5b:c1:65:9e:0d:ec:24:7f:66:ac:a3:c3:
         1e:12:dd:58:44:02:af:57:d9:ce:59:b1:70:ce:c9:60:68:eb:
         80:b9:19:13:12:aa:c2:0b:a6:f6:4c:59:d7:c5:51:12:99:1d:
         c0:c9:ec:43:95:4a:af:d9:54:09:0e:81:c0:7a:ee:e5:b6:c5:
         8e:cc:81:d4:30:8a:fe:89:d1:06:80:af:f1:f6:d4:8a:67:f3:
         d0:b4:27:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 05:23:18 2024 by rpki-client on console-ams.rpki-client.org