Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File:                     FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier:          vR0ipwC92DTc7wlOs1N5HzHrjQnq8go8mtBiaBP0aZA=
Subject key identifier:   4D:F3:EA:D0:B4:F7:3A:66:6F:B0:2F:E0:92:0E:96:2B:57:8A:3D:64
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer:       /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial:       018F3A0BE21066DC183035DD70F8BD3D9870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number:          07D4
Signing time:             Thu 02 May 2024 16:03:28 +0000
Manifest this update:     Thu 02 May 2024 16:03:28 +0000
Manifest next update:     Fri 03 May 2024 16:03:28 +0000
Files and hashes:         1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: lgFJf0JN7MUBoigiG2d6ksr2lgsCpkVD5gfn8ESq/is=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:e2:10:66:dc:18:30:35:dd:70:f8:bd:3d:98:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
        Validity
            Not Before: May  2 16:03:28 2024 GMT
            Not After : May  3 16:03:28 2024 GMT
        Subject: CN=4df3ead0b4f73a666fb02fe0920e962b578a3d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:55:9f:3f:6e:c1:f5:f9:85:fa:e0:f2:b5:
                    17:dc:03:5d:a3:cd:a9:5c:3b:16:e4:fc:cf:2d:54:
                    8a:62:79:97:55:fa:d8:96:f8:02:9c:55:45:00:a2:
                    5f:c9:e4:99:99:99:da:c1:3e:56:60:5e:06:c7:e4:
                    b9:17:55:c9:9e:ef:7b:6d:98:70:1a:66:12:e3:34:
                    0e:26:3b:f6:aa:de:4f:97:0d:bc:aa:3d:a3:2e:4c:
                    b7:74:6d:bd:be:c2:5f:ce:33:97:d6:b4:7f:34:0a:
                    27:b8:b7:db:83:57:23:9e:f0:1e:0f:be:15:60:76:
                    5c:f5:d1:82:cf:85:80:f8:42:e6:d5:d5:37:66:b3:
                    6a:9b:c4:cc:36:82:a2:85:37:7f:84:d9:d8:49:a0:
                    3f:05:0f:b0:79:c6:5c:16:d6:02:01:ee:59:98:42:
                    76:d9:52:d4:45:79:fb:5f:b1:c1:bf:fd:2e:87:47:
                    c1:2b:01:2b:6c:54:5e:bd:e7:1d:45:ca:01:eb:88:
                    c7:3a:b5:3b:a0:2a:0d:0d:8a:9e:aa:4e:c2:ba:63:
                    09:83:fd:1e:41:c8:e3:09:c1:39:3d:61:d3:b3:3d:
                    76:d1:3a:8d:f5:9e:1a:04:54:da:1f:8b:29:a0:82:
                    9d:6c:e7:1c:fd:6b:b2:23:35:58:69:4a:42:38:f6:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:EA:D0:B4:F7:3A:66:6F:B0:2F:E0:92:0E:96:2B:57:8A:3D:64
            X509v3 Authority Key Identifier:
                keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6a:77:10:09:2c:e9:47:34:1d:dd:38:95:0a:b6:2a:de:cb:
         be:bd:2f:72:40:38:bd:0e:24:f3:26:b5:5a:97:69:80:c1:42:
         b9:52:64:0a:02:60:0b:96:76:48:b6:8b:61:c3:3c:ac:c8:69:
         6e:f2:43:c0:cc:d3:36:e0:2c:51:53:0c:a0:6a:b0:c5:bb:a8:
         e4:f1:dc:c3:0c:fa:32:b2:a3:32:ac:32:1b:f0:2a:10:a1:db:
         68:6c:38:a5:a9:48:29:af:35:66:47:4f:f3:90:08:44:14:c6:
         96:ce:38:7b:d0:1c:1e:f7:00:12:99:9a:ec:27:00:64:eb:d4:
         17:0a:5c:40:6c:dc:79:ba:2c:4c:5d:f0:d6:47:01:cf:92:a7:
         08:a2:8e:f8:39:c2:ee:76:bd:cf:0c:48:06:e2:2d:72:2c:be:
         dc:71:07:33:68:4b:ec:8b:2b:5a:1d:49:15:60:75:f7:3a:68:
         61:a3:ac:3d:61:02:7f:a4:be:aa:bd:23:73:aa:21:95:66:47:
         b7:75:d3:49:a8:47:b9:f9:9b:01:33:ee:26:29:05:09:04:24:
         c7:d6:03:1a:67:2a:68:6e:07:fe:96:45:56:66:7b:54:29:55:
         c6:57:ce:70:7e:6a:08:8b:4e:26:88:84:16:2f:8c:8c:69:c9:
         30:05:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:25:43 2024 by rpki-client on console-ams.rpki-client.org