Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File:                     ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier:          oeE74lERxM58ZetGj0KA5LkkvdkFTQIIPROu4t5gWiQ=
Subject key identifier:   C4:41:3E:F2:5E:67:42:13:10:CF:CA:AF:14:5A:EF:49:EB:07:DD:2E
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer:       /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial:       018F86A3B9B21BE6A0C0E7C9DED06B0BB4E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number:          0A5B
Signing time:             Fri 17 May 2024 13:00:27 +0000
Manifest this update:     Fri 17 May 2024 13:00:27 +0000
Manifest next update:     Sat 18 May 2024 13:00:27 +0000
Files and hashes:         1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: fd0hi9XAFSrKzfeWhjyI2q5Y0Apo+RwyexoA0fUoz5E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:b9:b2:1b:e6:a0:c0:e7:c9:de:d0:6b:0b:b4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
        Validity
            Not Before: May 17 13:00:27 2024 GMT
            Not After : May 18 13:00:27 2024 GMT
        Subject: CN=c4413ef25e67421310cfcaaf145aef49eb07dd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:36:b7:d7:f2:c8:63:fa:d6:9e:3f:6f:fe:
                    f9:9a:c1:fd:66:10:d3:79:d2:a0:bd:d3:e5:6c:fa:
                    7b:b6:00:90:0a:75:ea:f2:b1:d3:1c:88:ac:c1:da:
                    ff:c6:a8:12:90:e0:86:31:f2:4d:fd:c6:5f:2b:2e:
                    38:c9:ba:e3:92:90:06:b0:2b:25:15:0c:4b:4b:0d:
                    77:89:69:2e:47:46:b5:07:e0:d9:c7:5a:56:42:4b:
                    5b:22:53:60:68:c7:f1:8e:a6:99:db:44:e4:d0:73:
                    43:b1:33:29:94:82:c8:6c:2e:1e:f6:6f:6e:59:d5:
                    a2:81:be:c0:9e:93:12:92:ae:77:b5:4f:4f:87:4a:
                    c0:16:74:ab:af:40:f1:e1:fa:58:5d:13:5e:2d:f1:
                    77:39:7e:64:d7:ff:de:ed:56:4e:97:70:02:5e:6a:
                    16:09:7b:b9:0b:05:5c:33:25:62:67:2d:15:a9:ea:
                    82:e6:bb:57:c7:c6:47:a8:b2:91:3e:31:3d:bb:37:
                    db:bf:50:bc:20:f9:28:09:03:0f:bb:2b:14:4f:97:
                    31:9f:9c:8a:f6:02:b6:aa:5c:cd:76:53:4b:b5:00:
                    ed:5b:60:70:f2:3f:ee:88:e3:f2:b1:77:49:d0:6f:
                    13:4e:da:bf:aa:a8:72:9b:29:6f:b3:ac:09:ba:d7:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:41:3E:F2:5E:67:42:13:10:CF:CA:AF:14:5A:EF:49:EB:07:DD:2E
            X509v3 Authority Key Identifier:
                keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:78:3c:84:91:3e:30:1a:15:85:b9:3b:86:42:2f:14:aa:4d:
         6a:1e:18:95:c4:04:95:8b:04:4a:99:25:c7:ee:75:49:7f:f3:
         81:70:5a:c4:67:e6:fe:a1:8b:ca:fa:ba:ef:0a:5c:b2:39:13:
         31:51:ae:3d:7e:bc:80:4a:cf:52:eb:39:9f:a8:dd:05:9c:79:
         27:60:9e:6e:33:e5:36:67:b6:42:c9:38:7d:53:a8:bc:11:d5:
         fb:e7:79:e3:e8:31:0f:7e:5e:9a:06:b6:55:aa:47:01:f5:5c:
         c5:47:98:38:45:ff:78:6b:8f:62:ed:4a:dc:98:6d:c2:5a:12:
         e2:34:e3:e0:6b:55:65:73:99:a1:88:b1:37:f9:41:30:65:ec:
         64:50:c3:f0:31:0a:f6:3d:e5:2b:99:f3:ed:7d:b0:42:a5:6e:
         1f:0d:d7:61:6b:b6:b7:21:f1:65:85:01:43:57:04:e4:85:d0:
         a0:a7:ef:c9:fe:8a:ee:ea:29:31:c3:a3:d4:46:2f:58:5e:1c:
         89:23:03:70:d4:10:b9:85:ba:44:1f:d2:2c:bb:52:a9:1a:d9:
         cf:1c:99:73:b3:10:27:ba:55:68:e4:98:8f:f2:2e:cb:7c:cd:
         d0:60:81:78:31:eb:8f:58:af:d3:b6:35:36:ff:3c:03:53:47:
         61:d7:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:56:20 2024 by rpki-client on console-ams.rpki-client.org