Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
File:                     zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json)
Hash identifier:          Ogsg3PPeJSqbe7b5/XZI9ziJ9r/sswxHdO1WH5vTDqs=
Subject key identifier:   35:7E:0F:08:63:43:76:37:6A:7F:EA:6E:25:3A:81:9E:69:46:8D:55
Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
Certificate issuer:       /CN=cda104577266ec9b146736c8cc9da7366b1d9781
Certificate serial:       018F87B63ACA73AFE318ABB65628B4C9E0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:17 +0000
Manifest this update:     Fri 17 May 2024 18:00:17 +0000
Manifest next update:     Sat 18 May 2024 18:00:17 +0000
Files and hashes:         1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: Qi4T2GdXC8H8KNQHsgciKUepxU4LCKgmZPyXWZGukcI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:3a:ca:73:af:e3:18:ab:b6:56:28:b4:c9:e0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781
        Validity
            Not Before: May 17 18:00:17 2024 GMT
            Not After : May 18 18:00:17 2024 GMT
        Subject: CN=357e0f08634376376a7fea6e253a819e69468d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:49:05:6e:e3:64:67:b7:80:da:67:47:a8:
                    87:51:3f:0b:27:12:b2:dc:04:20:73:2c:9e:2c:bc:
                    9a:51:06:c2:bc:7d:38:bf:32:10:18:e6:74:6b:da:
                    f1:5d:ce:50:4a:20:0f:50:ba:73:12:5a:7d:ac:ca:
                    91:81:b0:f1:64:62:91:08:8e:dc:79:13:c8:63:ce:
                    93:a9:e5:11:d6:62:39:fd:fd:d9:f2:5a:6e:92:e0:
                    c3:14:9f:98:e7:06:45:38:a9:26:49:27:d1:55:62:
                    c1:ad:fd:42:cf:3a:e1:af:a1:bd:02:81:a4:54:6d:
                    1a:1a:af:ab:c9:cc:2b:99:d2:76:32:10:26:39:75:
                    93:7f:b0:e1:f5:9f:88:0c:3b:fc:48:e0:3a:45:2a:
                    52:cb:c4:f0:91:a2:72:78:c5:77:0d:1c:d5:5a:d7:
                    52:bc:40:22:67:64:65:9e:aa:8d:b2:4a:a3:37:8f:
                    ae:7e:aa:ca:86:9d:ab:34:0b:05:ef:48:fd:15:82:
                    f1:ba:2a:a5:c6:19:8e:59:b0:3e:67:60:1d:63:42:
                    24:88:cc:06:eb:e0:90:49:07:01:72:72:a7:33:1e:
                    a5:0b:6a:35:ec:74:da:dc:0e:9b:92:a8:b2:92:00:
                    6d:0d:8a:a6:be:f7:4f:77:49:94:06:63:55:41:8f:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7E:0F:08:63:43:76:37:6A:7F:EA:6E:25:3A:81:9E:69:46:8D:55
            X509v3 Authority Key Identifier:
                keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:07:72:fd:b5:6c:8f:55:aa:f2:46:46:f7:36:56:aa:fe:4f:
         47:2c:b3:d5:3d:53:d0:b1:65:4a:00:ca:50:86:3b:67:6b:89:
         f8:3b:f9:8f:c6:be:0c:5d:e6:a7:4a:db:2d:fc:f4:bb:d1:45:
         1e:b2:25:ab:c4:46:1c:7c:a4:6e:45:e5:3a:f4:85:04:d1:50:
         4e:e6:f0:fa:fc:1e:f3:bd:f6:9d:79:25:81:28:b9:05:80:33:
         8c:1d:39:22:fe:c0:d1:6b:1c:d3:cd:5d:4a:97:71:49:23:04:
         18:72:18:e0:aa:a4:a3:f6:39:b4:c9:4f:41:67:0f:a9:50:01:
         fd:09:b2:40:46:db:a8:12:ce:6b:33:b8:0b:1f:49:78:f5:a2:
         3f:d8:5c:3f:d9:9c:1c:f1:e9:8a:80:14:f4:46:2d:9e:ef:c0:
         c1:9c:ca:2e:02:6f:e0:da:0d:4d:14:6a:94:2a:64:06:6a:61:
         20:69:31:48:45:fa:77:67:f1:2f:3b:57:08:33:16:54:8e:19:
         cf:b3:1f:8a:0f:ab:61:39:3e:51:f5:88:2a:8b:63:14:07:07:
         f8:a9:c4:14:4f:eb:e7:2b:d8:25:d3:44:ba:58:f3:b7:f8:88:
         22:b6:de:a7:aa:ce:07:0b:2d:ff:7f:05:53:b7:c8:ee:26:4a:
         53:fd:ed:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtjrKc6/jGKu2Vii0yeDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTEwNDU3NzI2NmVjOWIxNDY3MzZjOGNjOWRhNzM2NmIx
ZDk3ODEwHhcNMjQwNTE3MTgwMDE3WhcNMjQwNTE4MTgwMDE3WjAzMTEwLwYDVQQD
EygzNTdlMGYwODYzNDM3NjM3NmE3ZmVhNmUyNTNhODE5ZTY5NDY4ZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHNJBW7jZGe3gNpnR6iHUT8LJxKy
3AQgcyyeLLyaUQbCvH04vzIQGOZ0a9rxXc5QSiAPULpzElp9rMqRgbDxZGKRCI7c
eRPIY86TqeUR1mI5/f3Z8lpukuDDFJ+Y5wZFOKkmSSfRVWLBrf1Czzrhr6G9AoGk
VG0aGq+rycwrmdJ2MhAmOXWTf7Dh9Z+IDDv8SOA6RSpSy8TwkaJyeMV3DRzVWtdS
vEAiZ2RlnqqNskqjN4+ufqrKhp2rNAsF70j9FYLxuiqlxhmOWbA+Z2AdY0IkiMwG
6+CQSQcBcnKnMx6lC2o17HTa3A6bkqiykgBtDYqmvvdPd0mUBmNVQY9FvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV+DwhjQ3Y3an/qbiU6gZ5pRo1VMB8GA1UdIwQY
MBaAFM2hBFdyZuybFGc2yMydpzZrHZeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYt
NWZiMDlmMjFjNjA3LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYtNWZiMDlmMjFjNjA3
LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQdy/bVs
j1Wq8kZG9zZWqv5PRyyz1T1T0LFlSgDKUIY7Z2uJ+Dv5j8a+DF3mp0rbLfz0u9FF
HrIlq8RGHHykbkXlOvSFBNFQTubw+vwe8732nXklgSi5BYAzjB05Iv7A0Wsc081d
SpdxSSMEGHIY4Kqko/Y5tMlPQWcPqVAB/QmyQEbbqBLOazO4Cx9JePWiP9hcP9mc
HPHpioAU9EYtnu/AwZzKLgJv4NoNTRRqlCpkBmphIGkxSEX6d2fxLztXCDMWVI4Z
z7Mfig+rYTk+UfWIKotjFAcH+KnEFE/r5yvYJdNEuljzt/iIIrbep6rOBwst/38F
U7fI7iZKU/3tSQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:07:16 2024 by rpki-client on console-ams.rpki-client.org