Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.mft
File:                     RzErKAdMuN-tFVF4yiVL209ecRo.mft (raw, json)
Hash identifier:          Np3vcSko/D8PQj/+t3HNpspg6+5aAyfDiwdagRxfCsI=
Subject key identifier:   62:8D:57:1F:4B:5E:93:DC:D9:C2:17:99:6D:E2:0C:FE:C5:A1:D9:FD
Authority key identifier: 47:31:2B:28:07:4C:B8:DF:AD:15:51:78:CA:25:4B:DB:4F:5E:71:1A
Certificate issuer:       /CN=47312b28074cb8dfad155178ca254bdb4f5e711a
Certificate serial:       018F8891FD13FA5A3B277E86C73B9AEB005F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzErKAdMuN-tFVF4yiVL209ecRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.mft
Manifest number:          0541
Signing time:             Fri 17 May 2024 22:00:19 +0000
Manifest this update:     Fri 17 May 2024 22:00:19 +0000
Manifest next update:     Sat 18 May 2024 22:00:19 +0000
Files and hashes:         1: RzErKAdMuN-tFVF4yiVL209ecRo.crl (hash: pss59eXWeqVrjzlPJpebUMMzyzTTBFarK0ldSnoH+4M=)
                          2: _E2V2vz2AAs8KhmFZGJjH5lTfXE.roa (hash: 1d20XyUZKGmckyCYD4ACHe3usZoInjqMI+DMTqpGIOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzErKAdMuN-tFVF4yiVL209ecRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:fd:13:fa:5a:3b:27:7e:86:c7:3b:9a:eb:00:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47312b28074cb8dfad155178ca254bdb4f5e711a
        Validity
            Not Before: May 17 22:00:19 2024 GMT
            Not After : May 18 22:00:19 2024 GMT
        Subject: CN=628d571f4b5e93dcd9c217996de20cfec5a1d9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:0d:31:ac:b9:5a:8e:87:7d:9b:fb:66:9c:
                    f7:01:14:5b:cc:30:a2:87:1e:2b:61:ef:3a:2c:ab:
                    90:55:13:24:21:a7:81:7c:1e:50:7e:a1:cf:1d:2e:
                    1f:7d:dd:85:55:8b:77:b6:99:7c:e9:48:a3:e5:a1:
                    fa:74:04:8e:c0:6e:43:5a:ac:fb:c1:8d:59:f3:f3:
                    7a:ef:11:67:90:09:ff:a9:43:6e:e6:2e:9c:04:72:
                    f9:42:b0:a2:24:aa:31:83:14:89:8c:ab:eb:e3:fd:
                    1f:ea:7c:44:4e:a7:28:ab:cc:9f:59:ec:02:b1:f0:
                    c5:76:e1:97:bc:29:d4:5c:90:79:2c:34:b2:72:fc:
                    b0:86:e5:39:5b:b6:42:5f:56:ba:ae:f6:21:35:29:
                    25:ad:37:09:66:c6:05:67:90:5b:ca:bd:81:9a:b9:
                    7d:a4:d1:9a:57:10:18:16:bb:5f:c4:a4:55:7e:53:
                    a1:e0:d4:ab:c7:c5:f7:2a:12:3b:f4:c8:98:ba:d6:
                    e4:93:63:04:cd:94:db:25:ca:ce:00:f9:96:68:e8:
                    c3:12:65:d8:36:15:a0:77:e0:41:66:db:ef:9e:50:
                    92:b7:52:e1:1f:ea:83:f6:ef:50:a0:18:0d:21:15:
                    81:6c:00:e4:52:81:d6:92:d9:5d:31:2c:da:15:e7:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8D:57:1F:4B:5E:93:DC:D9:C2:17:99:6D:E2:0C:FE:C5:A1:D9:FD
            X509v3 Authority Key Identifier:
                keyid:47:31:2B:28:07:4C:B8:DF:AD:15:51:78:CA:25:4B:DB:4F:5E:71:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzErKAdMuN-tFVF4yiVL209ecRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b3:08:a6:99:88:82:82:d4:65:3f:71:aa:36:3e:91:de:27:
         ee:80:41:75:80:28:4c:82:ed:c8:61:ee:00:38:d6:47:d8:95:
         1c:2c:a3:32:c9:50:e1:af:48:c1:8a:90:c1:48:72:b4:83:69:
         90:1d:a7:d4:b9:77:69:0a:5c:45:54:d2:75:cd:64:91:72:bb:
         ce:65:33:f7:13:2c:12:9f:e1:dc:b5:8a:fb:93:56:ca:c4:15:
         f6:31:fb:07:02:fb:87:dd:1c:6d:58:c9:0e:f9:47:b6:76:57:
         af:96:53:ec:e2:bb:4c:92:4c:f2:3c:96:76:c3:40:63:5e:25:
         1d:62:46:a2:ac:be:29:69:9f:d9:84:58:42:0c:38:00:42:a7:
         5e:4f:5d:60:55:cc:90:4b:3a:12:01:e4:b5:34:72:71:f5:3a:
         02:f6:4d:af:83:d7:7c:44:b0:d6:1b:97:24:66:42:40:27:32:
         db:f3:ef:7f:bf:fd:93:28:5c:6b:ab:80:f8:6d:41:f1:f4:2a:
         20:eb:3a:7f:fa:51:c1:0b:85:c4:18:b1:4c:82:33:bd:64:ca:
         3c:7a:0e:fb:81:fc:d8:07:52:c2:29:27:14:09:b7:bf:53:e1:
         21:1a:a8:86:a3:7b:78:33:60:8f:86:60:e8:79:2e:27:d1:52:
         67:18:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:25 2024 by rpki-client on console-fra.rpki-client.org