Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File:                     zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier:          2lIcEAYhjTmisQf/nJ7GDLI9obhG6aQNdi9AyxTv4Ag=
Subject key identifier:   18:A4:E1:69:40:3A:19:C7:97:80:A7:FF:41:56:FE:70:9D:B5:03:98
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer:       /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial:       018F893857A7E2C940E4D47CAC13929910EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number:          0E0A
Signing time:             Sat 18 May 2024 01:02:02 +0000
Manifest this update:     Sat 18 May 2024 01:02:02 +0000
Manifest next update:     Sun 19 May 2024 01:02:02 +0000
Files and hashes:         1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: jZ/dGzukk+heYu/C6ljWwVi9f5lngHn6jR3nAtUaYTM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:57:a7:e2:c9:40:e4:d4:7c:ac:13:92:99:10:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
        Validity
            Not Before: May 18 01:02:02 2024 GMT
            Not After : May 19 01:02:02 2024 GMT
        Subject: CN=18a4e169403a19c79780a7ff4156fe709db50398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:8d:a2:26:cf:69:30:4e:aa:f7:17:52:22:
                    69:ab:2b:16:0a:4e:3c:2c:7e:a0:0e:33:2c:d2:bf:
                    cd:b6:b3:95:0c:c3:81:7a:57:c9:5d:ea:f7:d1:c3:
                    c5:85:c4:05:80:82:97:96:a1:b4:76:f5:61:33:f4:
                    9d:31:40:73:94:05:f4:2c:81:a6:be:47:a2:69:21:
                    c9:7d:40:31:db:d9:71:ff:11:61:05:29:59:c6:f5:
                    38:a7:a1:87:02:9f:3b:01:b7:6a:92:49:e3:05:9c:
                    cd:5e:9d:f5:dd:35:eb:d7:73:62:b1:8f:d0:34:8e:
                    dc:ef:a8:0e:0f:2a:64:7d:41:7d:f7:e2:87:92:79:
                    fb:2f:c3:77:f1:94:54:97:5c:71:cc:cb:2b:74:e6:
                    95:39:4f:7f:7d:35:b0:b1:8c:b7:b6:05:5e:2c:59:
                    37:90:b0:33:3f:6a:d1:26:dc:90:16:64:c5:9c:d0:
                    88:4b:55:61:62:e5:ba:f1:02:7f:98:4e:9a:df:08:
                    32:d3:cf:62:cc:e2:79:ed:e0:0f:85:c4:74:0b:c9:
                    51:02:c3:e1:ba:d0:62:f7:24:eb:6a:f4:b3:54:27:
                    d7:4a:7d:0c:fd:0a:28:20:d5:dd:41:6a:dd:c1:77:
                    76:4b:bc:13:ec:ac:16:5f:d1:b5:56:fe:a4:a1:b9:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A4:E1:69:40:3A:19:C7:97:80:A7:FF:41:56:FE:70:9D:B5:03:98
            X509v3 Authority Key Identifier:
                keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:2f:55:1d:de:db:04:95:af:8c:4d:f7:b0:2a:21:d4:4e:
         80:9e:7c:64:2e:3f:2a:4f:26:73:55:28:5e:ec:5c:18:ff:b6:
         73:82:be:55:4a:0a:65:21:61:fb:8d:84:82:c5:5b:c8:8d:a0:
         d9:fa:c7:d2:c3:ac:11:57:4a:13:b2:74:f7:cd:c2:c2:d8:ae:
         ea:97:d2:3e:a3:67:02:42:09:2f:4b:10:a6:da:98:7a:11:f0:
         23:80:b3:f7:13:4c:8b:3b:ad:14:bb:4d:b0:55:1c:a6:3d:31:
         c4:d4:3d:42:f8:79:38:a0:05:d5:31:d5:a1:60:fd:37:ec:ed:
         09:d0:48:5b:6b:1d:ff:e0:55:d5:5f:c8:1f:b2:52:2b:cd:ae:
         a7:4b:01:28:5f:82:af:53:ba:c4:fe:16:2d:c0:3f:e7:9e:be:
         4a:5b:d5:ea:a1:99:d4:06:69:5c:d7:c8:c0:7b:ef:2a:33:6b:
         88:49:1a:2d:43:d6:0d:4e:cb:4b:47:88:0a:f3:29:ec:25:24:
         e6:18:40:db:57:9f:b8:96:88:2d:b1:65:4d:fd:d1:d8:3e:ad:
         a8:2b:52:60:a0:6e:4a:a2:e3:1b:0d:02:c2:70:67:9b:68:65:
         74:66:38:9e:b9:cc:7c:ea:5c:a4:78:c8:b5:06:34:ba:e8:4b:
         8c:46:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:27 2024 by rpki-client on console-fra.rpki-client.org