Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File:                     cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier:          Lj8yDvkxWJzhfeuMeVFgx/XWR2i/MFGKJuNw5OP+NE0=
Subject key identifier:   7D:08:89:96:4B:8F:DD:C6:60:AE:D5:75:26:0A:65:3C:CC:AA:62:6B
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer:       /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial:       018F8748AE71A172BC18BDE703AC3F293C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number:          0DC7
Signing time:             Fri 17 May 2024 16:00:38 +0000
Manifest this update:     Fri 17 May 2024 16:00:38 +0000
Manifest next update:     Sat 18 May 2024 16:00:38 +0000
Files and hashes:         1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: lHZ8D2AkY+JSs4MoLONXb34QFl0KixE3dYL+NZU5Ax0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ae:71:a1:72:bc:18:bd:e7:03:ac:3f:29:3c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
        Validity
            Not Before: May 17 16:00:38 2024 GMT
            Not After : May 18 16:00:38 2024 GMT
        Subject: CN=7d0889964b8fddc660aed575260a653cccaa626b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:b7:66:6e:6b:69:06:ea:8c:97:55:8b:70:
                    c1:de:a9:61:b6:0c:f2:11:14:d1:21:ef:d4:5d:cf:
                    d1:d5:83:16:93:9a:02:eb:4f:d5:d5:c0:14:21:3d:
                    f7:bf:f2:ef:2d:c0:2f:71:97:55:9c:53:b0:ef:d8:
                    e5:0b:5c:25:55:a4:59:71:2b:dd:69:57:75:a3:dc:
                    f8:04:62:14:dd:c4:75:9c:51:0a:87:32:fb:c5:9f:
                    cc:37:fc:a9:b6:22:38:fd:30:10:97:c3:4a:6d:27:
                    76:64:d4:f7:92:f4:74:4c:01:f1:a0:dc:23:e7:41:
                    b9:4c:02:ab:25:2e:6f:4b:99:0a:99:1f:a1:4c:8c:
                    cc:73:1a:4a:03:97:18:d5:c1:ee:39:7e:b7:c2:c4:
                    e9:f4:52:f9:a4:77:3c:4e:93:13:16:ab:1a:76:9b:
                    82:02:0b:f6:a1:3a:d6:dd:10:eb:52:0d:2d:73:82:
                    93:42:a3:93:1c:2b:24:14:7b:11:81:d4:c9:b5:bc:
                    15:02:2e:23:94:3d:8d:c5:67:12:6e:e5:ad:f3:7d:
                    ab:81:15:c8:b4:5e:d7:c9:09:ab:b4:13:fb:82:f0:
                    c1:41:2f:20:2c:a9:c9:c0:3c:7e:84:f8:37:fa:2e:
                    31:f6:41:ed:1e:a4:f3:bc:07:07:af:8e:fb:26:79:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:08:89:96:4B:8F:DD:C6:60:AE:D5:75:26:0A:65:3C:CC:AA:62:6B
            X509v3 Authority Key Identifier:
                keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:37:c7:e6:7a:af:a6:ca:81:79:2b:df:48:73:13:9e:47:
         0b:4a:80:99:e3:96:1d:6b:73:24:97:1d:94:bd:d7:5f:ea:c0:
         ca:fb:33:6d:a6:81:19:c3:2d:37:2c:63:0c:b7:18:3e:4e:89:
         72:12:ae:16:a5:61:f9:3b:a5:a1:45:05:be:af:a0:2c:3c:af:
         93:50:91:42:02:b7:b5:dd:f9:c9:23:24:49:50:6b:98:4e:c4:
         a9:12:0b:dd:e6:e8:93:2f:70:2a:ab:04:3c:f0:86:c4:bf:ba:
         4f:97:48:3e:fa:cf:89:fe:77:34:ac:7b:0b:74:62:e7:8e:76:
         52:10:8c:a3:5c:63:5a:44:10:0b:c2:3d:6f:e2:f9:1d:02:b6:
         53:2e:39:49:92:0f:11:55:9b:9c:72:53:6d:1f:2e:f5:5a:7d:
         e4:88:be:b5:9a:cc:4d:dd:b2:a7:d0:6e:f7:fc:27:61:d4:e1:
         9a:6f:93:f9:45:8f:db:8e:59:38:59:76:ca:12:fe:e7:18:b4:
         de:07:0e:50:f3:62:cf:90:47:cb:78:c7:6a:5d:42:46:20:0b:
         60:59:28:94:5a:0c:59:4d:2a:7d:35:7e:e7:ab:4f:47:ed:f4:
         49:48:57:c7:b8:de:a9:69:50:c8:84:82:c1:10:4f:3c:52:7c:
         2e:84:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:59:46 2024 by rpki-client on console-ams.rpki-client.org