Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/855207-1944-4d44-9883-b58ec5f49bb5/1/zvHBEuSKpdQtwkp3RfVPmuOjRGc.mft
File:                     zvHBEuSKpdQtwkp3RfVPmuOjRGc.mft (raw, json)
Hash identifier:          hciX+i8JEAv5ITvdwI1FLXk5tgt4DyU3D0YLLB11k8g=
Subject key identifier:   F1:7D:52:F6:A3:65:0A:4C:8B:51:D4:98:49:89:1E:75:C7:60:2C:DF
Authority key identifier: CE:F1:C1:12:E4:8A:A5:D4:2D:C2:4A:77:45:F5:4F:9A:E3:A3:44:67
Certificate issuer:       /CN=cef1c112e48aa5d42dc24a7745f54f9ae3a34467
Certificate serial:       018F85FF111446047904277761138134D821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvHBEuSKpdQtwkp3RfVPmuOjRGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/855207-1944-4d44-9883-b58ec5f49bb5/1/zvHBEuSKpdQtwkp3RfVPmuOjRGc.mft
Manifest number:          0109
Signing time:             Fri 17 May 2024 10:00:36 +0000
Manifest this update:     Fri 17 May 2024 10:00:36 +0000
Manifest next update:     Sat 18 May 2024 10:00:36 +0000
Files and hashes:         1: zvHBEuSKpdQtwkp3RfVPmuOjRGc.crl (hash: KUwqlCGoChpwZMxRTN+F1KUNPOAJK444ZU6HSbHw6nc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/855207-1944-4d44-9883-b58ec5f49bb5/1/zvHBEuSKpdQtwkp3RfVPmuOjRGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/855207-1944-4d44-9883-b58ec5f49bb5/1/zvHBEuSKpdQtwkp3RfVPmuOjRGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvHBEuSKpdQtwkp3RfVPmuOjRGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:ff:11:14:46:04:79:04:27:77:61:13:81:34:d8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef1c112e48aa5d42dc24a7745f54f9ae3a34467
        Validity
            Not Before: May 17 10:00:36 2024 GMT
            Not After : May 18 10:00:36 2024 GMT
        Subject: CN=f17d52f6a3650a4c8b51d49849891e75c7602cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:00:fe:df:77:ed:00:de:f2:64:c2:05:84:
                    28:f3:77:24:38:76:07:61:89:77:6c:fc:90:06:fd:
                    24:cf:43:2f:8f:78:f1:27:40:db:3f:34:38:7e:50:
                    b3:e6:d3:8e:56:aa:14:28:e4:9c:18:02:a3:f2:9b:
                    10:fe:b8:88:ab:ae:32:78:9e:b1:a9:c9:14:48:5e:
                    b0:26:bd:36:e0:3b:f6:24:4a:9b:db:ee:88:b1:4e:
                    bc:dc:e7:b6:e5:e2:1a:89:bb:39:dd:f1:af:f2:83:
                    e3:bf:dd:94:ca:f2:af:08:dd:14:64:af:0b:4c:d8:
                    e4:3d:55:a7:b3:55:90:4e:b6:27:ef:13:1d:35:94:
                    d4:1d:a2:84:5f:76:f4:50:6c:ce:b3:5d:38:c0:d7:
                    6b:8a:95:7b:aa:37:69:dc:c2:12:1f:6a:5a:5b:89:
                    af:48:6d:66:b0:95:2e:72:e2:7f:f5:55:1e:75:a4:
                    ad:b1:19:e2:27:1f:1a:04:ae:56:32:12:4a:14:22:
                    a9:1b:e7:6c:92:a2:d8:ff:66:fd:1e:22:0f:18:ce:
                    26:86:00:90:fb:43:9e:d0:99:e9:27:55:19:d9:aa:
                    d7:bf:fd:6a:76:19:f2:09:15:b9:37:06:3a:2c:14:
                    f0:08:d0:c2:38:a3:82:1c:00:41:05:68:bf:27:ca:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:52:F6:A3:65:0A:4C:8B:51:D4:98:49:89:1E:75:C7:60:2C:DF
            X509v3 Authority Key Identifier:
                keyid:CE:F1:C1:12:E4:8A:A5:D4:2D:C2:4A:77:45:F5:4F:9A:E3:A3:44:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvHBEuSKpdQtwkp3RfVPmuOjRGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/855207-1944-4d44-9883-b58ec5f49bb5/1/zvHBEuSKpdQtwkp3RfVPmuOjRGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/855207-1944-4d44-9883-b58ec5f49bb5/1/zvHBEuSKpdQtwkp3RfVPmuOjRGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:61:76:33:fd:b4:b8:70:e8:9b:59:10:72:54:d5:bb:33:
         d1:c5:81:c9:52:9e:46:97:c5:1d:17:36:c0:f6:50:1f:24:06:
         2c:20:39:7f:20:c8:a8:a3:e3:3f:d8:8e:65:ad:6f:1d:c3:26:
         af:c2:d2:ca:a9:06:e7:c7:aa:1c:95:1d:9a:92:5e:37:a6:a9:
         a2:b8:ea:27:83:e7:c9:2c:8e:62:0b:18:13:50:e9:ee:e9:07:
         1e:b5:58:73:70:60:aa:6a:45:10:b9:cd:2c:26:3c:b8:5d:53:
         21:d1:33:20:f9:95:f4:56:bd:42:f0:6e:a4:76:d7:e4:6d:22:
         6d:f7:f8:69:70:60:55:a6:99:25:dd:9f:e7:5b:28:a2:c8:92:
         4f:20:8b:81:6b:42:8e:70:04:c1:46:d2:b9:5e:2f:74:b1:ea:
         c4:0c:a4:ba:ea:2d:f2:eb:ca:5d:a4:ea:e1:0d:a8:12:5c:ec:
         ed:50:38:51:81:b0:d4:09:6b:3c:9d:6f:b0:5e:da:32:57:d9:
         93:d7:3a:0d:cb:a0:03:2d:04:c7:f1:15:71:da:9b:f8:55:cb:
         ab:3c:73:e5:4d:15:60:d1:b1:ff:3d:c8:d2:05:ae:43:fc:4a:
         bf:60:7b:5b:2f:a1:bf:01:d8:dc:66:47:5d:d4:b0:8b:65:c9:
         90:75:ee:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+F/xEURgR5BCd3YROBNNghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjFjMTEyZTQ4YWE1ZDQyZGMyNGE3NzQ1ZjU0ZjlhZTNh
MzQ0NjcwHhcNMjQwNTE3MTAwMDM2WhcNMjQwNTE4MTAwMDM2WjAzMTEwLwYDVQQD
EyhmMTdkNTJmNmEzNjUwYTRjOGI1MWQ0OTg0OTg5MWU3NWM3NjAyY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEIA/t937QDe8mTCBYQo83ckOHYH
YYl3bPyQBv0kz0Mvj3jxJ0DbPzQ4flCz5tOOVqoUKOScGAKj8psQ/riIq64yeJ6x
qckUSF6wJr024Dv2JEqb2+6IsU683Oe25eIaibs53fGv8oPjv92UyvKvCN0UZK8L
TNjkPVWns1WQTrYn7xMdNZTUHaKEX3b0UGzOs104wNdripV7qjdp3MISH2paW4mv
SG1msJUucuJ/9VUedaStsRniJx8aBK5WMhJKFCKpG+dskqLY/2b9HiIPGM4mhgCQ
+0Oe0JnpJ1UZ2arXv/1qdhnyCRW5NwY6LBTwCNDCOKOCHABBBWi/J8oyBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF9UvajZQpMi1HUmEmJHnXHYCzfMB8GA1UdIwQY
MBaAFM7xwRLkiqXULcJKd0X1T5rjo0RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZIQkV1U0twZFF0d2twM1JmVlBtdU9qUkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84NTUyMDctMTk0NC00ZDQ0LTk4ODMt
YjU4ZWM1ZjQ5YmI1LzEvenZIQkV1U0twZFF0d2twM1JmVlBtdU9qUkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84NTUyMDctMTk0NC00ZDQ0LTk4ODMtYjU4ZWM1ZjQ5YmI1
LzEvenZIQkV1U0twZFF0d2twM1JmVlBtdU9qUkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMS5hdjP9
tLhw6JtZEHJU1bsz0cWByVKeRpfFHRc2wPZQHyQGLCA5fyDIqKPjP9iOZa1vHcMm
r8LSyqkG58eqHJUdmpJeN6aporjqJ4PnySyOYgsYE1Dp7ukHHrVYc3BgqmpFELnN
LCY8uF1TIdEzIPmV9Fa9QvBupHbX5G0ibff4aXBgVaaZJd2f51soosiSTyCLgWtC
jnAEwUbSuV4vdLHqxAykuuot8uvKXaTq4Q2oElzs7VA4UYGw1AlrPJ1vsF7aMlfZ
k9c6DcugAy0Ex/EVcdqb+FXLqzxz5U0VYNGx/z3I0gWuQ/xKv2B7Wy+hvwHY3GZH
XdSwi2XJkHXurQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:00:46 2024 by rpki-client on console-ams.rpki-client.org