Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
File:                     ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft (raw, json)
Hash identifier:          SUiNXGDNsxPJgsj3D2/dgzzFQNiK3ven7EnMyd38cgg=
Subject key identifier:   90:5D:A9:5D:EE:E8:1C:5A:74:90:83:53:2E:78:56:ED:0B:1F:F6:42
Authority key identifier: 64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92
Certificate issuer:       /CN=64b90f34525f80025ea77cb618e7519982ab8592
Certificate serial:       018F87487DA2F025AAD234549DE179896845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:00:25 +0000
Manifest this update:     Fri 17 May 2024 16:00:25 +0000
Manifest next update:     Sat 18 May 2024 16:00:25 +0000
Files and hashes:         1: ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl (hash: Hrp3YJWeXv0QawTQxxb0UGaALB6w2duZXmHRwY3YBQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7d:a2:f0:25:aa:d2:34:54:9d:e1:79:89:68:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b90f34525f80025ea77cb618e7519982ab8592
        Validity
            Not Before: May 17 16:00:25 2024 GMT
            Not After : May 18 16:00:25 2024 GMT
        Subject: CN=905da95deee81c5a749083532e7856ed0b1ff642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:32:f5:e7:51:1e:b3:d6:58:62:94:b5:6e:
                    d7:9a:e7:b3:b0:bb:59:e8:02:f9:12:76:b3:08:8f:
                    d7:05:df:73:05:5b:ce:47:46:3f:e8:b5:07:bd:df:
                    90:06:d6:54:76:ed:65:31:06:83:63:26:9d:e5:aa:
                    4d:0f:e0:fe:f7:4a:68:9c:e0:cd:ad:50:59:51:58:
                    81:54:b0:32:e5:e6:84:bd:77:4f:04:52:96:9f:15:
                    ed:18:00:bb:07:8c:0c:80:22:b7:3f:7d:0c:cc:58:
                    90:a9:5b:00:e9:3f:2f:81:73:41:b3:9e:4a:f4:17:
                    59:76:a7:d4:b3:1d:6d:9d:45:e0:5d:e2:66:9a:4e:
                    0a:2d:94:3f:a8:ed:f0:9c:79:87:e4:22:6b:69:ef:
                    30:4f:a8:41:cb:ad:ad:64:14:ab:39:b4:ac:f3:80:
                    45:2d:1c:ea:b5:c1:8b:9c:92:70:bb:bc:f5:09:ff:
                    b5:35:7c:85:d1:e0:4d:9a:1b:d3:b9:ab:3f:ec:ad:
                    52:90:a4:15:72:07:c1:25:20:ec:06:59:01:68:14:
                    67:46:af:da:9a:4c:a9:30:98:fb:03:03:c8:c7:aa:
                    43:c2:8b:f5:72:44:88:75:67:12:10:11:a5:b2:92:
                    f8:36:36:ac:56:ec:68:6a:eb:05:e6:5b:39:4f:93:
                    f7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:A9:5D:EE:E8:1C:5A:74:90:83:53:2E:78:56:ED:0B:1F:F6:42
            X509v3 Authority Key Identifier:
                keyid:64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:af:1a:08:7f:32:22:3f:08:ee:8e:41:34:cb:f9:bc:26:
         ec:3a:87:36:a7:aa:e9:5e:15:48:80:f7:f2:93:71:3d:72:25:
         f2:bd:16:61:75:92:8b:25:ae:06:97:00:c8:56:6c:aa:fb:70:
         0d:6c:ca:df:ef:58:99:9d:fb:9c:4e:42:98:c5:d1:be:78:82:
         e4:37:e2:d2:49:05:68:18:46:60:7c:b5:31:25:cd:0a:0d:42:
         f8:b6:74:32:8b:f7:e0:26:01:cf:3e:19:4f:46:3d:a9:1c:7f:
         10:cd:41:04:30:ac:12:6f:6b:b2:ef:0e:be:58:b8:8b:0b:3d:
         71:7e:f5:a8:d0:c4:a6:7d:52:a9:7d:7e:92:1a:f9:05:3c:9e:
         31:ac:b9:01:9b:5f:0c:93:7e:f8:18:04:fe:d1:33:05:54:31:
         ed:52:00:49:85:53:1b:99:cf:bd:a4:0c:c4:f1:60:06:ab:12:
         54:c2:85:bd:6c:7a:79:06:58:38:38:57:2b:18:ce:71:c5:6f:
         fb:38:8c:27:98:f1:64:90:ec:ae:ab:f2:39:f7:52:1c:95:1d:
         45:72:d3:f5:d7:cf:14:7d:6a:58:cd:0e:e8:a0:92:49:ad:46:
         e1:54:dd:4f:00:e8:15:c1:99:81:6a:0b:c1:47:dd:4e:2e:33:
         13:7b:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:13 2024 by rpki-client on console-ams.rpki-client.org