Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File:                     ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier:          LkziQ+YkykeFDDAIqwgVaRdkjD25ikDV1uxyMpniu18=
Subject key identifier:   9C:D0:66:2C:C8:E0:30:1F:BB:16:FB:95:B7:C8:09:D1:8D:50:16:A5
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer:       /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial:       018F87B6925B67D088FCEB32B39E6D352B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number:          0E38
Signing time:             Fri 17 May 2024 18:00:40 +0000
Manifest this update:     Fri 17 May 2024 18:00:40 +0000
Manifest next update:     Sat 18 May 2024 18:00:40 +0000
Files and hashes:         1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: D3TxK/+HeIxJRPq2kKzsxs3QrCSegtPfE+JDlvZl9yU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:92:5b:67:d0:88:fc:eb:32:b3:9e:6d:35:2b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
        Validity
            Not Before: May 17 18:00:40 2024 GMT
            Not After : May 18 18:00:40 2024 GMT
        Subject: CN=9cd0662cc8e0301fbb16fb95b7c809d18d5016a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:78:33:35:e3:e3:6a:6c:35:0d:c8:0c:7a:
                    d2:27:d4:a6:a9:9a:70:1e:f6:b1:a3:1c:e3:af:60:
                    9d:8b:c7:d2:e3:ad:1d:ea:d9:2c:20:40:35:48:c0:
                    0e:15:29:97:62:07:17:44:65:45:41:34:70:7c:a6:
                    eb:e7:72:7b:66:a3:07:54:8f:93:84:80:0f:6f:7d:
                    8a:db:58:0c:64:dc:28:eb:0c:b8:51:c5:62:ef:46:
                    90:47:0f:c1:74:7c:5e:9b:32:bb:bc:c8:63:6b:7f:
                    98:cc:ff:72:79:76:a8:09:40:4a:b3:92:f3:e9:76:
                    37:3f:53:59:35:5f:4d:bd:c2:27:60:ee:99:34:f4:
                    a1:92:84:7f:a3:6b:c4:37:b0:0e:30:7f:04:ca:52:
                    e0:b7:35:67:20:d5:ba:da:4c:0b:5d:87:4c:df:9b:
                    e4:be:a3:8a:30:51:d5:bf:00:c9:f7:0c:40:59:0d:
                    af:4d:6c:c5:90:91:af:0d:3b:76:11:a5:8f:3a:3e:
                    af:90:38:a1:9b:06:2a:d6:79:98:b2:f5:5c:1b:89:
                    84:52:13:c6:01:98:6c:46:ad:29:0f:11:1a:bc:04:
                    a8:55:06:4c:16:b6:a2:5e:3e:7f:30:54:30:c3:1c:
                    4a:85:95:dd:ff:29:c8:37:3f:e3:1d:d9:fb:34:68:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:66:2C:C8:E0:30:1F:BB:16:FB:95:B7:C8:09:D1:8D:50:16:A5
            X509v3 Authority Key Identifier:
                keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:59:9d:3f:64:76:cc:63:f1:2d:2d:d4:ef:6d:85:06:49:
         3f:46:9f:1b:a7:40:90:18:06:d7:1c:ec:f3:26:f5:6d:49:59:
         07:cb:7f:26:d5:93:2c:87:af:8b:53:86:98:c7:bf:b9:24:b2:
         9c:06:6b:26:84:7d:35:fb:82:d1:69:20:1c:8d:38:ee:f5:e4:
         78:45:7e:cd:df:c6:0e:8e:e2:36:77:f5:4e:6d:48:9f:1e:a0:
         c8:ba:5d:51:0c:ac:22:6f:80:8b:0d:83:40:95:ee:87:66:3f:
         77:1c:f1:3e:ac:86:e2:9f:fa:49:e7:3a:86:39:97:be:71:65:
         53:d9:cf:05:42:f1:30:f5:da:08:c1:1f:90:52:ba:93:84:e0:
         8a:bf:d4:bb:4a:23:39:84:a6:e8:95:03:35:e3:c3:c6:9c:b7:
         a5:8a:a3:f1:73:eb:74:ae:88:d7:b4:64:07:cc:49:47:49:ee:
         4b:f9:a5:52:3c:ae:df:7f:de:75:08:8a:4f:9b:57:e7:00:9e:
         b9:c1:f4:4f:ad:8e:90:57:18:69:8a:09:5a:f6:99:e8:95:27:
         23:68:f2:af:03:f7:7b:94:f0:79:c3:64:f9:a8:91:62:08:cb:
         32:f4:83:da:7f:7e:13:4b:e4:69:08:86:be:e9:36:cc:1f:c5:
         21:30:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----