Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File:                     Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier:          h6iW34e77IU5tr8soswJsanRJR0m7+AEMvv0eospHco=
Subject key identifier:   77:4F:30:BC:D2:7D:A5:C8:CE:14:91:3E:73:F0:0A:E0:38:01:8D:FE
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer:       /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial:       018F88247E3973F0D6445358919189BEB31D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number:          0942
Signing time:             Fri 17 May 2024 20:00:43 +0000
Manifest this update:     Fri 17 May 2024 20:00:43 +0000
Manifest next update:     Sat 18 May 2024 20:00:43 +0000
Files and hashes:         1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: IQ8wxYx603KodFBqXGZ5NQT11xYRIXW9vyBVIOvt/h0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:7e:39:73:f0:d6:44:53:58:91:91:89:be:b3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
        Validity
            Not Before: May 17 20:00:43 2024 GMT
            Not After : May 18 20:00:43 2024 GMT
        Subject: CN=774f30bcd27da5c8ce14913e73f00ae038018dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:3d:a9:df:3a:fe:a5:7f:de:2e:18:19:99:
                    39:04:77:c8:c5:61:7a:ae:bd:7a:a9:30:53:71:97:
                    81:85:7d:64:00:3b:ff:8b:b7:f9:e8:dc:4b:f4:e7:
                    f2:ea:d1:34:a7:7c:9a:71:08:f1:dd:0d:c4:3c:4d:
                    1e:e7:4c:14:d9:19:db:d5:b7:af:5c:55:cd:91:c4:
                    89:53:68:2d:29:a1:cc:50:f8:32:2f:c3:f7:d5:a9:
                    3f:3c:4c:65:b5:e7:02:72:a6:ba:25:2c:ca:14:49:
                    11:e2:1e:0f:49:ee:ac:7d:8a:56:d7:c1:77:24:df:
                    28:48:6c:7b:37:68:b7:fa:8d:73:b2:b1:dd:5f:52:
                    b2:d8:75:74:37:12:0e:93:59:67:0d:43:d7:86:d4:
                    2e:5e:64:98:1a:db:18:05:4d:20:90:2c:5a:62:19:
                    63:4e:66:7e:9d:14:27:9a:ad:d7:9a:d2:ec:40:ec:
                    82:62:d1:fb:dc:1d:91:49:9a:1b:0b:c4:68:02:66:
                    b3:de:fe:b1:41:2f:d2:28:f9:34:d3:b8:72:08:05:
                    6c:12:b6:45:4d:28:df:36:6e:50:e1:0d:2b:8f:12:
                    77:5f:58:98:ae:d7:36:24:60:ec:4e:3d:47:dd:25:
                    dd:53:1c:bc:de:d5:ba:c2:77:f0:cb:49:66:82:90:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:30:BC:D2:7D:A5:C8:CE:14:91:3E:73:F0:0A:E0:38:01:8D:FE
            X509v3 Authority Key Identifier:
                keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9d:cb:c7:73:5e:1c:71:84:53:f8:4b:eb:f6:3a:2e:a7:0b:
         76:11:f6:75:e0:d0:5d:0f:c9:d8:d3:e9:f9:0a:b4:d8:a7:88:
         3e:d4:34:46:49:09:e6:18:85:39:fb:e3:f6:b7:64:80:82:dd:
         c6:aa:f1:81:c3:85:5f:a6:8b:84:28:92:6c:66:01:41:d7:67:
         6f:24:ee:9d:f3:b4:1b:9b:d9:0b:7d:8d:cc:42:a1:14:ac:d0:
         fa:8d:59:49:60:27:53:81:2b:e3:8a:b4:00:12:28:7b:d6:30:
         aa:6d:e1:f1:57:45:0f:90:50:92:b6:14:94:88:48:ea:b8:e6:
         59:31:2f:fa:c7:3a:52:7b:3f:83:1c:97:57:89:99:91:92:11:
         97:d7:9c:d2:5c:ba:cf:22:5d:38:89:ca:94:ac:68:65:c4:7d:
         5f:e5:61:38:95:a2:9f:6b:58:3a:a1:60:95:a6:c7:b9:0e:83:
         95:a2:ad:5f:6d:9e:dc:1d:d6:47:e9:05:03:46:5c:a7:ed:ed:
         35:57:5f:53:fa:45:52:12:0b:56:cf:0b:2f:d5:64:d4:83:35:
         1e:26:53:43:eb:ef:14:3a:b0:c4:05:7d:5a:46:7e:1e:49:bc:
         59:0c:4c:f2:eb:f3:d6:71:1e:2a:91:87:64:61:6c:b6:b2:a7:
         d3:bb:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:30 2024 by rpki-client on console-fra.rpki-client.org