Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File:                     ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier:          ybbesxh0VfVB8ztrqCEP7lseqTfYnLTornxzUwXk/XI=
Subject key identifier:   81:E0:E8:DA:64:B0:8F:B5:3A:FF:C2:2E:03:BF:81:25:E3:A6:E9:00
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer:       /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial:       018F87B67DB8625B10A250808C052089474A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number:          08D9
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: b6ViK/v1fQylp5eZPejNARy6oaGj4xTC6PEnf+uq84Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7d:b8:62:5b:10:a2:50:80:8c:05:20:89:47:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=81e0e8da64b08fb53affc22e03bf8125e3a6e900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:ee:2d:e4:52:45:2c:20:dd:b4:7b:ca:42:
                    d2:d9:d7:71:c6:df:8b:86:27:9f:3f:26:45:f9:be:
                    dd:87:37:03:bf:d9:e7:a7:83:96:c8:d9:af:f5:d8:
                    30:a1:9e:1e:fd:e3:75:ce:62:71:82:6f:25:3a:90:
                    ca:20:1d:b9:9a:f3:b2:f9:6a:92:fc:c0:f9:c7:db:
                    be:28:8b:bc:cf:cd:87:81:e2:d2:69:29:2f:25:a4:
                    d5:c4:30:8e:d4:92:b9:b6:79:8a:27:16:79:d2:68:
                    36:17:c2:a4:17:bf:4f:04:c6:bc:fa:54:26:87:d7:
                    b6:66:5b:73:98:c0:ff:3e:8f:1d:6e:c0:8f:30:cf:
                    eb:d4:9e:ed:7b:05:49:19:e3:8b:d4:a2:a8:6d:5a:
                    7f:02:72:8d:ad:d6:8d:09:1e:2c:1e:06:db:0d:bf:
                    13:8d:94:17:b8:dc:9f:d1:66:3f:4d:91:57:42:69:
                    e8:2d:5c:20:e5:c3:81:fc:78:0a:3f:4e:a8:47:02:
                    6b:e2:6b:be:27:16:d3:9a:5b:0d:08:93:0d:04:08:
                    8a:07:b6:b0:81:87:2b:8c:d0:4c:57:09:e5:0f:5c:
                    bf:4f:c3:f1:8f:71:08:5a:56:d5:9a:cd:aa:e3:05:
                    7b:de:79:20:3b:34:66:0d:28:be:66:1e:bd:c2:5c:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E0:E8:DA:64:B0:8F:B5:3A:FF:C2:2E:03:BF:81:25:E3:A6:E9:00
            X509v3 Authority Key Identifier:
                keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:82:db:69:35:4b:59:8a:79:38:09:00:5f:98:ad:92:46:ca:
         a8:40:80:11:cb:86:ef:2b:41:70:ec:6f:3a:07:61:f6:c7:eb:
         f0:dc:a3:24:2b:e4:c6:77:36:b1:89:0c:a5:90:22:ac:34:6c:
         8c:90:97:b2:28:56:42:2f:21:78:d7:c6:e0:4d:8c:2c:3e:6f:
         d6:60:3d:87:1b:82:52:4a:71:17:f9:85:42:33:37:56:dc:a8:
         c2:47:35:cb:e3:05:4f:46:44:ca:df:57:48:ea:21:1c:a9:20:
         1d:df:2f:d1:1a:95:88:f6:90:ca:17:06:3e:59:4d:6b:47:ef:
         38:7e:6d:57:29:e1:d1:c4:fa:d2:66:ec:ad:16:72:52:c0:78:
         df:29:15:c3:98:6b:44:7e:96:2e:d7:b7:5e:50:e6:02:76:2d:
         48:c7:8d:bd:49:04:13:98:c0:56:0a:f4:80:fe:eb:53:2d:b6:
         fb:42:f2:4d:26:5d:8b:9c:cb:da:9f:e1:42:b8:6f:28:ce:07:
         69:74:03:2b:27:d6:c8:7a:e0:8f:d9:de:f7:05:f4:a9:b9:23:
         60:3b:94:b0:36:ad:3e:ae:26:bb:fc:21:94:7a:32:16:7d:29:
         9d:d5:02:af:b2:a3:29:81:93:c2:61:43:ce:85:b4:d4:e0:c3:
         b8:d8:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:14 2024 by rpki-client on console-fra.rpki-client.org