Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File:                     Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier:          /F9MlLutrBhlALiyHo0NQaahlKr33oogRNgEIZ4Q6HA=
Subject key identifier:   0F:45:7A:24:B1:40:DD:B7:C7:BD:C4:2F:38:17:8B:0A:FE:79:14:2B
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer:       /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial:       018F889217640B8136433809A7DF3218D51E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 22:00:26 +0000
Manifest this update:     Fri 17 May 2024 22:00:26 +0000
Manifest next update:     Sat 18 May 2024 22:00:26 +0000
Files and hashes:         1: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: 1+pwGymjC6bJXwIHgldfVfCOpInYygKEqxxE9M3qfsA=)
                          2: tmZl69Ww_n8QEtrGfA-N6yF37m0.roa (hash: dk+2IFiWf3b64RIyi+P3hEkDw5ZJUp8M9LMGdl6JnWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:17:64:0b:81:36:43:38:09:a7:df:32:18:d5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
        Validity
            Not Before: May 17 22:00:26 2024 GMT
            Not After : May 18 22:00:26 2024 GMT
        Subject: CN=0f457a24b140ddb7c7bdc42f38178b0afe79142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:8b:8c:96:19:12:b2:eb:bf:0b:ee:cc:f2:
                    a5:8c:72:b1:a9:44:2b:cf:45:e5:7f:6b:da:51:79:
                    61:5c:cd:ae:6a:df:16:a5:b1:9a:d0:67:8a:ed:85:
                    31:a5:d9:c6:63:c2:e0:a0:b4:73:75:16:d7:3b:7e:
                    8b:7f:8d:67:23:52:2b:98:e5:fd:6a:82:27:a1:a9:
                    8a:39:22:46:04:fc:8e:07:65:23:67:48:01:0f:bd:
                    1c:7b:36:97:e8:38:1f:c0:df:f9:eb:14:ec:8d:7b:
                    59:75:41:28:7b:e4:51:10:d8:0e:d0:a0:a5:f6:47:
                    3c:1c:c1:08:09:45:54:77:7b:9d:88:9c:e4:50:ef:
                    0f:57:4b:ed:84:cc:60:50:8d:50:53:05:b5:e8:c8:
                    34:ca:c5:5e:8b:f4:59:80:dd:f4:46:24:80:6f:64:
                    68:b9:38:84:b5:ba:0b:37:42:1f:05:63:73:ba:54:
                    75:20:37:4f:90:2c:73:13:9e:c9:4c:b1:be:53:d9:
                    f4:cb:8e:c6:73:5e:c4:31:f7:f2:bc:32:ce:8a:1c:
                    2c:86:73:7e:63:34:54:d8:75:c5:6f:9d:6f:9d:8e:
                    39:5e:f9:d2:ea:60:5f:81:ae:a6:23:b0:4a:6f:23:
                    52:e8:03:75:8d:45:a6:31:41:60:b6:f2:ab:30:f7:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:45:7A:24:B1:40:DD:B7:C7:BD:C4:2F:38:17:8B:0A:FE:79:14:2B
            X509v3 Authority Key Identifier:
                keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:7b:7e:0f:72:f3:cb:71:95:90:a2:76:0f:67:e9:e8:a0:
         a7:24:59:54:79:17:69:e1:5d:ea:3c:96:6f:06:69:f9:7b:e5:
         df:1b:5e:10:39:4e:47:ea:28:05:13:9f:25:11:17:32:43:41:
         a6:67:7b:c8:44:a6:a1:22:df:f7:52:db:bf:8a:bb:4e:3d:49:
         ab:04:d2:44:e2:65:48:a1:f7:bc:62:40:cc:46:64:bd:cc:78:
         f9:e3:03:50:03:cb:f5:fe:d6:f2:70:00:56:c9:f9:3e:10:ef:
         fc:a6:99:50:54:01:6a:fe:f2:fb:35:1a:5a:11:00:36:8c:b4:
         81:d2:d8:88:f4:41:3f:53:c4:2a:85:48:08:e3:5d:27:8a:18:
         6b:ac:b8:3d:81:01:5b:93:46:c6:1f:a9:39:74:7e:c4:e1:c1:
         29:92:59:e8:12:50:ee:31:f1:6b:97:df:18:c3:6f:5c:b8:7c:
         d6:b1:ae:b4:b0:fd:fd:1d:ce:22:47:af:a7:5b:55:da:46:26:
         a4:5f:94:9b:a5:78:0b:e1:ed:f7:43:97:59:c7:c8:f3:19:71:
         75:7b:e4:6c:cf:f8:40:22:93:06:27:f1:a3:05:f8:a7:3d:bb:
         49:13:8f:70:29:44:e3:a0:8d:09:03:7b:0c:18:61:87:f5:38:
         cc:9d:d9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:08 2024 by rpki-client on console-ams.rpki-client.org