Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
File:                     ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json)
Hash identifier:          Gf7gy96bmidLRL4MFL5aAUzcCbdRCetZF8diHKg3T90=
Subject key identifier:   A2:E1:E6:BE:B0:46:35:E6:14:7D:56:9D:D6:FB:B1:63:06:F2:B1:D0
Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
Certificate issuer:       /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Certificate serial:       019358093324A0D69BA594537EC95F129133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
Manifest number:          A7
Signing time:             Sat 23 Nov 2024 08:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:18 +0000
Files and hashes:         1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: d07nEyZMt/d9R48UUGBKJ6QTE4kHoVMDOUgrXsmu3xU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:33:24:a0:d6:9b:a5:94:53:7e:c9:5f:12:91:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
        Validity
            Not Before: Nov 23 08:00:18 2024 GMT
            Not After : Nov 24 08:00:18 2024 GMT
        Subject: CN=a2e1e6beb04635e6147d569dd6fbb16306f2b1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:6e:e9:0c:0e:23:97:6e:a3:7f:48:13:f7:
                    6e:ed:ae:9f:8e:bb:ea:2e:86:40:18:e6:a6:94:8d:
                    a1:32:85:fb:a7:d6:d1:48:5c:ae:88:fe:ed:89:6f:
                    b6:a1:02:0a:48:7e:83:20:00:13:72:6a:b1:e1:ac:
                    9a:6e:a9:dc:6e:df:cc:29:5d:51:1b:60:8e:18:98:
                    78:3c:10:13:ce:a3:91:9a:20:92:b8:09:2d:4e:fe:
                    83:b1:94:9d:d9:4a:d3:d8:5f:f6:45:02:23:77:68:
                    42:c4:35:05:6c:69:73:b2:4a:a7:1a:09:04:51:60:
                    09:40:40:54:16:49:dc:5e:e7:53:b4:d4:77:4e:39:
                    fd:48:44:80:ae:55:52:40:18:9a:ee:0d:dc:ae:43:
                    6f:e6:24:a3:cc:55:92:b1:06:4c:fe:ad:64:73:27:
                    a7:89:e3:30:f0:0b:d4:5f:e5:b3:d4:19:8e:5d:83:
                    ee:99:95:97:85:e3:69:c1:89:70:4d:5d:26:c8:eb:
                    a3:92:b0:97:0e:5f:5e:0c:89:b1:bc:a5:1f:85:71:
                    da:2b:92:90:63:72:25:c5:e6:bb:e5:76:9a:37:f5:
                    91:50:0f:c1:94:f5:6a:da:34:ce:b6:28:5c:ab:b6:
                    cb:5b:e4:28:39:82:24:02:12:d9:04:29:46:97:cd:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E1:E6:BE:B0:46:35:E6:14:7D:56:9D:D6:FB:B1:63:06:F2:B1:D0
            X509v3 Authority Key Identifier:
                keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:83:92:8b:6c:48:06:07:f2:f3:86:ff:77:cf:80:ea:9c:39:
         50:13:55:60:0a:19:bd:ef:d9:d1:68:c1:89:c6:b7:ac:5d:9f:
         42:f1:db:a8:89:ae:38:6d:aa:42:5f:21:39:90:3e:a0:48:db:
         de:5e:f5:de:8c:16:66:85:41:75:33:92:83:c8:4f:9c:9d:c0:
         71:2a:52:c5:18:c4:74:4f:3c:93:98:0b:33:d2:87:5a:75:5d:
         a6:fe:ad:e9:79:f3:84:1b:86:d2:3d:58:9f:75:d0:db:02:7f:
         d9:cd:2f:c4:17:cf:6a:da:b3:ea:b4:59:cb:d8:f8:21:8c:cb:
         d7:d7:87:98:41:0a:e9:88:45:8a:a4:8f:04:a1:14:5b:0c:aa:
         4c:e5:ac:5f:a0:d4:a2:f5:be:ce:2d:7b:ac:89:b0:c1:6b:c5:
         a8:27:d4:9b:41:bf:f5:3d:6d:70:c8:01:11:f9:82:dd:57:e6:
         60:2d:71:bc:6d:5a:6d:4d:73:93:32:8a:71:ff:4b:bc:b2:18:
         25:b5:85:9a:8a:23:d9:7c:ed:29:6a:38:6e:b9:cf:85:d3:44:
         96:52:0f:8f:5e:e6:9d:00:52:38:04:83:d5:b2:80:92:78:d0:
         fa:c0:fe:ba:c0:80:74:bb:dc:9f:56:76:cf:e6:b7:64:6f:9c:
         8d:79:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:54 2024 by rpki-client on console-fra.rpki-client.org