Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File:                     zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier:          nzXBIl5zd03Q21wvVvP5Of6nypCQJUBlwxYHbJ6r4E4=
Subject key identifier:   53:AC:55:1F:31:BE:72:4A:E8:D7:B3:71:07:C9:16:ED:CA:9D:3F:62
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer:       /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial:       018F85C860F1648FB0B92648D179D4365573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 09:00:52 +0000
Manifest this update:     Fri 17 May 2024 09:00:52 +0000
Manifest next update:     Sat 18 May 2024 09:00:52 +0000
Files and hashes:         1: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: LalnUrbLbrmqavlsCb3Cg9kLwM2qagqPHFN4qYZ6C6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:c8:60:f1:64:8f:b0:b9:26:48:d1:79:d4:36:55:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
        Validity
            Not Before: May 17 09:00:52 2024 GMT
            Not After : May 18 09:00:52 2024 GMT
        Subject: CN=53ac551f31be724ae8d7b37107c916edca9d3f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:3f:e5:65:9a:53:35:b3:8d:9b:36:f9:b8:
                    03:f6:76:b5:a7:7b:ba:d3:39:e8:cd:d9:3f:2c:c6:
                    52:35:b6:56:2e:fa:b0:bb:38:3c:c0:9a:3f:d8:ae:
                    c2:85:48:e3:dd:8a:27:81:3f:bb:2a:9a:b2:02:10:
                    a9:37:96:b7:60:0e:28:40:01:b3:e6:8f:8f:1c:32:
                    a0:76:25:fc:cf:7e:60:72:ea:5b:f4:89:bc:02:58:
                    51:92:4a:08:11:8d:7a:eb:bf:86:8e:7f:93:b0:b7:
                    20:5c:a3:fb:3a:25:92:0d:f9:e9:60:dd:53:05:36:
                    7e:05:93:b3:77:8b:e0:d3:83:ce:84:f4:c5:28:90:
                    3a:33:d1:0c:0d:ea:77:f5:88:42:d7:98:2c:73:6e:
                    67:ce:69:fa:1b:2d:eb:18:c9:e4:08:f7:bb:9d:aa:
                    0d:0f:fa:0c:8a:1d:64:a7:4e:80:9c:bd:d3:62:20:
                    c9:55:34:f4:e1:ab:47:ac:22:94:70:2f:be:53:59:
                    04:92:5a:98:3f:f3:04:55:90:df:6a:d3:df:29:07:
                    ec:ff:bc:15:ec:4a:df:84:aa:42:34:07:e8:d6:a9:
                    02:7a:62:d2:3b:47:9a:20:2e:dd:cd:14:cc:70:dd:
                    9b:b0:c0:5a:65:b1:b1:cf:88:a5:ed:e0:d6:05:b5:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AC:55:1F:31:BE:72:4A:E8:D7:B3:71:07:C9:16:ED:CA:9D:3F:62
            X509v3 Authority Key Identifier:
                keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:90:8a:d9:c2:34:1a:bd:c2:33:95:f2:f0:36:85:68:60:
         81:c2:9f:fa:b9:cf:cf:b4:ff:23:93:66:8b:3b:16:6a:66:59:
         ea:b5:60:49:c4:d5:2a:47:ba:7b:42:1d:c3:3c:34:b7:52:19:
         7d:6e:33:5a:02:1d:e3:51:84:80:e5:2b:de:ba:f6:7d:15:42:
         55:8d:d8:cb:d1:e2:3d:b9:0a:6a:fc:fe:db:d6:13:09:b2:c6:
         59:18:7d:19:10:bb:d3:97:d9:e1:ee:10:92:89:2a:68:01:5c:
         61:f2:71:e6:1f:e1:43:6d:31:39:93:ac:f3:6d:a0:3a:40:2c:
         d5:43:c8:63:33:ee:ad:75:d7:97:8b:79:53:4e:79:64:7a:30:
         c0:47:47:9b:74:e3:37:c9:9e:bc:32:82:dd:d6:d2:77:20:dc:
         28:93:97:0a:88:56:26:95:46:83:d7:05:4e:da:f4:c3:a7:3a:
         9b:84:73:bb:03:92:e8:b0:02:4b:c3:76:4f:62:de:8c:94:ae:
         94:28:1f:1d:61:c9:2c:6f:f4:02:d2:14:ab:3e:ac:9e:2b:36:
         7f:8c:a0:cf:a2:7f:d5:78:d4:bf:08:40:8b:30:2e:84:1c:0f:
         71:5e:0a:95:12:52:3d:b7:0f:7a:6b:62:63:4a:d7:d5:19:5d:
         6c:3d:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:28 2024 by rpki-client on console-ams.rpki-client.org