Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File:                     Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier:          Ttft7ceb0rZCuTmH3MeOIvbJsuvPf7hs3AmvHmGLzH8=
Subject key identifier:   F2:82:36:D1:85:23:D7:4F:C5:02:01:C7:18:28:8E:C3:D9:12:4F:0B
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer:       /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial:       018F86A36BEE1587CB0866EB6CB5677C0003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number:          0F95
Signing time:             Fri 17 May 2024 13:00:07 +0000
Manifest this update:     Fri 17 May 2024 13:00:07 +0000
Manifest next update:     Sat 18 May 2024 13:00:07 +0000
Files and hashes:         1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: UYKoO//SJtSuI7zLJUm/B3Oh5fyYGa+6wQKeqmA4Jrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:6b:ee:15:87:cb:08:66:eb:6c:b5:67:7c:00:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
        Validity
            Not Before: May 17 13:00:07 2024 GMT
            Not After : May 18 13:00:07 2024 GMT
        Subject: CN=f28236d18523d74fc50201c718288ec3d9124f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:60:10:a9:b2:f9:85:9f:29:1e:81:57:ec:
                    94:e1:73:c5:07:a1:fc:21:68:29:ea:65:97:53:02:
                    36:2a:55:24:27:d3:e4:b3:26:e5:b4:84:1b:b3:b0:
                    4b:70:4b:8a:da:08:99:26:7b:0b:72:41:0a:2f:0a:
                    9b:27:08:c6:0c:45:00:40:ab:8b:4d:ff:64:5c:0a:
                    6a:55:2c:68:8d:ee:05:40:cb:c9:f4:14:f1:ef:94:
                    d5:34:fd:12:53:6f:2b:83:c6:47:06:a4:83:c4:4c:
                    54:5d:d8:8b:01:6f:90:33:9f:5a:d0:5d:34:11:e5:
                    90:36:a2:94:2a:5c:9c:df:4e:26:36:2a:35:dd:cc:
                    f9:c8:f8:ec:a4:58:94:a9:29:a4:ba:20:78:20:ea:
                    3f:e6:49:20:2c:97:5a:5c:2e:df:09:ea:f3:bd:fa:
                    b9:bc:4f:1c:cd:a8:67:68:d5:83:0a:79:f3:92:83:
                    a6:e4:5a:ff:d4:9c:66:0c:da:6b:13:dd:6c:28:20:
                    cd:d9:df:22:d6:21:ab:01:56:e4:5f:59:9a:d4:5e:
                    a8:ff:f0:39:f5:46:3d:e5:ec:44:b0:44:a1:f7:6c:
                    f5:60:29:02:a9:5f:ff:07:b2:ad:75:80:97:c7:bc:
                    37:fc:a0:a4:1e:77:dc:74:9d:fe:12:03:c5:9d:b4:
                    99:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:36:D1:85:23:D7:4F:C5:02:01:C7:18:28:8E:C3:D9:12:4F:0B
            X509v3 Authority Key Identifier:
                keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:bf:d3:d9:f0:91:1a:f7:35:ff:f6:d9:39:e8:83:f2:1e:
         f5:7c:20:79:63:3e:26:06:78:0e:f1:7a:f1:79:60:d2:8f:d8:
         34:20:25:a2:28:a8:e9:f0:5e:0f:a0:37:fd:d9:0e:65:e1:9a:
         65:16:99:86:43:96:e6:8d:64:d0:73:eb:f5:44:e2:fc:71:8f:
         a7:83:e2:ad:90:60:64:8a:9d:42:de:df:2f:1e:5e:30:4c:93:
         b9:2b:a2:10:de:4e:7d:52:be:dd:d1:4d:cc:e5:27:ee:92:c6:
         29:ea:09:58:56:0d:0a:55:33:57:2e:c1:50:0f:58:40:a6:32:
         3e:bd:05:dd:8d:a4:0c:13:8a:f1:b5:31:fa:c3:06:de:d3:ab:
         39:be:ae:0b:66:31:f8:a9:23:16:3f:45:45:2b:9e:e7:05:a6:
         ea:3f:54:6d:99:dc:7f:5e:6c:f2:b6:d6:66:97:f6:27:2a:dd:
         11:76:a0:73:51:6e:b9:ce:02:f3:8f:24:66:7b:62:0e:ce:df:
         4e:e5:54:11:8a:71:ad:3c:b6:5b:79:68:cc:47:09:e8:10:9a:
         48:04:77:40:4e:04:2e:af:a5:d3:8b:1d:24:cf:79:60:f7:9e:
         3e:e3:47:1a:0b:31:b2:1c:ea:4e:b3:d9:bf:b0:6c:bd:7b:b3:
         bf:fe:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:25 2024 by rpki-client on console-fra.rpki-client.org