Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File:                     MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier:          0CKP/kDRl7ed4p96WmEh51VAz32y2UsHwhZuGl7XslY=
Subject key identifier:   23:7D:E5:57:78:81:E1:36:57:85:9A:68:36:EA:12:AB:2C:32:1B:8B
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer:       /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial:       018F882405FA894D8603889F5163AAFBC1C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number:          0849
Signing time:             Fri 17 May 2024 20:00:13 +0000
Manifest this update:     Fri 17 May 2024 20:00:13 +0000
Manifest next update:     Sat 18 May 2024 20:00:13 +0000
Files and hashes:         1: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: GbJoGnx1wYLK+/dvx6WuGFO3VIrLV7/5YgN+9io4EZM=)
                          2: emdeEvtf-dPYqJDFZvDtkBBeEnI.roa (hash: 2z0ROEh1DbKK1Sw2prjIQXkxHvunoh5z/S/Lboz+VV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:05:fa:89:4d:86:03:88:9f:51:63:aa:fb:c1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
        Validity
            Not Before: May 17 20:00:13 2024 GMT
            Not After : May 18 20:00:13 2024 GMT
        Subject: CN=237de5577881e13657859a6836ea12ab2c321b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:8a:c0:6a:f4:8d:0f:fa:d3:d6:49:4a:71:
                    2d:f1:25:b3:b7:1e:f0:8c:ad:62:d8:37:6c:36:3d:
                    3d:69:f5:04:c3:cf:0f:72:4b:e6:ea:c7:20:35:1a:
                    97:d1:5c:2a:29:d6:ff:e6:c1:56:4a:55:d8:7f:d3:
                    aa:9a:b0:7e:03:23:dc:28:ba:50:bd:c8:ab:54:9c:
                    c4:bc:8f:5f:25:42:7e:84:f1:db:e6:33:df:15:68:
                    b2:a0:21:c1:91:48:26:9d:a5:61:01:3e:41:48:95:
                    dd:5a:ef:d5:87:2c:41:f8:58:b6:de:38:c5:83:21:
                    bb:f6:53:ac:c8:6b:c3:11:25:99:94:7b:ac:20:79:
                    ab:75:10:30:90:ae:1a:ff:a8:c3:2f:4b:00:f8:0d:
                    7f:94:b4:88:df:71:64:0b:5a:d3:21:e3:48:9f:59:
                    97:a9:32:ef:3a:6f:e5:ae:de:a9:44:66:77:0c:0b:
                    0e:e4:74:8a:f4:24:b0:8c:8e:a7:15:35:b7:9c:49:
                    c1:16:0d:22:29:21:43:10:d6:82:d1:b8:3a:9c:a0:
                    9e:78:83:c4:01:df:b0:c5:52:29:cd:c7:d6:a3:2d:
                    77:0f:5a:8b:74:15:23:d9:c3:17:98:ae:e4:de:0d:
                    a4:13:77:08:b5:c2:fe:1f:e7:e1:f7:91:5a:af:87:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7D:E5:57:78:81:E1:36:57:85:9A:68:36:EA:12:AB:2C:32:1B:8B
            X509v3 Authority Key Identifier:
                keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:11:ac:b6:44:3a:45:dd:07:c1:b4:29:29:fb:38:8c:d0:
         5c:9c:66:35:ad:fa:0d:81:4e:6c:fe:fb:f2:ef:fb:da:a3:39:
         8a:19:fb:b9:c5:d6:4d:97:94:ca:ef:55:5a:80:a4:a6:48:26:
         ac:0c:c0:82:33:e4:f2:e5:36:f0:58:2f:1e:39:f6:71:ae:14:
         c5:5f:9c:ce:d6:fb:26:50:54:94:d5:43:5d:a8:ec:be:c5:a6:
         06:0d:47:02:4e:8e:fa:c9:fc:5b:1c:a9:ff:78:5d:70:86:e5:
         c6:30:6a:fb:17:37:ca:93:a2:6e:a4:70:f8:a3:d9:93:78:86:
         10:35:7d:70:ca:e1:7e:91:60:fa:b0:62:b4:61:66:d5:a2:f9:
         37:b4:93:4c:5e:b6:53:1d:5f:8c:67:b2:a7:18:72:59:e1:f1:
         98:d8:d2:6b:c2:63:e9:f5:41:f9:c4:15:5d:0f:5f:b5:f6:34:
         9c:f3:2d:ec:6d:ff:9e:54:4d:a0:95:d4:e2:72:a3:53:fb:3d:
         c8:c8:cc:d0:74:ed:90:87:0d:8c:58:bb:96:55:37:25:f0:23:
         21:60:d9:ae:e1:88:3b:83:6b:0f:35:e2:22:13:31:bc:9d:e4:
         d1:74:76:57:62:59:90:13:28:d9:6a:b8:71:b1:40:3d:88:6f:
         02:da:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:55 2024 by rpki-client on console-ams.rpki-client.org