Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File:                     ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier:          0gOD9eoChoT4dFTEcn4HbrqsXd3GPy58Vl5ierb62xo=
Subject key identifier:   9E:EE:9F:1D:5D:A7:E5:47:FE:56:CA:4C:78:94:DF:CA:DC:AB:55:0D
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer:       /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial:       019369D9091991C3ABAC030C1AE5AA3485D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number:          04BA
Signing time:             Tue 26 Nov 2024 19:00:51 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:51 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:51 +0000
Files and hashes:         1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: LAdVJ22eGIqiDMLPVlWdifFtNXNZhn7Jy+jvEYxqv20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:09:19:91:c3:ab:ac:03:0c:1a:e5:aa:34:85:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
        Validity
            Not Before: Nov 26 19:00:51 2024 GMT
            Not After : Nov 27 19:00:51 2024 GMT
        Subject: CN=9eee9f1d5da7e547fe56ca4c7894dfcadcab550d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:f3:18:e7:4b:5a:6d:78:1c:09:af:cc:e4:
                    6e:62:6f:d5:c3:5a:28:39:28:72:21:14:24:ac:a0:
                    fb:bd:59:7e:57:64:7a:ad:6b:a8:8b:c8:3d:8c:a5:
                    b7:9c:ed:6e:f6:15:92:0f:c5:ef:7d:d3:41:bf:88:
                    24:49:e1:53:5b:c5:8a:2d:82:8b:ce:f0:3d:43:94:
                    1b:ef:14:8a:8e:e6:17:1d:c2:dd:76:54:a7:88:e0:
                    cb:f7:14:4e:9a:e7:16:cc:c6:59:24:3b:3c:15:6d:
                    3d:12:77:53:7c:5f:fe:e8:93:a5:12:c7:80:9f:20:
                    2a:5f:37:85:6e:19:7e:13:af:24:ce:1d:e4:95:bc:
                    6a:de:cd:98:00:ef:c3:88:78:aa:6a:ce:18:ee:e8:
                    4a:df:9c:b3:54:1d:49:1c:ae:58:7f:bc:3f:b3:3f:
                    40:83:86:62:97:17:69:07:d9:b5:ed:f8:51:c8:07:
                    51:72:df:0e:8b:14:1c:32:a7:48:bb:39:70:25:6c:
                    cd:17:75:b0:ee:59:17:34:f7:eb:d8:bd:f0:9e:b5:
                    63:a9:09:0c:61:f2:b6:2f:88:0d:94:21:f1:11:11:
                    aa:f6:95:0b:34:39:db:68:ff:3b:40:17:b1:df:72:
                    5c:64:7b:04:f7:ee:ca:42:de:d9:ca:ce:bf:28:aa:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EE:9F:1D:5D:A7:E5:47:FE:56:CA:4C:78:94:DF:CA:DC:AB:55:0D
            X509v3 Authority Key Identifier:
                keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:45:16:22:e8:3c:5e:3c:76:47:b6:c6:00:4d:47:f1:7b:d8:
         af:6e:8f:f7:f5:1a:d1:43:b7:7f:24:91:2d:4d:b0:d7:b6:e1:
         13:5a:3b:db:53:e0:9c:d1:7d:de:5a:a5:02:a7:1b:58:18:c9:
         17:cb:7b:0a:75:b3:8b:43:f7:6c:55:85:8e:f1:5a:66:31:1b:
         80:f0:37:8a:6f:5e:cc:15:53:9e:0f:89:15:98:e2:0f:b9:89:
         c8:bc:37:cf:d0:b5:26:b8:02:a4:a0:10:b5:e7:bb:46:c0:85:
         9a:b4:06:6a:2f:4a:c3:51:c0:cf:29:08:e5:25:31:87:70:48:
         96:65:12:51:d4:4b:d9:75:45:51:24:66:d6:1a:15:2c:3e:7f:
         87:75:82:44:a5:2e:eb:c4:af:c8:60:a1:0b:5c:e9:8e:f7:08:
         3e:83:40:60:8b:32:bd:25:13:11:b2:63:07:6a:b3:7e:d0:8c:
         ec:bd:e6:5a:fc:53:81:83:ac:1e:cc:50:a7:14:f3:fc:47:80:
         c7:f6:39:e0:5e:73:c0:c0:29:ef:8d:ec:f1:ef:ec:87:ec:1d:
         de:f5:ff:39:ac:6b:f5:22:44:ee:c5:4e:7a:ec:94:52:d9:86:
         74:84:b1:09:12:1b:a1:da:24:2d:85:a4:88:88:25:12:2d:e2:
         9f:7d:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:17 2024 by rpki-client on console-fra.rpki-client.org