Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File:                     Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier:          5lLUmExq9RRY1JknZ66A3P2KaJFW/yfcfv85gHrR+Mw=
Subject key identifier:   33:D6:E8:4E:54:1B:69:94:61:CB:93:05:C7:05:35:79:AB:1E:54:3B
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer:       /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial:       018F877F42809A5AE2185756B06B6EA65396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number:          0620
Signing time:             Fri 17 May 2024 17:00:15 +0000
Manifest this update:     Fri 17 May 2024 17:00:15 +0000
Manifest next update:     Sat 18 May 2024 17:00:15 +0000
Files and hashes:         1: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: VTTV1LrnZSsDza0sbKsfpkiaEPPyHm3QzdP5UHOKKFo=)
                          2: x7xrT-sLZ9Scjiu3Xx5YXatza_I.roa (hash: w5CzPy6HuSLqVNoVQgp+p2eGYHCUpohTj+ywrKss2D0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:42:80:9a:5a:e2:18:57:56:b0:6b:6e:a6:53:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
        Validity
            Not Before: May 17 17:00:15 2024 GMT
            Not After : May 18 17:00:15 2024 GMT
        Subject: CN=33d6e84e541b699461cb9305c7053579ab1e543b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:32:0c:3d:82:61:f9:0b:3b:30:27:19:d8:
                    33:69:7e:e1:9f:33:77:cf:e2:35:a2:97:6a:2b:81:
                    4b:b4:82:3f:bf:1c:8e:35:3e:90:27:8c:40:e4:c1:
                    1b:e4:ad:b2:9e:a5:c8:42:f4:80:a9:ba:76:cb:d1:
                    4f:ad:04:3e:ff:9a:75:22:20:d5:99:a1:8a:66:a0:
                    8c:b7:cc:45:dc:80:66:5b:62:a2:cc:2e:36:7c:4b:
                    9c:79:ee:2d:f0:ab:79:9d:7c:6f:43:db:0a:23:ef:
                    21:f5:25:5c:ad:ef:7f:43:9a:a8:aa:1c:48:63:46:
                    33:a8:00:ca:be:b5:29:d0:38:8a:a3:b8:2e:2f:2e:
                    cf:83:b8:a2:3d:39:1c:42:f1:10:e3:e8:36:78:2b:
                    c9:0c:0e:12:33:54:87:49:35:e9:70:e9:74:53:2f:
                    12:29:e0:ee:32:d0:b7:14:f2:62:9e:d8:af:88:5a:
                    75:cf:aa:dd:83:f8:8f:9d:3e:29:ef:ca:81:fb:84:
                    6d:6b:e6:1e:e9:a5:1e:e7:ac:c3:bb:99:33:7d:cd:
                    e8:b0:e6:d6:91:3f:80:dd:82:2d:56:c5:43:41:1e:
                    91:40:ca:95:34:e2:d0:63:a8:37:6a:17:83:ce:94:
                    ca:f7:cd:18:a6:a4:cd:65:23:88:40:7b:ca:60:aa:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D6:E8:4E:54:1B:69:94:61:CB:93:05:C7:05:35:79:AB:1E:54:3B
            X509v3 Authority Key Identifier:
                keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:18:1d:6e:1d:7d:f3:73:08:a7:6e:e3:f1:01:65:a7:f6:
         67:55:bb:06:52:61:65:d4:2f:ab:d2:fc:f7:87:1e:10:a5:44:
         a1:ae:39:26:8f:8a:96:8a:f9:6a:9c:e4:6b:7e:b9:d5:00:3d:
         23:39:29:6f:97:e2:78:ca:5c:cc:d3:c1:8b:1b:1a:2f:c4:44:
         88:7c:d8:12:91:f4:22:8f:50:cc:e9:87:27:56:06:e7:cf:ca:
         35:a2:1a:b8:95:49:0a:a2:01:a2:ed:80:1d:9f:48:d3:8d:3e:
         a7:16:cc:c7:57:9c:29:18:91:e6:5b:cf:de:c0:26:4d:40:c2:
         bb:3f:b7:b7:e9:05:f0:96:e5:69:10:1f:f7:0c:45:45:8e:52:
         58:a7:46:57:81:36:5d:93:93:e4:93:83:98:10:2a:4d:d4:44:
         9a:0f:80:fc:56:04:ed:2f:0e:5e:e8:ee:1b:a1:57:a9:61:f3:
         3f:c0:8c:b4:6b:36:3f:2c:bc:91:4f:53:d9:04:a9:65:30:bf:
         5d:ad:86:8e:88:d2:a0:da:7c:9f:38:78:53:8b:82:05:a9:26:
         8a:96:a1:23:5b:60:38:ba:00:69:ee:2b:a2:24:b7:1e:07:df:
         cc:22:e2:42:43:ac:09:7a:8c:18:65:f9:14:a7:bf:4e:65:23:
         d3:88:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:36 2024 by rpki-client on console-fra.rpki-client.org