Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File:                     zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier:          tae6UWiFGj7iF8baSsxrTvT1Tm0kBU5tPoQ0JfJJZSM=
Subject key identifier:   CE:18:96:D1:EF:88:A4:DA:45:CE:8B:78:3D:3C:90:B7:70:7D:45:0C
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer:       /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial:       018F89398102738A1E9CB766080DB44F5F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number:          0995
Signing time:             Sat 18 May 2024 01:03:18 +0000
Manifest this update:     Sat 18 May 2024 01:03:18 +0000
Manifest next update:     Sun 19 May 2024 01:03:18 +0000
Files and hashes:         1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: NEo1kNiz0VxSdLXkOzZVL8Avcn1Y/9EM6MtEsY9nqOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:81:02:73:8a:1e:9c:b7:66:08:0d:b4:4f:5f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
        Validity
            Not Before: May 18 01:03:18 2024 GMT
            Not After : May 19 01:03:18 2024 GMT
        Subject: CN=ce1896d1ef88a4da45ce8b783d3c90b7707d450c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:af:c4:2b:e6:b3:35:d1:f4:98:44:61:ac:
                    27:47:e4:a1:25:b6:28:cb:05:41:e3:3c:1a:9e:e3:
                    82:63:04:b6:03:47:aa:72:65:44:c8:87:2a:42:c5:
                    85:0b:ac:20:17:61:18:95:b1:a7:b5:be:89:85:a4:
                    33:e6:21:c9:46:ab:65:b0:67:9c:91:5f:35:65:23:
                    37:e5:ef:fb:12:ea:82:d5:8d:22:68:8e:19:42:75:
                    a7:b7:88:ba:fe:51:1b:a0:28:4f:27:7f:45:c5:4c:
                    20:3e:9c:cd:a5:77:94:1f:28:52:24:ec:aa:13:a8:
                    6c:6e:4e:19:40:1e:28:1f:1c:b8:9d:a8:e5:3d:e1:
                    8d:85:2e:8c:c7:22:d6:da:f9:b7:8d:07:80:21:88:
                    5c:8f:82:6a:02:aa:f0:81:a8:5a:1e:58:de:05:63:
                    ec:66:36:bb:9a:51:36:93:25:b0:9f:27:b7:c7:df:
                    d0:95:4e:d9:15:45:28:00:2f:0b:85:7e:58:7e:3b:
                    2b:d0:1f:e0:e5:b3:61:55:05:8b:bd:7c:bc:f4:c4:
                    b2:0d:b0:ae:03:92:29:61:ec:12:60:09:ba:ed:45:
                    05:b7:b7:1e:26:e7:6c:e0:0d:19:f7:a4:80:06:f4:
                    15:d0:ff:c9:f9:07:16:b8:b8:b5:e8:ac:88:75:3d:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:18:96:D1:EF:88:A4:DA:45:CE:8B:78:3D:3C:90:B7:70:7D:45:0C
            X509v3 Authority Key Identifier:
                keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:40:19:4f:73:1c:19:26:ee:a4:13:81:cb:e6:7c:08:a6:
         be:fa:ed:43:e2:9b:30:cb:06:de:8a:53:b8:40:d7:81:d5:44:
         e7:6c:b5:8b:16:8d:1b:3b:4f:36:84:5b:ff:e6:c1:4d:ba:20:
         99:d5:57:9f:1f:50:4a:47:21:e2:60:57:96:89:41:eb:b3:2e:
         96:15:71:73:ca:f9:c3:d2:b1:ea:67:32:53:79:67:9c:56:8d:
         be:ca:ef:64:24:4e:88:fd:2d:80:8b:d7:8f:f4:e6:10:5b:ce:
         9d:00:a5:46:a2:b1:ec:d6:06:ad:c6:dd:73:e9:c4:24:5c:8e:
         d2:b7:61:f4:96:4e:bd:6a:c4:a1:9e:f6:bd:17:7d:0b:c6:4d:
         8d:80:13:fe:1e:8c:92:a1:ff:e0:60:ec:18:f3:62:31:87:dd:
         43:62:2b:70:96:40:9e:c1:f6:a6:e0:dc:48:de:75:39:ff:68:
         47:95:8a:06:c7:6f:8e:07:3f:e1:29:81:4f:6c:9c:fe:f7:44:
         84:d1:06:d4:a5:31:b1:45:4d:1b:cc:0f:78:be:4e:e0:6a:5c:
         ca:07:3f:e7:6a:65:72:a4:98:94:83:2e:72:8d:a9:03:83:7d:
         6f:04:46:4a:f7:c3:7b:59:51:99:b5:b2:cd:51:41:02:4a:5d:
         25:86:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:25:14 2024 by rpki-client on console-ams.rpki-client.org