Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
File:                     Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json)
Hash identifier:          oZZUel5I2sXrSAqI5ktvvIesslWuc4G//usiq5LrqRY=
Subject key identifier:   B3:22:46:F5:1A:C8:A5:48:51:58:BF:DC:FE:92:4F:C7:E6:73:FF:98
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Certificate issuer:       /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial:       018FB1C6853F5470BD22AA69985E03088ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
Manifest number:          118A
Signing time:             Sat 25 May 2024 22:02:08 +0000
Manifest this update:     Sat 25 May 2024 22:02:08 +0000
Manifest next update:     Sun 26 May 2024 22:02:08 +0000
Files and hashes:         1: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: g5P6KbUwbb69rheuLQ0x6hlwJm2vcJ34FHs9lH9vHSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:c6:85:3f:54:70:bd:22:aa:69:98:5e:03:08:8a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
        Validity
            Not Before: May 25 22:02:08 2024 GMT
            Not After : May 26 22:02:08 2024 GMT
        Subject: CN=b32246f51ac8a5485158bfdcfe924fc7e673ff98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:70:45:07:b2:98:f0:0b:da:1c:51:49:cf:
                    49:c7:01:e3:8a:17:ce:f3:21:03:0a:0b:6d:61:f0:
                    e2:2d:c2:6f:2c:5b:b0:47:af:4e:61:76:d1:4c:83:
                    09:68:28:d0:0d:2a:b8:8b:7d:04:33:f3:83:fb:21:
                    6d:48:ac:34:a4:66:06:de:be:d7:53:02:b0:30:55:
                    ab:6a:c7:10:52:ab:c1:dd:c9:3b:a6:8f:36:24:20:
                    9c:f5:85:33:81:82:bd:ed:20:8d:87:a3:71:2e:87:
                    e4:63:8c:bd:3b:a4:e1:ef:79:dd:63:b3:9b:55:aa:
                    16:3e:fb:82:dc:6f:cb:28:dd:f8:a6:57:08:a9:23:
                    09:0c:01:29:f1:6a:7e:06:c1:62:bc:2d:0c:1f:d5:
                    a8:6e:e0:09:0e:58:d8:2c:43:9c:c1:61:e4:6c:99:
                    d3:1d:72:8e:75:bb:5f:b1:11:21:dc:c5:bd:01:b7:
                    b0:93:bf:ea:af:bc:3d:d5:5c:df:c2:e1:bb:06:9e:
                    46:c1:54:94:80:14:d9:b8:d4:ad:38:a0:79:83:db:
                    ed:52:7e:13:13:47:d4:3b:27:97:0e:8d:33:b8:52:
                    94:3b:c2:b1:2d:90:c7:87:df:b0:28:a0:0b:5e:9e:
                    61:c8:80:3e:13:35:10:a2:12:45:60:42:f4:34:53:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:22:46:F5:1A:C8:A5:48:51:58:BF:DC:FE:92:4F:C7:E6:73:FF:98
            X509v3 Authority Key Identifier:
                keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6f:9d:60:05:ee:f4:0f:3c:48:ea:08:1e:09:f6:3c:9f:a9:
         da:b5:49:e2:0a:1e:8d:e1:d1:97:4f:5b:3a:c3:52:cf:36:b8:
         fb:ea:45:78:2c:f3:22:85:86:33:b0:16:51:1c:0f:51:5c:52:
         bb:06:0e:cb:4b:12:90:43:65:74:d5:dd:cd:4c:f7:8c:14:ab:
         5f:5c:23:3d:1e:9c:0b:6f:5c:27:73:25:59:d5:38:5b:ef:a5:
         21:78:48:01:63:6c:0b:bb:da:23:8e:18:14:04:63:81:82:5a:
         f2:c2:60:1e:55:2c:cd:26:c2:ab:82:e5:69:58:58:c0:77:cd:
         07:cc:f9:1e:9e:a4:c0:1a:62:4b:cd:6d:fc:9f:87:10:fb:2f:
         a6:f3:dc:54:6e:42:05:43:8c:f5:94:f3:fa:30:5b:ad:7a:8a:
         42:55:0a:74:ed:d7:82:ff:18:25:59:ac:4b:6f:98:96:50:b0:
         7d:55:d4:26:3f:b7:ea:b4:cb:0f:d0:ab:40:37:25:89:95:d7:
         23:3d:e0:50:61:68:05:f0:15:6e:cf:35:b0:02:1d:30:c4:19:
         4c:5c:99:e5:68:ee:68:5b:d5:99:f3:de:f6:b2:cd:12:cb:6b:
         42:77:5d:7a:93:1f:36:77:f0:59:6a:0c:b5:48:28:bd:3f:de:
         31:ef:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:44:54 2024 by rpki-client on console-fra.rpki-client.org