Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File:                     zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier:          xd028ELtHIh4WppgEk2pMyE3pf85E/cLJMF85dD47B0=
Subject key identifier:   C3:AA:2D:12:B6:53:95:9A:44:37:22:A5:7A:F9:AD:B7:59:B9:4E:08
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer:       /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial:       018F866CDF3D9CE454FFCE6CED0038ECE452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number:          D9
Signing time:             Fri 17 May 2024 12:00:32 +0000
Manifest this update:     Fri 17 May 2024 12:00:32 +0000
Manifest next update:     Sat 18 May 2024 12:00:32 +0000
Files and hashes:         1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: 3oweN/3DJpkNVWA2lOjheIQWf8DYKezsUb9XmuVpTNo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:df:3d:9c:e4:54:ff:ce:6c:ed:00:38:ec:e4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
        Validity
            Not Before: May 17 12:00:32 2024 GMT
            Not After : May 18 12:00:32 2024 GMT
        Subject: CN=c3aa2d12b653959a443722a57af9adb759b94e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:73:42:bb:8b:47:eb:e6:6a:c4:10:b4:3f:
                    2b:af:aa:6d:24:3c:5f:09:1d:22:c3:b3:b8:c3:b5:
                    a9:9d:b0:df:67:7b:e8:f4:e8:85:a4:f5:4f:e5:a4:
                    35:69:af:96:57:5d:dc:4f:7b:1c:d8:e3:f7:8e:de:
                    e7:09:42:c0:23:47:2e:01:37:38:5e:a5:34:e2:79:
                    0b:ce:76:29:90:7e:2e:9f:f4:91:f4:43:d6:2b:fa:
                    0b:ba:c4:c6:59:26:64:3a:db:36:04:45:ff:16:19:
                    5b:96:4b:f0:fd:bb:36:d1:ae:4d:40:9e:2e:2d:fe:
                    89:32:ca:05:91:d8:46:55:e2:50:2b:99:b4:3b:b9:
                    01:2d:3d:b7:8d:32:94:83:a8:88:d7:33:5c:58:24:
                    9d:65:7b:04:ed:d0:b1:98:9e:7f:e4:70:19:74:b2:
                    46:35:4d:2b:d4:a1:85:e9:af:9a:88:4b:e6:ee:9f:
                    49:4f:c2:42:96:63:cd:0f:d0:44:07:bf:e9:5d:52:
                    df:66:15:49:56:90:62:39:e8:3b:e9:61:96:58:56:
                    78:99:8b:1a:8e:2f:92:b9:c5:3a:9f:3d:24:1f:96:
                    6f:7e:e0:64:b1:f0:97:9e:79:71:23:42:75:71:4d:
                    8a:d1:2b:84:13:37:fa:39:a8:f8:7a:ad:bb:cd:78:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AA:2D:12:B6:53:95:9A:44:37:22:A5:7A:F9:AD:B7:59:B9:4E:08
            X509v3 Authority Key Identifier:
                keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:b1:40:93:f5:67:07:fe:16:f2:c5:41:a7:6d:2b:04:11:
         ee:5d:43:ed:a0:36:ec:74:70:e2:bd:28:67:ab:73:29:4c:9c:
         34:7b:d2:44:cf:27:59:5a:db:57:a0:24:9f:d6:72:c3:9b:bb:
         1e:d0:23:52:95:7c:b5:d9:e3:01:e4:c4:75:c2:d8:92:7f:d2:
         8a:4a:4c:53:9d:18:f9:16:9f:49:c2:05:e3:c7:82:63:18:09:
         b0:79:a3:1b:2a:1f:36:0a:4a:82:18:db:c4:88:ca:a6:c5:cf:
         79:ae:8b:dc:d4:56:7c:5f:7d:0c:6c:b2:9b:1e:c9:d7:59:59:
         c1:2e:b7:3c:09:2d:b1:40:56:ef:8c:4f:cb:cd:77:7a:c5:97:
         1e:5e:53:15:ff:6f:a9:d2:77:75:d8:cb:82:e8:57:ea:35:af:
         08:d4:20:fa:ed:86:4f:60:8b:5f:15:ce:9c:19:be:2a:24:c4:
         46:62:e3:55:cb:c0:db:23:ad:78:bb:e3:b0:7d:c5:dc:7a:d5:
         5a:e3:54:7b:f7:a4:c0:31:4e:d9:0e:e1:c6:4f:2e:e3:8a:0c:
         de:d6:7e:44:9d:85:cb:89:12:dd:3e:18:55:5d:6b:73:98:5c:
         1a:9b:93:5e:65:0c:b1:f7:98:02:ed:f4:ce:70:ff:a9:9a:6e:
         0b:c1:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:27 2024 by rpki-client on console-ams.rpki-client.org