Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File:                     Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier:          TvqxdyZTuGOvrk00DCv+BFW01kaAuc310BjrJOdINcI=
Subject key identifier:   0C:BC:C8:62:A6:E7:AA:6A:B6:5B:F4:05:E2:98:54:D6:76:EF:31:0E
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer:       /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial:       018F88242721FB0B90204D2B1B7D8A412DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:21 +0000
Manifest this update:     Fri 17 May 2024 20:00:21 +0000
Manifest next update:     Sat 18 May 2024 20:00:21 +0000
Files and hashes:         1: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: XPmjiGEOj/dlcbJm8uD9kmIJB7uCUAbwwKvoWxUVCDE=)
                          2: xT-SQzIaLqX-FN75C4yTGXs_4kQ.roa (hash: OYl5hhgp+BxfE6mh7uwPzulfGXc+oP3IXCm8rLCx6b8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:27:21:fb:0b:90:20:4d:2b:1b:7d:8a:41:2d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
        Validity
            Not Before: May 17 20:00:21 2024 GMT
            Not After : May 18 20:00:21 2024 GMT
        Subject: CN=0cbcc862a6e7aa6ab65bf405e29854d676ef310e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:55:58:2d:13:5d:f2:db:b1:0b:37:52:8b:
                    8d:ea:08:06:c2:d6:d8:d5:ba:fb:af:9a:71:09:21:
                    0d:38:bd:ac:4b:57:94:ab:26:2b:26:79:fc:1f:76:
                    15:85:09:ae:cd:80:ee:e8:30:63:2a:cf:46:e2:47:
                    f8:08:82:ba:ab:1d:51:99:61:4f:8c:29:c8:ff:0d:
                    13:c6:8a:ca:40:fb:42:2b:6a:0c:aa:e6:d8:33:be:
                    b1:d7:53:59:db:f8:2f:7f:d7:6c:51:d7:7b:9c:90:
                    da:85:e5:f2:2e:8a:2a:c6:2e:fc:c1:ac:de:b7:21:
                    b3:93:f6:ab:13:10:3b:8d:77:35:bd:30:17:90:22:
                    9b:07:70:42:c3:8e:82:4f:b1:10:1b:00:0c:e1:2a:
                    dd:87:c3:36:2c:ef:0e:14:99:f3:bc:40:17:74:fa:
                    d2:c8:1f:cb:7d:04:9d:f4:9a:d5:48:dd:9b:fc:ba:
                    9d:b0:9d:58:3a:16:48:eb:e4:fe:ad:dc:ac:74:85:
                    50:98:58:4e:66:24:c4:e5:79:4a:da:53:fe:9b:4e:
                    98:a4:da:a1:a4:3c:1a:a1:40:2c:37:5d:dd:e4:5b:
                    01:3c:a7:3b:a3:d0:45:3f:03:19:22:08:26:d6:05:
                    a8:69:32:3a:31:1b:ca:48:c4:cf:4b:f8:77:cf:83:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BC:C8:62:A6:E7:AA:6A:B6:5B:F4:05:E2:98:54:D6:76:EF:31:0E
            X509v3 Authority Key Identifier:
                keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3b:af:f7:21:a4:5e:a7:0d:58:1b:74:30:d4:43:67:11:cc:
         6a:38:55:0a:b8:81:b5:cf:ce:10:00:b5:a7:99:fe:29:fe:52:
         ce:42:ed:29:3a:46:01:5a:41:87:74:26:b6:ea:c8:da:6f:f2:
         9e:be:25:a0:42:dc:58:9f:d4:ab:fb:b9:e1:c3:3d:de:2a:bd:
         53:d8:8a:2b:ff:3a:66:21:ab:ce:24:ba:86:37:7d:78:58:58:
         dd:36:94:ec:7f:9f:3c:7d:e9:a9:05:9e:53:ed:49:83:59:29:
         76:be:bc:9e:c4:53:c7:be:27:16:4b:a3:7b:e9:62:01:0d:b4:
         15:b9:f7:75:c1:27:2e:5a:67:1e:90:8b:58:f1:fa:77:8a:46:
         d7:a8:75:cb:b3:c7:f6:d9:dc:04:49:80:5a:c2:b7:42:7b:b8:
         cb:02:59:69:f6:87:a9:21:a6:89:a2:57:33:20:39:8d:bf:45:
         3f:8b:77:f1:df:e7:f2:fa:e4:3f:3d:cf:f5:7e:dc:cc:29:55:
         52:a6:fc:92:5b:08:a5:23:34:73:da:57:5d:88:e0:8e:d6:3d:
         47:b3:50:6f:e0:8d:b6:a4:f1:3d:ce:6f:43:61:51:b0:69:d4:
         1e:da:6d:33:30:e5:2d:31:d2:0a:6d:86:d7:e7:8e:8e:37:11:
         b7:c0:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:31 2024 by rpki-client on console-ams.rpki-client.org