Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File:                     ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier:          Ne9Nx2/qvKcqA2RB7m8Thmf04hOWeLu3u/XkFFS539I=
Subject key identifier:   05:14:CC:44:01:3C:1E:07:74:0E:3F:51:AC:53:74:2F:5E:FB:4D:11
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer:       /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial:       018F885B220AA6F65F0E98E391C690AA31EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number:          0CA6
Signing time:             Fri 17 May 2024 21:00:24 +0000
Manifest this update:     Fri 17 May 2024 21:00:24 +0000
Manifest next update:     Sat 18 May 2024 21:00:24 +0000
Files and hashes:         1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: u+3nCkI2FTdgkpyX7W9KcfLrAy03WL8WD35mT0Srdn0=)
                          2: vKtleLxOMJDmNUjb1WvAtt1oe_k.roa (hash: gYZZo90fZRlDLONuj8DNt7+msOvtmmunnIHV7ob9vKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:22:0a:a6:f6:5f:0e:98:e3:91:c6:90:aa:31:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
        Validity
            Not Before: May 17 21:00:24 2024 GMT
            Not After : May 18 21:00:24 2024 GMT
        Subject: CN=0514cc44013c1e07740e3f51ac53742f5efb4d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cd:f5:0c:a4:e6:6b:4a:c8:25:9e:fa:98:04:
                    4c:98:fc:aa:47:65:04:6b:13:1e:bf:b4:0f:eb:fe:
                    ad:00:4d:48:71:aa:87:89:c7:9b:52:cc:c7:a0:92:
                    88:ec:75:64:3a:c1:06:55:c4:32:18:d2:a4:02:64:
                    41:e9:4f:c4:2c:7c:41:90:a3:08:f7:d6:59:3a:c6:
                    78:a9:91:85:09:cb:1c:dc:11:fb:dd:fc:a1:a6:aa:
                    b9:33:6e:72:c3:40:ec:9b:04:01:dd:61:9b:60:fc:
                    72:bf:c2:e8:08:bf:18:36:03:49:70:01:2c:b1:e7:
                    2f:e9:50:4d:87:00:8e:6b:7c:9d:b4:92:2e:36:97:
                    5d:4d:26:85:b0:26:2f:e5:76:14:0b:1b:a5:23:dd:
                    24:45:18:a7:fe:c5:d7:6c:dd:0b:54:9a:5d:0f:b5:
                    a7:f0:93:2c:fb:51:20:95:97:88:1a:c2:f0:a0:fe:
                    f6:b2:01:24:15:a9:04:15:e3:37:c5:51:7f:2b:ca:
                    cb:58:e7:eb:40:63:7d:f4:35:dc:35:00:78:af:ef:
                    62:fc:6a:b5:5f:e2:13:7e:b8:e3:91:04:99:e7:dd:
                    68:db:b8:33:2d:8b:c6:ff:6c:de:46:90:5e:e7:e2:
                    52:d9:08:91:83:19:e5:31:37:a6:87:f4:75:6f:6e:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:14:CC:44:01:3C:1E:07:74:0E:3F:51:AC:53:74:2F:5E:FB:4D:11
            X509v3 Authority Key Identifier:
                keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:96:51:d2:18:49:fc:d1:a9:56:12:16:2f:6f:f1:49:6f:
         1d:67:67:d6:4e:fa:76:16:a8:54:ce:7c:7d:fa:63:66:fb:0f:
         af:b8:87:ca:c0:61:4f:57:f1:51:f8:50:7a:d8:6a:f3:9f:6c:
         21:f9:80:0d:8d:94:81:6d:55:84:29:12:7e:97:4d:e5:64:0b:
         28:c8:5d:da:b7:5c:d3:f1:67:48:16:83:76:29:24:6d:37:ac:
         48:84:7e:28:f1:69:77:50:36:84:d6:78:88:78:98:38:4f:e3:
         48:ec:59:29:f4:93:e2:6c:bc:01:9b:1d:91:0d:11:fa:6f:f3:
         1c:f2:37:c7:73:15:48:7f:89:f2:27:ec:de:0e:6f:6c:a0:97:
         bf:b5:b7:f0:06:d3:52:20:5b:f1:8a:f5:86:c1:7a:8c:db:cf:
         e2:53:70:52:2c:86:a8:20:97:fd:e7:f5:de:e8:34:e2:c6:ec:
         a9:1e:71:ca:01:97:e9:99:05:45:ea:7e:46:7b:e2:44:12:1e:
         ac:fe:f9:04:6e:0f:ac:15:a5:7f:c7:fa:46:96:4e:2d:df:47:
         50:21:52:be:33:12:6a:c0:b3:1e:76:f9:25:ba:b6:d0:cf:e7:
         b6:11:ae:a8:7d:2d:63:69:4f:59:67:c9:9e:13:69:67:0f:19:
         47:eb:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:23 2024 by rpki-client on console-fra.rpki-client.org