Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
File:                     zZ2srF97QCrwm1L-aJFlS5NJmsU.mft (raw, json)
Hash identifier:          DrLtoy8bdnrvq+tz3cS4Q6bIK4rHKPoNaAsViH093Mg=
Subject key identifier:   F6:0C:8C:43:77:F9:81:79:19:4D:5F:A5:33:18:40:40:9B:2E:0E:70
Authority key identifier: CD:9D:AC:AC:5F:7B:40:2A:F0:9B:52:FE:68:91:65:4B:93:49:9A:C5
Certificate issuer:       /CN=cd9dacac5f7b402af09b52fe6891654b93499ac5
Certificate serial:       018F87ED07363347A0D2BD77A688B126B96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
Manifest number:          048D
Signing time:             Fri 17 May 2024 19:00:09 +0000
Manifest this update:     Fri 17 May 2024 19:00:09 +0000
Manifest next update:     Sat 18 May 2024 19:00:09 +0000
Files and hashes:         1: zZ2srF97QCrwm1L-aJFlS5NJmsU.crl (hash: QWKFlJi+m+9z/XukdmABsXUDUtNUBIPET+R0ioqfMRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:07:36:33:47:a0:d2:bd:77:a6:88:b1:26:b9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd9dacac5f7b402af09b52fe6891654b93499ac5
        Validity
            Not Before: May 17 19:00:09 2024 GMT
            Not After : May 18 19:00:09 2024 GMT
        Subject: CN=f60c8c4377f98179194d5fa5331840409b2e0e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:25:c2:bc:b9:0d:05:ae:86:bc:09:88:ca:ec:
                    b9:c4:31:28:97:2c:ed:72:44:38:9e:61:26:33:87:
                    a1:37:d9:58:a6:31:48:ad:84:08:c6:1a:b3:b1:f7:
                    14:01:a4:dc:3e:e9:a7:6e:d2:25:d5:c3:3a:c8:ac:
                    80:4f:24:4f:35:fd:3f:76:14:df:99:0a:e9:18:2c:
                    bb:bd:04:0e:5b:b6:cd:94:39:3c:ae:44:55:99:98:
                    96:bc:c0:0c:67:e7:b6:a5:47:a7:34:97:3d:c0:76:
                    2a:20:77:07:7f:a7:32:53:5f:dc:0a:25:b6:90:59:
                    b8:83:7b:e7:ba:e5:33:18:77:12:53:b3:e4:5f:cd:
                    da:89:bd:2e:ad:3c:b7:68:89:eb:04:42:78:a9:fd:
                    38:1e:39:a7:bc:cf:0c:46:c4:64:e3:67:e8:d6:7f:
                    aa:65:5a:61:75:10:41:6a:5e:9c:53:b8:15:94:40:
                    b6:e5:55:7e:5e:59:34:a4:81:a5:73:89:41:e0:da:
                    87:ef:86:09:e4:77:c9:38:fd:ad:39:d2:55:77:26:
                    1d:f6:8c:66:5a:9a:25:74:b3:5a:2f:41:8d:ee:b6:
                    49:d7:52:c4:8d:70:9a:37:d9:f6:ab:24:a0:8d:9a:
                    f1:e8:ce:dc:fe:9b:56:7c:f2:d8:18:47:b7:9b:10:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:8C:43:77:F9:81:79:19:4D:5F:A5:33:18:40:40:9B:2E:0E:70
            X509v3 Authority Key Identifier:
                keyid:CD:9D:AC:AC:5F:7B:40:2A:F0:9B:52:FE:68:91:65:4B:93:49:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:93:26:e8:f1:f0:b4:89:9d:3b:92:d0:e3:82:4f:32:19:1d:
         eb:01:ef:98:18:06:25:9e:ae:ca:e9:39:81:0c:35:04:5d:94:
         47:98:c7:b3:2f:f7:b3:78:dc:5b:84:c6:c8:af:de:90:e1:71:
         9c:70:7d:d9:fa:0d:a9:79:d2:2a:92:ae:02:98:47:66:4c:1f:
         ba:35:c8:b8:e6:d8:ac:55:63:03:98:f1:dd:2d:e3:5c:c5:27:
         52:20:17:b4:ee:73:f3:32:f2:9f:df:4d:1e:f4:8b:b3:9e:0f:
         2b:c9:35:ab:0d:98:e8:85:d7:04:5a:27:c7:eb:51:8a:7f:04:
         ed:f7:0c:40:61:42:fc:73:ae:3d:7a:ec:eb:c7:9d:a4:23:06:
         fa:12:69:6a:13:68:86:78:8c:0c:b2:73:35:e0:31:6f:fd:ce:
         6d:8a:8e:00:96:3a:b9:10:07:36:3a:74:59:3c:56:cb:c4:3e:
         5f:25:61:59:94:1f:09:66:d5:a9:45:95:7b:d0:f0:80:94:bc:
         59:78:6a:cc:e6:f6:30:98:31:9f:22:27:a2:c0:a7:d3:0f:08:
         1f:9c:d1:0f:28:70:08:e2:fa:1a:77:a2:0f:0a:9a:e8:cb:4d:
         f4:ae:12:fb:a8:ce:10:63:d4:ad:59:0b:37:cc:ac:86:32:88:
         a8:0a:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:26:47 2024 by rpki-client on console-ams.rpki-client.org