Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.mft
File:                     zvoStmPnGorLx7ROcCoO1r1jyB8.mft (raw, json)
Hash identifier:          bE7GPHdjcUUDcElDJcyOBtfUh02CxHH3fs+f9874JXY=
Subject key identifier:   4B:01:7C:14:F2:A8:92:61:54:83:18:50:0E:94:74:33:D0:22:B7:88
Authority key identifier: CE:FA:12:B6:63:E7:1A:8A:CB:C7:B4:4E:70:2A:0E:D6:BD:63:C8:1F
Certificate issuer:       /CN=cefa12b663e71a8acbc7b44e702a0ed6bd63c81f
Certificate serial:       018F86365261F58E801A8B347F050C102793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvoStmPnGorLx7ROcCoO1r1jyB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.mft
Manifest number:          0B19
Signing time:             Fri 17 May 2024 11:00:57 +0000
Manifest this update:     Fri 17 May 2024 11:00:57 +0000
Manifest next update:     Sat 18 May 2024 11:00:57 +0000
Files and hashes:         1: zvoStmPnGorLx7ROcCoO1r1jyB8.crl (hash: nzQhD6pysY/XHJnEcvRWZiW3GAcPBzpVi8VS5okpgQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvoStmPnGorLx7ROcCoO1r1jyB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:52:61:f5:8e:80:1a:8b:34:7f:05:0c:10:27:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefa12b663e71a8acbc7b44e702a0ed6bd63c81f
        Validity
            Not Before: May 17 11:00:57 2024 GMT
            Not After : May 18 11:00:57 2024 GMT
        Subject: CN=4b017c14f2a89261548318500e947433d022b788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:1b:52:50:e9:19:74:18:d3:95:b6:67:3f:
                    79:25:36:69:75:5f:3e:6b:aa:c1:84:e2:9e:d9:3b:
                    f5:e2:7a:df:27:a5:1e:47:e2:63:c1:e4:10:83:a0:
                    d4:71:13:41:d9:eb:08:6d:56:68:7f:3d:8a:3c:d3:
                    00:84:cf:35:d3:77:65:dd:a7:49:0c:94:bc:10:ae:
                    72:9b:0a:58:ee:23:73:5b:44:7b:da:21:83:cb:0d:
                    57:9b:cf:ca:bc:9e:c6:6a:49:3e:5b:14:77:98:a3:
                    ff:cc:ed:dc:bd:57:dd:13:c0:87:21:4c:1a:99:e7:
                    b1:c9:96:06:1d:35:72:db:9c:10:38:44:7d:6e:2b:
                    a4:8d:9a:af:c6:32:92:fd:de:2a:38:24:42:ce:f8:
                    4b:fa:e7:10:e8:14:ad:6a:22:75:b5:46:23:ec:cb:
                    02:0e:e7:15:6c:77:af:0f:11:65:9e:6a:68:8c:16:
                    a9:4e:9c:de:d5:46:99:ac:06:48:b8:9c:9c:3c:dc:
                    e3:ea:53:a3:db:70:53:5f:47:70:8b:cb:17:87:26:
                    7c:2e:fe:19:df:28:e9:5d:08:60:f2:c2:78:db:e9:
                    9a:7f:42:d5:de:02:7d:57:33:27:05:a3:63:ec:d7:
                    13:fb:dd:f4:6d:63:9e:dd:77:f4:a1:13:6a:92:c0:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:01:7C:14:F2:A8:92:61:54:83:18:50:0E:94:74:33:D0:22:B7:88
            X509v3 Authority Key Identifier:
                keyid:CE:FA:12:B6:63:E7:1A:8A:CB:C7:B4:4E:70:2A:0E:D6:BD:63:C8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvoStmPnGorLx7ROcCoO1r1jyB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8a:5a:6f:2f:f6:ca:65:aa:7f:5d:26:b4:e6:bd:6b:d0:28:
         fb:c4:10:ff:47:33:ba:25:ac:c2:44:d6:d4:fe:b1:21:32:fa:
         2f:57:15:f2:c5:49:25:0d:92:fe:33:03:d2:3b:7f:9b:56:ce:
         e7:fa:24:16:ed:1c:f2:5c:a7:88:35:6d:71:4b:ea:70:57:5c:
         69:26:17:6e:21:1f:54:9e:ae:e9:21:fc:f4:67:49:09:07:bc:
         7e:d6:43:21:3c:54:6e:37:21:c6:64:2c:ea:8d:67:e5:e9:c9:
         e7:20:f8:4c:a9:7f:03:1a:90:59:f6:a9:a5:11:f6:5c:d3:57:
         8b:52:fa:8d:f9:e1:36:51:4e:0e:25:1c:e1:fc:8f:5c:7b:1d:
         31:dd:1e:db:da:eb:4a:47:64:57:4e:47:00:87:8f:bb:5a:0a:
         40:2a:4d:f3:91:dc:b7:28:ab:ce:11:df:79:97:6b:d9:6a:c2:
         9c:c1:fa:40:89:1d:4a:99:77:81:74:0d:e9:ec:b0:68:2d:3a:
         ae:34:b7:8d:15:6c:f7:40:2d:2e:60:cb:4b:ad:c5:b6:e5:e1:
         0c:e2:6b:a3:c6:ad:51:b0:7d:b5:72:ba:65:a4:3b:f5:11:f5:
         b2:0b:88:78:71:be:92:24:cc:fb:e1:1c:01:dd:be:08:b8:c9:
         c8:70:12:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:06:02 2024 by rpki-client on console-fra.rpki-client.org