Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          XfG7/K6rst4rrOCM3HaTW6uEq/YywEhBfpA+KkdrQoI=
Subject key identifier:   C2:DD:BA:98:CB:85:40:14:4F:FA:12:97:BC:A1:F6:D1:3A:3B:61:21
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       019366D79ED36B5DB94CA6822CF2701263F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 05:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 05:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 05:00:27 +0000
Files and hashes:         1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: U+zRA+kwL8PxH9XQbQgCHb68abDAQuseVmt3lpkCz2Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:d7:9e:d3:6b:5d:b9:4c:a6:82:2c:f2:70:12:63:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Nov 26 05:00:27 2024 GMT
            Not After : Nov 27 05:00:27 2024 GMT
        Subject: CN=c2ddba98cb8540144ffa1297bca1f6d13a3b6121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:85:5c:08:1b:36:27:a8:a7:cb:fb:a0:5d:0f:
                    89:a4:7d:c4:cf:85:42:b1:be:9c:a2:3d:99:89:e2:
                    dd:11:b8:06:ba:80:ce:22:25:ed:8c:6c:ad:91:30:
                    9f:30:1e:3f:37:21:94:e6:bd:3d:c0:1a:0b:dc:4f:
                    35:4f:60:56:b4:da:c5:64:3f:d4:7e:3f:fe:d7:ac:
                    9a:71:27:00:8b:c8:a1:28:45:29:c7:b7:bb:77:9d:
                    92:58:c0:55:56:fe:f7:77:7a:2d:15:2d:a4:ad:b2:
                    ea:2c:65:bb:7b:72:1f:54:af:0a:55:15:bd:53:a4:
                    c0:ae:1d:77:ad:a7:b4:68:90:32:e8:40:c1:bc:bc:
                    94:9c:26:ff:9d:bb:b3:f8:c0:68:31:8d:7e:c2:b3:
                    f8:9c:3d:41:ca:bc:6f:b8:50:58:10:d0:a6:fe:b3:
                    f2:4e:97:70:4e:f7:51:cb:09:c4:19:ad:cc:92:aa:
                    5a:5d:03:61:3f:73:4e:2e:d1:aa:27:3a:41:9f:c0:
                    0a:05:cb:df:82:91:17:13:82:89:b7:85:e8:32:fd:
                    35:e0:ce:e4:b8:14:3e:0c:31:4e:e6:2b:28:28:6e:
                    b7:54:f5:af:8e:e3:15:7b:50:67:69:09:ac:ac:63:
                    0b:ee:b8:0d:3a:6d:c4:a5:0b:c9:4a:2d:02:27:86:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DD:BA:98:CB:85:40:14:4F:FA:12:97:BC:A1:F6:D1:3A:3B:61:21
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:eb:f1:65:55:4a:b6:03:bf:db:5b:4d:81:95:40:c3:2a:
         0a:ae:bb:d9:45:b2:67:62:6f:16:c5:e7:45:5d:91:76:99:7e:
         5e:29:4c:fc:e9:b5:fb:b7:ef:ed:49:a1:49:d0:95:1a:0e:06:
         df:aa:60:da:90:99:d6:95:63:66:ce:a5:8c:c0:ae:02:55:47:
         74:22:e9:71:a8:b4:a0:7e:50:be:08:04:62:42:af:e2:d3:f5:
         5d:e1:3c:b8:8f:19:3c:88:8c:39:18:f9:34:4d:47:28:92:b2:
         ac:59:cf:08:bc:99:9e:7d:35:4d:da:92:18:e3:60:a4:f5:7b:
         c1:20:29:a4:a2:60:ad:76:3c:12:1e:8d:1d:e2:18:3f:63:ba:
         7f:eb:cc:f9:61:3e:d5:ab:8f:85:cf:bb:92:d2:fc:42:cc:31:
         b8:42:f2:4e:f0:3d:a1:97:c6:9f:29:ea:15:e5:44:b0:a8:13:
         89:b3:c9:2b:47:fd:1f:a5:08:05:ca:21:b2:37:f0:35:3c:81:
         cd:fb:52:58:66:2c:7d:6b:46:dc:ac:7f:bf:c4:be:48:a8:64:
         5e:e9:50:da:3e:33:a9:77:5d:8c:c0:a5:33:8b:e1:ce:fb:47:
         10:37:ca:5f:4e:b0:58:e4:46:41:02:56:2b:26:5b:1e:90:2a:
         ea:de:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:38:24 2024 by rpki-client on console-fra.rpki-client.org