Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File:                     zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier:          taizno7hgqPFcXckSxoUKfPWrNfnCbumskknRBo01bE=
Subject key identifier:   A6:71:97:EB:DE:DA:65:8E:97:D7:9C:5A:43:AD:DF:E8:20:E5:B9:DC
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer:       /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial:       018F94CCFF0DAF0233A63EE469BB07A603AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number:          1179
Signing time:             Mon 20 May 2024 07:00:13 +0000
Manifest this update:     Mon 20 May 2024 07:00:13 +0000
Manifest next update:     Tue 21 May 2024 07:00:13 +0000
Files and hashes:         1: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: +2IpEcqMqfyLJpSyVwTBaX6sRty7BG0Uwp8wvOfflf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cc:ff:0d:af:02:33:a6:3e:e4:69:bb:07:a6:03:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
        Validity
            Not Before: May 20 07:00:13 2024 GMT
            Not After : May 21 07:00:13 2024 GMT
        Subject: CN=a67197ebdeda658e97d79c5a43addfe820e5b9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:2a:49:ef:0f:24:3d:3c:cb:95:87:53:40:
                    b7:c9:82:7c:45:0a:87:fe:2a:8e:f7:93:a0:24:3f:
                    56:c1:c9:7e:ec:c8:da:4e:a6:1d:5c:bc:8e:92:40:
                    c3:03:e4:ad:69:dd:59:5a:a7:9d:91:aa:a3:46:fc:
                    a8:0c:78:de:ad:33:3f:92:c6:81:df:43:7f:a5:66:
                    ac:88:d0:37:75:ec:67:39:ec:64:6a:79:f4:b0:6a:
                    a2:20:1f:41:bb:a4:8f:95:74:35:fb:d4:b8:bd:0e:
                    ff:1a:8d:4f:38:17:14:d3:79:bb:3a:40:07:5d:a0:
                    a9:72:fb:c1:8c:e9:1c:ac:5d:4f:42:1b:2e:eb:68:
                    86:26:0b:02:68:64:f6:67:f9:27:31:05:56:f0:37:
                    2d:27:e8:84:e4:e0:f2:e9:ed:f0:6f:7f:44:fe:8b:
                    eb:03:2a:d1:a9:66:fc:bf:fc:3a:10:41:e5:77:4d:
                    fe:96:cc:73:3b:6e:36:6a:98:0c:b1:aa:33:27:dd:
                    ce:9a:89:a7:f9:e0:18:68:6f:55:37:74:8c:58:2d:
                    04:d0:7d:b5:3a:9d:a8:eb:fe:c4:bf:8e:07:ac:f4:
                    6d:c8:f3:78:74:57:7b:2e:c0:88:61:e5:97:fb:db:
                    c8:52:13:5e:7b:f2:26:12:4c:2b:9e:69:17:8d:e9:
                    f9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:97:EB:DE:DA:65:8E:97:D7:9C:5A:43:AD:DF:E8:20:E5:B9:DC
            X509v3 Authority Key Identifier:
                keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:53:a9:f4:6e:9b:31:fb:43:5e:7f:9b:f6:3f:5c:ef:c2:53:
         30:54:77:60:63:e7:d5:2b:1d:f9:74:1b:f7:1e:3b:d7:de:e9:
         1b:a8:11:02:7e:79:f0:18:67:34:68:c7:08:9e:b4:35:95:b7:
         8c:66:cf:bd:4d:17:f7:fc:1f:c5:09:6a:09:81:36:79:80:34:
         19:c1:9f:dd:e5:35:3a:0d:0d:66:b4:ad:37:90:d5:43:39:60:
         e2:85:6f:ce:df:77:40:a6:51:25:a2:26:4a:fa:7b:cd:2f:89:
         1c:6e:c1:ee:17:8b:b2:a2:5b:c3:3c:0b:eb:5d:fc:5c:e6:98:
         21:78:19:ff:16:e8:81:7f:5f:e6:be:80:b1:a7:e5:f1:61:aa:
         1e:7f:73:44:f9:98:b9:bd:ce:40:20:d5:1c:2f:bf:2a:d7:71:
         7e:79:46:06:11:b2:c3:a1:c3:1e:ec:76:68:24:03:09:6e:b2:
         98:c0:db:c6:44:c9:d2:b7:0f:d0:36:13:4e:a5:ec:8c:df:bb:
         0d:68:0d:66:da:6f:b0:8e:26:d0:e9:2f:ee:01:01:6b:9b:27:
         68:be:44:a1:85:00:1a:68:3c:61:4b:78:1a:92:cb:d3:0a:93:
         84:54:fd:3d:fd:c8:1c:73:27:19:c2:2a:f8:1e:58:69:8c:9f:
         3f:ff:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:09:02 2024 by rpki-client on console-fra.rpki-client.org