Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File:                     ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier:          sUoxvx6PVe7P+j7o0pAXb0ApR6loj9wFgiDbuYo/V20=
Subject key identifier:   4D:7C:9D:27:AC:AD:BF:17:82:D2:51:57:A1:43:26:AA:CA:C2:D6:A9
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer:       /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial:       018F87ED6C1DA68CC1B612BA19B0604C070E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number:          0D21
Signing time:             Fri 17 May 2024 19:00:34 +0000
Manifest this update:     Fri 17 May 2024 19:00:34 +0000
Manifest next update:     Sat 18 May 2024 19:00:34 +0000
Files and hashes:         1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: fuJcxTh+8JLSldKZ6sTG31/FbW3gR3HzxHbPFgdQ7+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6c:1d:a6:8c:c1:b6:12:ba:19:b0:60:4c:07:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
        Validity
            Not Before: May 17 19:00:34 2024 GMT
            Not After : May 18 19:00:34 2024 GMT
        Subject: CN=4d7c9d27acadbf1782d25157a14326aacac2d6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f2:55:00:4b:2f:86:85:ea:7f:12:15:a6:8b:
                    b9:5a:05:2e:60:a5:80:1f:ef:b2:62:b9:09:34:3b:
                    84:86:93:07:23:6a:a3:12:5e:b9:bc:e6:38:09:6d:
                    73:e9:13:3c:c2:73:41:f4:fe:d8:bc:35:2f:22:93:
                    c2:c1:75:c7:23:9b:cc:24:2b:f0:59:92:28:7c:07:
                    1a:c5:b4:bb:59:60:0f:b6:7a:75:f0:83:e3:7b:7c:
                    ce:66:56:b0:77:cb:38:2c:30:44:1e:57:41:35:df:
                    83:15:d6:2c:59:9c:e6:c4:5d:36:07:06:a3:3a:6d:
                    ae:a4:ec:cd:bd:c9:90:e7:17:3b:92:37:c2:79:58:
                    ad:25:b5:1b:c6:23:75:8a:55:c3:ed:f0:81:3a:bd:
                    2f:35:26:75:47:9a:df:65:8b:fd:62:8d:4d:da:0a:
                    89:c3:a8:00:c0:1f:f4:ab:73:c8:a4:6d:5e:36:df:
                    9d:21:61:c5:9a:78:35:65:ea:69:50:46:ad:c1:18:
                    bc:3f:de:6b:75:8b:9f:03:80:d4:38:4d:4c:ab:d1:
                    45:fd:e8:fe:ec:a7:11:97:a2:d2:06:d1:d1:d2:64:
                    a4:cc:43:b0:61:4f:34:63:4a:b4:9c:a8:b7:36:9b:
                    26:aa:b7:57:77:05:e1:99:32:f1:1c:c5:ed:20:ba:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7C:9D:27:AC:AD:BF:17:82:D2:51:57:A1:43:26:AA:CA:C2:D6:A9
            X509v3 Authority Key Identifier:
                keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3b:1e:77:21:52:16:0f:91:ff:63:08:02:43:8a:7e:28:47:
         29:c6:7e:13:25:53:28:1c:59:5b:de:2a:fa:01:2b:6e:90:9f:
         75:7c:00:1c:38:78:14:86:8a:f3:80:c4:e0:7f:07:52:c5:3a:
         36:62:d3:56:64:e0:30:22:93:71:91:67:05:9f:27:7f:07:0f:
         b2:ef:9a:e1:8b:39:13:25:76:d7:ef:6a:16:1e:e0:05:4f:90:
         ce:ea:1e:ef:dc:67:50:67:28:e6:64:f6:fa:68:54:4c:36:99:
         0f:87:96:90:60:d6:c9:5a:d3:33:82:f6:eb:50:03:41:3e:49:
         02:98:17:af:40:f5:5b:a6:ea:68:0e:4c:36:5f:5d:fa:3a:ec:
         4a:94:79:d3:4a:b0:4e:e7:c5:2d:bf:90:cf:dc:b6:f3:b5:4d:
         f6:e5:94:c3:d8:0d:e1:a4:6b:2a:6b:5c:d9:e2:f7:7a:6b:24:
         35:9d:04:39:f6:e6:7c:94:ad:8c:bd:68:32:ca:fe:6b:8b:6a:
         79:34:6a:c5:a5:33:b7:63:9b:58:f2:43:41:c3:44:c6:43:74:
         fd:53:5f:dc:f8:c2:38:4a:d6:d6:c0:11:74:53:f8:5c:bd:31:
         8f:a5:a6:23:6a:87:19:55:1b:8d:b0:cc:08:06:b5:91:50:68:
         64:fd:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:21 2024 by rpki-client on console-fra.rpki-client.org