Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.mft
File:                     ZkeJJDcWDdV3ftPteNSbxyteHF4.mft (raw, json)
Hash identifier:          tbQvjp/T1V9zaqXbWshDqy56Mzk/5PeFnJKzMJLVyUg=
Subject key identifier:   D3:C4:A8:27:5A:DA:5E:0C:8A:CC:66:77:05:95:3D:01:F7:62:EC:27
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Certificate issuer:       /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial:       018F8748325552AD0DBE1D479D2170E03B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:00:06 +0000
Manifest this update:     Fri 17 May 2024 16:00:06 +0000
Manifest next update:     Sat 18 May 2024 16:00:06 +0000
Files and hashes:         1: ZkeJJDcWDdV3ftPteNSbxyteHF4.crl (hash: XComb+RykSa2yG1iHgP3WyXDK8DFSwUwtYjqzSLOXkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:32:55:52:ad:0d:be:1d:47:9d:21:70:e0:3b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
        Validity
            Not Before: May 17 16:00:06 2024 GMT
            Not After : May 18 16:00:06 2024 GMT
        Subject: CN=d3c4a8275ada5e0c8acc667705953d01f762ec27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:7d:59:ed:21:24:cb:2c:43:f2:d5:78:82:
                    03:6a:99:16:77:14:eb:df:d7:89:94:27:2e:9f:c2:
                    80:57:8e:e1:ba:04:0d:02:f7:e7:ab:87:c5:c7:3f:
                    68:f8:0c:c9:b2:8d:99:ce:0e:d4:d0:00:2a:86:da:
                    79:34:55:61:a6:02:2e:86:6c:49:d2:3c:87:4e:35:
                    22:02:73:51:47:ad:ea:c9:dc:8e:a3:d5:a6:50:56:
                    d1:29:39:4c:aa:b6:2c:14:fb:60:be:ce:81:8d:c7:
                    3a:11:32:cf:3b:8b:99:f5:21:6d:bd:f5:b3:1d:2a:
                    de:ed:5c:46:07:f5:bd:62:85:d2:ab:fc:3d:c2:b9:
                    3e:03:f4:f7:34:b5:9f:28:ea:6a:59:f0:54:b1:31:
                    30:df:d6:0d:54:7b:f0:7d:01:4e:32:7d:e8:00:7c:
                    47:c4:67:78:6b:55:e1:71:9f:05:ca:ec:b0:c7:c1:
                    c9:94:fc:9e:b2:b8:53:6c:95:42:c2:f9:8e:20:b3:
                    ec:28:07:e5:fc:0c:63:e8:fc:39:77:99:da:33:45:
                    bc:26:27:85:3c:b2:58:d5:77:55:63:0a:c8:a3:bb:
                    e5:65:db:ec:0e:93:fa:3f:d4:b3:2a:fa:4a:33:ec:
                    d8:6d:34:1c:ce:e3:df:ff:94:26:9b:ac:2e:e0:9b:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C4:A8:27:5A:DA:5E:0C:8A:CC:66:77:05:95:3D:01:F7:62:EC:27
            X509v3 Authority Key Identifier:
                keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:63:c7:d7:1b:c9:74:61:a1:5e:51:bd:b1:60:d4:2a:ae:
         f9:81:43:4f:42:d5:da:1d:05:9e:d6:4f:d0:4c:67:d7:d7:39:
         e0:d8:77:b5:df:8e:ef:d7:b9:61:a8:58:61:02:ee:74:c7:f1:
         f9:4c:2c:d7:39:b6:aa:3a:ad:f4:45:44:94:08:92:69:c7:18:
         99:56:7f:5a:f5:8a:a6:57:1e:a0:37:fa:15:a8:21:95:07:87:
         ee:4b:d1:f4:71:94:e3:ce:d8:66:c7:3a:fc:3b:07:a7:76:05:
         0a:91:4a:0e:69:d6:6b:a6:93:a0:06:20:32:37:7f:74:a3:aa:
         93:ec:16:88:f6:3b:87:dd:0d:99:0f:7b:da:ee:07:49:a0:ae:
         b7:ec:ec:9c:63:71:0c:2c:d4:07:c1:23:0b:a4:ea:1c:ca:24:
         2a:98:aa:6a:2f:32:ef:38:19:30:37:01:9a:58:89:be:52:72:
         3a:fe:b9:6f:2d:30:9e:64:98:1b:8b:df:b9:38:bb:17:c9:69:
         61:5c:14:45:6e:b4:ed:e1:68:0f:91:5b:d3:a6:2e:ea:40:88:
         dd:0c:83:dd:ef:c7:7c:5f:b7:60:03:e1:ba:a8:35:a0:c4:5d:
         65:69:dd:2d:31:2e:7b:56:c4:c6:c1:fc:d2:43:58:eb:67:03:
         58:04:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:29 2024 by rpki-client on console-ams.rpki-client.org