Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File:                     z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier:          GAk94+Pb6/NB6Rz67OVf3EWKa1EsXHzL4DxyuZV+Ko8=
Subject key identifier:   18:7C:DD:AE:C2:7F:38:88:23:40:24:05:3C:1A:FF:CA:FD:04:D8:72
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer:       /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial:       018F874A73E216DCAD5C81FDED39BABD83FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number:          0D29
Signing time:             Fri 17 May 2024 16:02:34 +0000
Manifest this update:     Fri 17 May 2024 16:02:34 +0000
Manifest next update:     Sat 18 May 2024 16:02:34 +0000
Files and hashes:         1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: POxUsHuSUJYJkTnUS/Ar3I7REAhR6G5RAEucelbVbe8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:73:e2:16:dc:ad:5c:81:fd:ed:39:ba:bd:83:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
        Validity
            Not Before: May 17 16:02:34 2024 GMT
            Not After : May 18 16:02:34 2024 GMT
        Subject: CN=187cddaec27f3888234024053c1affcafd04d872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:d1:ea:36:e4:99:ba:e4:6f:9f:88:58:c7:
                    d4:24:14:fa:ae:6d:59:4c:d6:00:80:06:98:c0:f7:
                    7f:9e:7c:28:92:27:e0:70:a0:e6:ad:14:6f:2e:7e:
                    fb:71:3f:e9:64:86:bc:16:ba:ae:e3:c9:d8:9c:01:
                    33:57:c0:cf:30:29:a7:76:87:c2:dd:d9:f6:60:8a:
                    89:93:e4:61:74:9b:55:99:41:97:fc:46:96:f8:7f:
                    1c:8c:78:28:0b:34:1e:ef:9a:ae:42:2d:63:07:e2:
                    52:0a:60:95:f4:b4:89:d6:e3:4a:98:2d:bc:3a:cc:
                    96:cf:f2:15:12:3a:06:69:73:13:cb:ce:d1:ee:01:
                    88:3e:2b:89:5b:69:9d:12:27:86:11:7f:d3:51:e3:
                    cf:8a:88:c7:7d:8c:93:a1:ac:40:c9:ab:a2:b7:5c:
                    25:fa:35:8b:16:4f:18:84:0c:0d:ae:e1:06:b6:1a:
                    26:25:20:43:52:ff:c2:2d:5a:ea:7a:d7:1d:22:2e:
                    90:83:82:0e:e9:77:ec:a5:b9:33:2d:90:38:3c:bd:
                    c0:5d:4c:84:54:8b:6e:e2:8d:1a:55:16:0b:54:ab:
                    06:f4:d3:0e:69:56:6f:7b:0f:79:f3:37:94:bb:30:
                    f5:9e:a7:a8:2d:37:4a:38:05:0b:24:3d:47:a5:fe:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7C:DD:AE:C2:7F:38:88:23:40:24:05:3C:1A:FF:CA:FD:04:D8:72
            X509v3 Authority Key Identifier:
                keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:e6:d5:14:ef:26:14:8b:cb:be:10:68:fe:d0:6b:76:8a:
         7b:d8:81:16:c0:29:56:2a:b7:f5:4c:44:31:f2:ae:3a:10:1e:
         8d:ed:84:4f:5d:da:57:35:e1:5e:95:30:ec:83:7b:15:53:4a:
         70:b1:6a:14:a3:32:d7:92:ee:7f:f0:bc:62:bc:90:38:a9:1f:
         1d:78:0f:57:5d:b7:0f:17:b3:0b:c0:d3:f6:70:6a:52:62:cd:
         bd:6a:28:de:00:ea:82:10:28:ba:dd:12:62:f0:f6:e9:76:9e:
         e6:5b:a8:44:db:6f:84:d8:14:28:4a:7b:0d:3d:47:fd:7a:68:
         a0:dd:f1:79:ff:f0:c3:37:c9:f1:ae:6a:1f:a3:80:4f:72:1c:
         e8:09:3a:6c:08:b1:62:c5:7e:da:19:80:06:bf:80:3b:7c:48:
         3b:fb:0b:19:ec:a6:57:fd:08:db:d0:e2:eb:57:c0:3c:c2:5a:
         6a:72:ce:1c:a6:1f:e2:45:17:52:2d:a1:f9:c8:c4:95:a2:d7:
         68:8a:45:ba:a2:b5:82:b0:6b:f7:29:6b:81:39:ca:b9:de:88:
         fd:21:fb:fb:95:4f:c8:51:b9:31:a5:2f:8c:8e:cf:47:13:a5:
         2f:50:5a:7d:15:c4:2d:2f:52:95:1e:98:75:0d:8d:02:37:bf:
         4b:80:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:07 2024 by rpki-client on console-ams.rpki-client.org