Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File:                     ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier:          AskdgeLJdlyNucS6t5sQA17aPfDfx8/DQtcmUODC754=
Subject key identifier:   BE:7A:C9:4F:FE:5C:89:37:FD:95:FB:3C:59:7E:68:37:C3:DB:75:DD
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer:       /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial:       018F87ED2F0ECF700FFE2C0FB2C5DC5D4737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number:          07C5
Signing time:             Fri 17 May 2024 19:00:19 +0000
Manifest this update:     Fri 17 May 2024 19:00:19 +0000
Manifest next update:     Sat 18 May 2024 19:00:19 +0000
Files and hashes:         1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: xFch5Z1CGs3XrpbsBE/tR6xksIbL2MFFALP0+BtsLs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:2f:0e:cf:70:0f:fe:2c:0f:b2:c5:dc:5d:47:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
        Validity
            Not Before: May 17 19:00:19 2024 GMT
            Not After : May 18 19:00:19 2024 GMT
        Subject: CN=be7ac94ffe5c8937fd95fb3c597e6837c3db75dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:27:55:ac:e1:63:a5:58:4b:a3:61:d7:14:
                    d0:6d:d1:b7:04:f3:48:bc:11:16:1e:f4:18:c1:68:
                    b0:0e:9d:cd:a4:b5:21:36:36:1f:22:84:80:11:8d:
                    92:e7:0c:50:80:f6:29:73:e0:43:3b:00:66:04:8a:
                    bb:45:0f:b7:6c:01:50:cd:06:54:3e:79:2f:58:69:
                    e4:0e:f9:98:1a:5b:d1:71:a3:4e:94:7e:52:af:4f:
                    b9:0b:e9:50:eb:66:a1:3d:1e:8e:d0:10:46:18:9d:
                    6c:01:8a:99:ed:54:6f:ec:96:de:bd:bc:18:85:0d:
                    6d:37:65:9d:aa:40:17:b2:8e:75:fd:e6:7e:30:eb:
                    33:82:4f:d9:d4:db:fa:60:6f:f9:fe:00:bc:d7:2b:
                    b3:ac:11:cf:0f:98:97:9a:b1:71:8a:46:77:c4:45:
                    2f:b3:79:84:95:93:ea:b4:6d:6c:bc:30:07:36:8a:
                    b4:d8:8f:22:fe:7d:21:32:86:c6:9a:8a:bd:fa:e0:
                    19:0e:92:4d:e5:c6:f5:8a:3e:dc:52:3e:1b:1c:46:
                    70:cb:64:04:a6:b5:6b:74:f5:9f:c4:33:ce:e4:c6:
                    0a:91:e7:66:d1:6d:35:15:e8:b4:93:f9:f2:be:10:
                    5b:ed:3f:a3:e9:89:1c:fa:65:5c:93:36:b6:fa:c4:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7A:C9:4F:FE:5C:89:37:FD:95:FB:3C:59:7E:68:37:C3:DB:75:DD
            X509v3 Authority Key Identifier:
                keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:e2:a5:64:a8:4d:53:8a:7e:d9:95:c4:56:1d:f1:61:39:
         57:45:db:5b:a0:51:e6:ea:14:3d:b6:4f:ea:2c:1e:46:32:f8:
         81:05:10:b7:10:71:40:ad:c1:ff:bc:59:9d:6d:ef:76:4a:7c:
         9f:42:24:6c:1b:74:22:e7:70:9f:44:76:6c:b3:1c:f4:63:6d:
         e6:1a:23:84:ed:91:69:ac:5a:03:0a:c6:51:bc:a5:0d:15:b8:
         3e:eb:0c:b5:9f:e2:71:78:db:a7:19:b9:27:e6:3e:83:dc:94:
         36:73:d8:64:c0:bc:e6:a7:c2:86:0a:82:2e:0b:8f:61:23:1a:
         1a:4e:a6:b9:2d:b7:83:0c:3b:cc:ee:29:aa:65:18:32:58:1d:
         11:94:8b:9f:6e:b0:25:0c:f1:00:81:2a:ff:b5:a0:0d:00:f3:
         1d:bc:9c:6c:7a:d0:a6:33:31:c1:38:3b:41:65:80:fe:8a:dd:
         ee:fc:1e:46:12:90:ea:d1:37:ac:2e:bb:4b:af:3c:db:6a:53:
         73:a2:f2:db:3a:6d:c7:70:c4:18:6f:3d:b2:9c:a5:8f:94:06:
         00:c5:cd:82:67:df:90:eb:83:0f:03:92:ee:01:56:e2:b8:61:
         9c:24:11:7d:dd:05:49:e9:49:33:b0:50:98:a7:5c:9b:68:e5:
         94:03:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:09 2024 by rpki-client on console-ams.rpki-client.org