Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft
File:                     ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft (raw, json)
Hash identifier:          M6AFISGMjhSHgP0l8jZYBMaPUl6De/5hcg+LafGyms0=
Subject key identifier:   79:AB:11:0A:7C:06:87:1B:01:A5:9C:51:0F:DB:44:9F:A8:42:5C:D8
Authority key identifier: 66:40:F7:7C:5A:99:12:28:90:4F:B5:C9:B0:4A:5B:80:C1:3B:18:86
Certificate issuer:       /CN=6640f77c5a991228904fb5c9b04a5b80c13b1886
Certificate serial:       018F87482AC959F12CBA47B2523F93CA7F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD3fFqZEiiQT7XJsEpbgME7GIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:00:04 +0000
Manifest this update:     Fri 17 May 2024 16:00:04 +0000
Manifest next update:     Sat 18 May 2024 16:00:04 +0000
Files and hashes:         1: ZkD3fFqZEiiQT7XJsEpbgME7GIY.crl (hash: vxyY5DFBOaPX1WEl78DwilsgEt7PEqYtTv2e/3PFCtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkD3fFqZEiiQT7XJsEpbgME7GIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:2a:c9:59:f1:2c:ba:47:b2:52:3f:93:ca:7f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f77c5a991228904fb5c9b04a5b80c13b1886
        Validity
            Not Before: May 17 16:00:04 2024 GMT
            Not After : May 18 16:00:04 2024 GMT
        Subject: CN=79ab110a7c06871b01a59c510fdb449fa8425cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:33:9a:a2:36:1b:d1:85:1e:e3:ce:f2:22:
                    ca:35:7b:35:a9:a1:a7:f5:16:f7:b6:14:1c:35:e8:
                    e7:79:cd:63:ed:d1:ed:9b:4a:f3:fc:0e:37:0a:1a:
                    e0:d1:97:93:04:ff:69:46:05:d1:8b:58:d4:b8:b7:
                    e4:39:9c:ff:5e:0a:1a:bf:1e:64:fd:6a:25:e0:ee:
                    33:67:b2:06:6a:f4:2e:4c:bd:94:f3:2a:bb:1a:e1:
                    60:14:1f:15:80:f3:e2:27:52:3c:54:ef:e9:84:de:
                    c7:f3:33:1f:92:08:91:36:69:a1:57:6a:fc:cc:e2:
                    d0:a1:cb:c0:2d:c4:99:55:3a:8b:e2:50:fd:3e:05:
                    fa:d0:d2:29:c5:5f:81:32:7a:bc:05:b6:6b:f2:cf:
                    88:d8:cc:e9:18:b7:3b:08:2b:7e:22:0c:58:94:3e:
                    18:63:36:3f:b5:a1:95:50:64:c5:37:48:f1:23:54:
                    0d:fd:1d:61:28:b1:ab:53:89:da:29:04:d6:46:56:
                    ad:aa:6b:59:9f:10:4a:ad:ef:e7:c7:77:13:cd:4d:
                    85:8f:b3:fa:4d:de:52:e3:0d:97:3b:0d:dd:b0:c3:
                    0a:95:47:fa:72:d0:e9:ec:c9:fb:d2:7d:4e:6f:94:
                    d8:92:f5:d5:02:8d:45:b0:e4:b6:62:6e:9d:01:a3:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:11:0A:7C:06:87:1B:01:A5:9C:51:0F:DB:44:9F:A8:42:5C:D8
            X509v3 Authority Key Identifier:
                keyid:66:40:F7:7C:5A:99:12:28:90:4F:B5:C9:B0:4A:5B:80:C1:3B:18:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD3fFqZEiiQT7XJsEpbgME7GIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/947580-b079-4553-8a58-30c63131a94a/1/ZkD3fFqZEiiQT7XJsEpbgME7GIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:2b:93:2f:60:d6:8f:ee:42:96:04:c9:cf:57:a0:24:40:
         5e:48:08:a8:38:d0:a0:d4:66:0f:81:63:c1:19:4c:95:1b:1a:
         30:90:99:8c:ce:f2:72:fa:ae:ab:63:29:bf:da:70:20:b6:06:
         f2:e4:61:c8:09:fe:f2:d6:fb:33:6c:5f:4d:ab:98:36:07:0f:
         65:10:99:64:f5:41:73:e8:c0:ab:9d:c8:38:1d:3d:81:71:20:
         73:e9:45:a4:d9:7c:2f:fa:f3:f8:65:33:57:13:8b:ed:05:7a:
         1c:6f:6c:9b:05:40:e7:3b:22:1e:08:2a:06:03:eb:ec:a9:03:
         1d:57:64:66:18:18:a4:00:5b:56:8f:e4:e2:d3:f4:b1:71:42:
         d0:36:c6:51:d2:3f:59:9f:8f:5d:6d:57:8c:dd:8c:aa:bb:fe:
         69:86:8c:2a:7e:f7:d7:1b:f1:dc:1a:68:82:cc:96:65:31:47:
         5c:fa:8d:2d:9d:e2:61:73:4c:59:d2:4a:c6:f1:e4:61:fc:c6:
         89:4a:73:8e:e1:45:81:bb:73:88:83:95:54:05:fd:c5:e9:a5:
         65:b7:56:d0:40:b9:a1:39:08:19:b1:21:07:8d:70:06:cf:24:
         da:64:2a:1f:f9:83:9a:40:ac:37:5e:b8:cb:d8:f6:29:7e:b9:
         5e:8e:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:32 2024 by rpki-client on console-fra.rpki-client.org