Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File:                     aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier:          j9XXqNpUvQbtnjDwTuJZZfvxRBJ6roxcGJzVabQRc7g=
Subject key identifier:   CF:C8:3E:88:29:63:A2:2B:00:60:9F:CF:3F:16:FE:C8:66:EE:B5:1A
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer:       /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial:       018F874B4B5C201617BD88D9AB65FC5992FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number:          0A0D
Signing time:             Fri 17 May 2024 16:03:29 +0000
Manifest this update:     Fri 17 May 2024 16:03:29 +0000
Manifest next update:     Sat 18 May 2024 16:03:29 +0000
Files and hashes:         1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: 45PF/0ZmPHzI/KJiI1g1LhlmrkbLT2WO+Oo+2QdkBsc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:4b:5c:20:16:17:bd:88:d9:ab:65:fc:59:92:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
        Validity
            Not Before: May 17 16:03:29 2024 GMT
            Not After : May 18 16:03:29 2024 GMT
        Subject: CN=cfc83e882963a22b00609fcf3f16fec866eeb51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:04:fa:58:76:5a:e0:41:3d:a3:af:b4:8a:
                    1e:20:10:af:fe:e1:77:5f:5c:fc:d0:ef:73:bc:f0:
                    4c:c9:32:ef:72:f8:5b:74:b9:9e:d8:95:11:45:78:
                    3f:2a:02:a6:df:1f:72:e1:7a:a3:b4:2b:a9:19:a9:
                    04:be:94:6d:e2:79:17:94:39:5b:2d:1f:65:37:88:
                    7b:08:c8:8e:63:11:c8:1c:68:8e:0d:41:89:d7:b7:
                    df:d4:e2:b5:a0:70:dd:09:0f:a6:b9:6e:b4:6f:24:
                    61:ad:7f:ca:cd:8f:95:f1:72:b7:15:5c:e3:55:71:
                    15:3d:4b:88:cf:de:cd:57:54:55:f9:01:8c:70:18:
                    be:7f:96:fc:04:96:65:ad:f6:55:89:a7:70:b6:48:
                    b6:79:07:f5:fc:a1:5f:54:86:9d:ae:60:cf:6b:8d:
                    23:70:2b:8b:55:f1:90:bf:08:49:f7:b5:d1:53:c9:
                    4b:32:ed:75:d8:7a:16:cb:16:76:c2:52:80:3b:c1:
                    42:27:a2:f1:44:f5:bd:4b:7d:76:c8:75:ed:51:6c:
                    b7:69:ec:9a:94:08:9c:06:e0:59:91:18:66:42:12:
                    33:5b:f6:fc:8a:d4:21:ef:c5:a8:f7:85:9f:0b:42:
                    9d:b9:af:a1:ff:17:d1:28:19:1e:9b:50:ca:d3:d4:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C8:3E:88:29:63:A2:2B:00:60:9F:CF:3F:16:FE:C8:66:EE:B5:1A
            X509v3 Authority Key Identifier:
                keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d9:a3:4d:15:d3:dd:b6:0e:d7:69:8e:6c:92:d4:1c:6b:1f:
         85:7c:0c:df:04:77:bd:c6:49:44:64:40:f2:69:9f:13:2e:06:
         51:3e:54:a8:d6:f0:84:e7:38:be:41:6a:d0:e3:a0:88:1d:36:
         b2:13:68:7e:98:f9:bb:11:48:e4:fa:31:ed:c9:16:b7:63:6d:
         77:18:4e:87:48:dd:05:39:49:58:bf:66:20:3b:c1:cb:03:9f:
         e8:9a:81:31:e3:94:ac:e9:2c:40:04:8a:d7:48:d2:cb:f9:f7:
         c7:2d:33:ab:ea:ae:d5:c2:0f:70:3b:00:64:af:2d:12:2e:9d:
         c6:1b:cc:3a:6e:92:c6:17:de:4a:0b:03:42:cd:34:42:43:e1:
         de:c2:6f:b9:50:5e:f9:42:fa:02:91:9a:5f:cc:ec:46:66:10:
         97:db:e1:5a:ef:a1:34:be:77:44:f4:5c:84:13:c6:d5:ba:9e:
         2c:80:51:39:d0:79:da:b5:ef:74:57:0e:be:e6:39:c3:88:5e:
         fa:5f:56:05:8d:02:a3:17:99:0a:e0:2d:e2:c9:98:db:8f:94:
         4c:6a:50:c4:b9:c2:c3:b1:af:fc:86:f9:16:fb:da:82:4b:a5:
         10:96:63:44:8d:7d:46:e6:ac:48:c6:fa:79:d8:4d:97:9a:ef:
         7e:59:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:45 2024 by rpki-client on console-fra.rpki-client.org