Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
File:                     zue_uJnToHCaXQcjLfegSQSBt9E.mft (raw, json)
Hash identifier:          PwSbAua3a1bh25DerCrzJEDIpLKt1cuz6oSJoTTfTWM=
Subject key identifier:   28:03:41:F3:E0:8B:5E:B2:F3:2E:1D:01:06:5D:19:A5:EA:35:4F:E4
Authority key identifier: CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1
Certificate issuer:       /CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
Certificate serial:       0196C984A8FAF9BAD4A0181487E2AFCD026F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
Manifest number:          1013
Signing time:             Tue 13 May 2025 12:00:36 +0000
Manifest this update:     Tue 13 May 2025 12:00:36 +0000
Manifest next update:     Wed 14 May 2025 12:00:36 +0000
Files and hashes:         1: zue_uJnToHCaXQcjLfegSQSBt9E.crl (hash: kQQqL9MJLt5yKP4H44gQ6i2DCD13MMT8smj1qFum4Fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:84:a8:fa:f9:ba:d4:a0:18:14:87:e2:af:cd:02:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
        Validity
            Not Before: May 13 12:00:36 2025 GMT
            Not After : May 14 12:00:36 2025 GMT
        Subject: CN=280341f3e08b5eb2f32e1d01065d19a5ea354fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:84:ab:5d:c1:5c:71:20:b5:e6:f8:cd:d1:
                    2a:58:ab:8c:82:f0:9c:14:e6:97:67:cf:17:b5:51:
                    78:5a:18:b8:e3:2d:f0:68:b9:43:a7:6a:26:ef:7d:
                    31:cf:a0:05:43:84:95:ad:22:83:d6:19:dd:50:70:
                    28:e3:6a:91:f2:89:fa:90:ce:70:50:9c:3a:66:d5:
                    a3:54:71:e5:99:9f:39:e8:7e:83:0a:ce:a7:06:0d:
                    28:5c:68:1e:6f:11:5b:c2:17:b1:89:28:e9:79:f7:
                    09:85:b5:29:00:67:2c:68:1e:64:b0:16:5b:23:94:
                    68:69:1a:0e:b3:78:34:0b:0c:95:09:84:77:b8:78:
                    de:38:2e:ab:d2:38:94:15:14:dc:31:d7:bf:bd:b7:
                    3c:7a:65:d4:56:cf:3c:c8:48:83:95:d1:e3:cb:78:
                    69:08:20:4c:82:80:ae:d4:68:68:2d:fb:3b:d0:d0:
                    a6:4f:77:f9:82:1a:fe:41:d5:00:b4:6c:ad:c2:2b:
                    fe:c2:2a:f9:45:ab:04:5d:92:ff:cc:b3:0f:d5:23:
                    2a:86:84:4d:90:46:1f:23:3b:9a:2a:8b:0a:85:6f:
                    a4:3b:84:d4:73:9b:b0:2e:da:c6:9e:a5:1c:a5:cd:
                    2a:6d:4e:8c:97:88:57:0f:ce:8e:23:1c:ea:9e:e1:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:41:F3:E0:8B:5E:B2:F3:2E:1D:01:06:5D:19:A5:EA:35:4F:E4
            X509v3 Authority Key Identifier:
                keyid:CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7f:31:d7:19:f0:ab:e1:c5:54:93:00:1f:c2:15:0f:a8:f9:
         69:67:a0:fd:0c:d8:67:df:52:bc:1f:97:f5:45:13:64:38:09:
         d8:3d:00:b6:b2:7c:7d:07:6f:99:ab:77:5c:f8:d7:6e:9a:25:
         b1:95:6e:fa:01:ce:40:a6:9c:d7:06:1a:b5:02:9c:3a:1f:38:
         7d:5d:4a:3b:68:ac:38:ed:7c:ed:ed:42:8e:36:6b:0f:07:dd:
         3a:ea:a8:f3:cb:d6:c5:fd:4f:5e:2f:b0:e0:54:0d:4d:fa:6c:
         75:60:87:fd:54:30:61:0c:e5:43:a6:ca:e2:1b:d7:ae:d2:77:
         ba:65:38:58:cf:39:f0:c8:ca:0f:cd:a6:05:55:06:b1:98:3b:
         ef:35:23:1a:8b:7a:f3:2c:a4:d1:78:0e:d1:f5:bd:f4:82:ad:
         c6:0f:9e:1f:5c:de:b2:2f:c2:8b:86:7e:aa:d3:5f:b0:aa:5b:
         b0:6d:12:1f:05:e8:58:cd:5a:39:13:1d:c6:64:b5:53:84:89:
         35:7a:47:62:62:27:8d:8e:58:dd:18:a4:09:30:c7:d9:7e:56:
         d7:a0:cc:b4:f7:46:6a:ea:1d:1c:10:89:ed:37:db:c2:cd:f8:
         8f:74:1a:41:6e:92:b9:35:d6:79:7e:8e:ac:ae:3c:51:c9:60:
         2b:58:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:18:33 2025 by rpki-client