Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File:                     ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier:          fA+eU/5/KVQnJGUnTYZ54y84PwuQPiT9XO2NFZvujTM=
Subject key identifier:   D2:C3:93:9D:F4:B1:44:1A:41:89:8D:E3:81:A4:30:B7:AC:AE:0C:FC
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer:       /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial:       01901DEDADD53924968FE0260E7EFCF8B573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:54 +0000
Files and hashes:         1: 4LRbTZWI0P9zgp7wxjUYjiyB1Ns.roa (hash: sEZnYP3/OYwRSEfPjcOuGA0VxIWZ/7zgDvzWnlQfeSg=)
                          2: CGfQwaaxlW85b3YqPKM6Z-0E9S4.roa (hash: 0OTUmcvMxxAtafWmL068MbaVl22/5a+5lQwS1qmps1g=)
                          3: FWg8FBfYunsoVJDBQMIdqdUl6ZY.roa (hash: Se2GyIuI2/e+UgrEM9K65f7zlKhpQUROAwWtdVkTljw=)
                          4: XMUOh6ctfXaftB95dgu-pMfMmdw.roa (hash: krjJw5tLo29BgwV+AeVHnbIjWwv043Jk6MTDgZgyf3s=)
                          5: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: BNND6r4yDCA40QxOc3WV2tKynurxTLxZK/MhTSBc4UU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:ad:d5:39:24:96:8f:e0:26:0e:7e:fc:f8:b5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
        Validity
            Not Before: Jun 15 22:03:54 2024 GMT
            Not After : Jun 16 22:03:54 2024 GMT
        Subject: CN=d2c3939df4b1441a41898de381a430b7acae0cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:27:8e:47:fe:7d:e9:2f:93:8f:b0:22:c3:
                    20:ee:ee:c5:64:0c:f8:2e:c5:24:73:ca:44:3e:22:
                    18:7d:c9:54:ad:fe:85:ce:99:d6:33:ee:ec:5e:21:
                    67:20:28:a7:9f:ee:d3:73:1b:f1:79:b8:61:75:a1:
                    ba:36:bd:67:8b:bd:64:f8:ba:52:30:80:29:f6:3c:
                    1c:65:d9:19:d6:95:44:b1:a9:b6:7d:3d:83:65:e6:
                    24:b3:24:c6:0c:44:38:d6:6b:45:55:28:aa:96:a4:
                    30:fd:5e:ad:7e:c8:e7:b0:25:45:4a:3f:b2:67:a9:
                    2a:f2:5e:3d:53:58:e5:74:e1:b7:f6:87:71:bb:b6:
                    a5:af:43:29:e7:f7:98:77:54:ae:91:a3:94:46:b4:
                    97:95:60:fc:08:8c:b3:09:da:0f:bf:00:2b:d2:2d:
                    9e:bc:f5:c3:93:aa:f5:c5:6e:a6:f7:78:39:c6:07:
                    47:9e:df:c1:d9:34:7f:1f:68:c9:26:7f:d0:01:c0:
                    db:bd:00:94:bf:5e:89:9a:67:eb:6c:d9:77:41:e6:
                    47:0a:e1:b9:f2:da:a9:af:77:d4:97:7f:74:fd:0c:
                    93:b8:4c:e1:87:03:b7:32:23:ae:5f:45:94:76:c2:
                    6e:ff:c0:74:b4:be:14:24:e6:59:be:b5:6f:80:54:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C3:93:9D:F4:B1:44:1A:41:89:8D:E3:81:A4:30:B7:AC:AE:0C:FC
            X509v3 Authority Key Identifier:
                keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:55:9a:48:3c:df:42:b5:bf:03:a1:8c:fa:15:33:0f:4e:
         c6:0b:b2:a2:04:2b:d1:df:56:d3:81:83:79:94:49:61:33:1a:
         89:4b:f1:87:af:66:c2:0e:b8:2a:12:da:7f:9b:98:8e:69:5a:
         37:37:08:28:b4:23:fa:25:ce:6c:0c:12:92:c9:f5:b2:31:4a:
         eb:a2:8d:d9:e5:e7:b1:2f:8a:7f:21:9e:b8:5f:ae:75:0a:b2:
         4a:ce:b7:a7:2b:43:7d:0e:22:4f:cb:c2:ba:9a:78:29:65:6e:
         79:da:1d:7c:ed:44:9e:5a:8b:c3:c0:c5:83:62:71:26:ac:07:
         93:40:6c:9c:cf:6d:36:46:4e:4a:bc:2e:2b:93:95:93:94:6a:
         93:33:c0:7f:19:75:59:84:c4:a1:e1:81:d2:ec:41:d9:9b:40:
         d9:a8:7c:42:f2:96:a9:23:72:2b:f8:6e:c9:79:05:ab:09:db:
         2f:91:94:c3:fb:0f:32:26:c4:47:2a:c3:d7:e5:ea:d1:0f:f8:
         f1:ee:82:85:ca:43:de:04:b0:5b:72:8d:04:3b:2e:f8:2b:cd:
         55:72:44:18:32:d6:ae:c4:f1:a1:58:de:c3:08:aa:1a:3f:d0:
         aa:6d:05:61:03:88:fb:8a:a1:be:05:21:21:ba:79:c5:de:72:
         d0:58:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:41 2024 by rpki-client on console-fra.rpki-client.org