Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          bSIUePh8AvDo/i/JgtrEwdE+ZQJz+xx5YqBwTYaYOd8=
Subject key identifier:   3A:AC:21:E1:58:FB:C5:AC:6D:EC:FC:03:96:55:D3:1F:67:B8:C8:71
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       018F8F01E33D2516945EE198919F4B17DA86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          117D
Signing time:             Sun 19 May 2024 04:00:16 +0000
Manifest this update:     Sun 19 May 2024 04:00:16 +0000
Manifest next update:     Mon 20 May 2024 04:00:16 +0000
Files and hashes:         1: JT4fb7fnuNgSyoCGTbtT5cD47I4.roa (hash: OKUEKfmkrANC33DSSK+RYk9BvLdKzUrfuoRpjvBZ1rc=)
                          2: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: ApV+XTrsalVSdF2IqY5B6xWjncVo80/7xIdzHOPOlew=)
                          3: ZfLc07n9Et3-2kzgFVtJb8HUb_U.roa (hash: 6UQo6hmy24bWzbyyEvOAyH2ctMIKZVgTuUa2+yFxxqE=)
                          4: s69aevURQ0t_Q3ttIn5GlWxcXY4.roa (hash: x+duzwvthiVCJyl7YwKoMRMtVSQ6vsmg9hpPyZvxGM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:01:e3:3d:25:16:94:5e:e1:98:91:9f:4b:17:da:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: May 19 04:00:16 2024 GMT
            Not After : May 20 04:00:16 2024 GMT
        Subject: CN=3aac21e158fbc5ac6decfc039655d31f67b8c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:08:84:d8:49:65:ed:35:4a:86:49:b6:7a:32:
                    7a:a6:f7:90:e7:3d:46:70:5e:ec:1c:5d:f2:0c:bb:
                    ce:5b:aa:74:eb:05:78:52:b0:d0:1c:b1:83:42:a5:
                    22:01:cf:a2:c5:2c:ec:87:7f:bd:e4:83:57:70:2c:
                    c0:05:2d:2a:34:3b:2c:f1:68:35:84:a1:83:41:77:
                    ba:31:68:3a:ec:d3:07:e8:9a:9d:29:a7:0e:38:c9:
                    f0:77:98:e4:af:7f:b3:f9:d6:50:0b:d0:3a:94:63:
                    f5:92:ad:44:30:5c:61:52:92:38:c3:ca:bb:75:27:
                    2d:a4:86:0e:65:28:f4:10:2c:07:da:f3:7c:3f:a3:
                    ab:7d:3f:7f:ff:8f:37:fc:fa:89:e5:b7:1a:70:77:
                    2f:1f:09:73:ee:84:b0:f8:de:99:32:71:7f:8b:23:
                    a5:98:09:a8:73:ac:fa:8c:db:c2:a0:9b:64:2f:3b:
                    5e:e4:6b:9b:6a:a3:22:bd:e6:fc:77:c8:40:b4:95:
                    13:ae:49:d7:a9:f9:18:0c:23:f9:ee:e2:0b:07:01:
                    89:af:3a:a4:3c:65:a8:29:2f:5e:04:fa:ec:7c:f0:
                    e2:bf:aa:d3:92:85:d3:4b:be:ef:95:ae:ba:96:75:
                    31:00:b9:1a:9a:5c:9d:05:9f:16:68:d5:45:17:07:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AC:21:E1:58:FB:C5:AC:6D:EC:FC:03:96:55:D3:1F:67:B8:C8:71
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:49:fb:5c:11:ee:d6:ae:36:70:d7:af:90:7a:53:66:da:df:
         00:c1:99:04:8f:4a:aa:2b:ea:c6:5b:3e:5b:d3:d4:65:f4:8f:
         b3:6d:96:e3:9f:7e:81:a2:7f:4c:d1:94:15:5a:04:1b:ba:bd:
         f1:1a:7d:7d:2b:38:6c:a4:ad:9c:67:31:4b:01:a8:77:dd:c8:
         1f:42:b1:3c:96:f7:31:48:7d:a4:78:ba:f5:b0:e6:3b:56:2a:
         0b:17:41:81:5d:a6:5c:4f:de:41:00:44:45:55:02:89:3c:89:
         95:d8:2a:3c:d7:68:f2:11:5c:5c:d2:5f:af:ec:f9:dc:98:c3:
         d7:88:59:98:75:66:ca:b3:7d:65:aa:a4:f7:f2:35:83:82:30:
         e1:fd:4a:7f:26:23:79:07:80:12:35:b4:c8:62:b8:25:80:9f:
         4a:43:70:70:3d:a8:6c:f6:19:8b:95:24:89:64:81:0a:c5:a4:
         27:43:89:d8:b8:ab:4f:20:b8:85:28:d5:2f:45:58:85:88:fe:
         56:18:b3:a2:82:06:d4:96:f3:36:a6:21:a9:31:4e:04:05:f2:
         06:b3:78:9f:91:15:7f:4d:d6:9d:80:68:04:bd:87:e2:9f:4a:
         3c:78:03:f1:cb:13:b9:09:50:90:b9:6e:60:3b:af:92:1e:17:
         d8:da:b2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:51:48 2024 by rpki-client on console-fra.rpki-client.org