Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File:                     g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier:          aJ7ZiTovavcOhN62zXQjIhIeKSPxt+Br5IHhs+Ix678=
Subject key identifier:   31:41:18:63:B9:01:1D:9E:F0:D3:DD:4C:D5:0C:80:33:DA:30:70:2B
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer:       /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial:       019040AE5250EA393D19A3BA06F157AB50A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number:          0CCA
Signing time:             Sat 22 Jun 2024 16:01:24 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:24 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:24 +0000
Files and hashes:         1: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: F2B32hNOvwvLZXt7ERRVGPC2V4KG47soHq1KmXVyI/k=)
                          2: kj0cJmWL3rLgFLjXuZhSiX-b4Zs.roa (hash: wlQTKXeMhx3hr3ryjVuyAy1bVpMhekt6CdPqCRr5/n0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:52:50:ea:39:3d:19:a3:ba:06:f1:57:ab:50:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
        Validity
            Not Before: Jun 22 16:01:24 2024 GMT
            Not After : Jun 23 16:01:24 2024 GMT
        Subject: CN=31411863b9011d9ef0d3dd4cd50c8033da30702b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:77:50:6c:c0:9f:8c:66:98:17:7c:38:3c:
                    8b:14:6e:c7:ec:b9:b2:f9:33:54:2e:0f:68:98:1e:
                    f8:ca:4c:af:f3:16:4a:bc:16:f5:9d:da:4c:2f:d7:
                    b6:a5:29:cd:3b:20:54:8a:da:16:63:38:1d:77:da:
                    85:ba:17:7e:05:86:98:00:8a:cd:9c:25:dc:b8:b2:
                    60:56:aa:a3:1a:0e:74:e8:40:28:7d:88:91:5f:c4:
                    52:85:6d:80:26:3f:3f:f9:0f:4d:21:1c:09:68:72:
                    53:15:68:4e:5f:3c:85:8a:38:cb:7b:f4:28:30:41:
                    e7:d1:a9:94:8b:38:29:f7:cc:98:92:1c:69:2d:07:
                    b9:89:1c:22:f3:d8:9b:65:fd:d4:92:d5:71:3f:1f:
                    d5:12:5b:45:05:e9:14:f8:9c:4f:5b:fd:f7:16:8e:
                    2d:19:ca:8c:af:c3:f4:5e:37:92:6c:13:78:20:29:
                    85:f9:69:40:e5:53:c4:db:9a:1c:80:89:9e:66:d2:
                    d1:c5:e5:bd:3d:89:dc:55:28:64:e2:f9:b9:8e:72:
                    e4:76:a2:44:e9:f4:b4:2f:00:43:a0:a3:43:0b:5d:
                    24:14:8c:76:bd:94:e5:21:8d:c4:6c:70:98:aa:6e:
                    2e:e7:b7:03:5a:74:8c:e4:f6:31:70:59:90:47:ab:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:41:18:63:B9:01:1D:9E:F0:D3:DD:4C:D5:0C:80:33:DA:30:70:2B
            X509v3 Authority Key Identifier:
                keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9e:e5:90:20:71:d4:29:f6:da:de:6c:7c:bb:01:16:79:51:
         ab:c8:88:66:2e:01:fd:2a:74:d0:ce:37:e2:35:e2:ee:9b:7f:
         94:65:d7:3f:ea:04:35:6e:02:c1:0d:7b:29:30:53:87:40:96:
         2a:f8:0b:b4:19:63:a4:a6:b4:7f:f0:0b:90:56:8a:55:ac:b3:
         f7:dd:e0:9a:bc:71:61:c3:08:d5:80:92:96:cb:22:1f:3b:d0:
         c1:c2:51:9c:86:7e:fb:ab:67:68:17:d8:f9:eb:54:fb:11:e4:
         18:5c:5f:87:65:06:f5:18:aa:e7:66:68:47:5d:32:e0:38:14:
         fb:1d:29:b8:85:af:13:13:0b:c2:02:38:79:fa:a6:b4:ba:68:
         de:32:07:e4:4f:14:68:f7:a8:42:ca:8b:25:54:64:e7:54:95:
         e8:17:9b:01:2f:32:d3:f9:b6:0f:e2:a2:f2:26:70:ee:de:e0:
         29:1c:f1:88:62:df:6d:da:84:21:28:34:6e:f2:06:c1:3f:1c:
         51:0e:51:e8:3d:08:89:6c:58:c9:9d:9e:63:fd:74:0f:f6:2b:
         12:66:a2:71:da:21:60:45:17:f8:d0:8e:b6:0c:ce:3a:55:37:
         a6:6d:99:41:34:b6:d4:0a:ee:0c:0f:68:89:87:ae:e3:93:b7:
         5c:06:36:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBArlJQ6jk9GaO6BvFXq1CpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTY0MDNjZjczMjIxYzExN2VhNDliYzkyMzRmZTZmNGEx
MWQ3ODAwHhcNMjQwNjIyMTYwMTI0WhcNMjQwNjIzMTYwMTI0WjAzMTEwLwYDVQQD
EygzMTQxMTg2M2I5MDExZDllZjBkM2RkNGNkNTBjODAzM2RhMzA3MDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUN3UGzAn4xmmBd8ODyLFG7H7Lmy
+TNULg9omB74ykyv8xZKvBb1ndpML9e2pSnNOyBUitoWYzgdd9qFuhd+BYaYAIrN
nCXcuLJgVqqjGg506EAofYiRX8RShW2AJj8/+Q9NIRwJaHJTFWhOXzyFijjLe/Qo
MEHn0amUizgp98yYkhxpLQe5iRwi89ibZf3UktVxPx/VEltFBekU+JxPW/33Fo4t
GcqMr8P0XjeSbBN4ICmF+WlA5VPE25ocgImeZtLRxeW9PYncVShk4vm5jnLkdqJE
6fS0LwBDoKNDC10kFIx2vZTlIY3EbHCYqm4u57cDWnSM5PYxcFmQR6sZXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFBGGO5AR2e8NPdTNUMgDPaMHArMB8GA1UdIwQY
MBaAFIPmQDz3MiHBF+pJvJI0/m9KEdeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOWMzYjEtNzJlYi00MzNhLTk2Y2It
NDg3NzdhYTk2MWU5LzEvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wOWMzYjEtNzJlYi00MzNhLTk2Y2ItNDg3NzdhYTk2MWU5
LzEvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS57lkCBx
1Cn22t5sfLsBFnlRq8iIZi4B/Sp00M434jXi7pt/lGXXP+oENW4CwQ17KTBTh0CW
KvgLtBljpKa0f/ALkFaKVayz993gmrxxYcMI1YCSlssiHzvQwcJRnIZ++6tnaBfY
+etU+xHkGFxfh2UG9Riq52ZoR10y4DgU+x0puIWvExMLwgI4efqmtLpo3jIH5E8U
aPeoQsqLJVRk51SV6BebAS8y0/m2D+Ki8iZw7t7gKRzxiGLfbdqEISg0bvIGwT8c
UQ5R6D0IiWxYyZ2eY/10D/YrEmaicdohYEUX+NCOtgzOOlU3pm2ZQTS21AruDA9o
iYeu45O3XAY2UA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:11:28 2024 by rpki-client on console-ams.rpki-client.org