Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          8VinUMFCehzoM9omJ1kUwfBPSkoui44mPbnbEJVIIxM=
Subject key identifier:   B9:20:8C:77:EF:D2:EC:57:39:F8:58:5A:08:CC:64:5A:EF:F0:BB:E6
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       01901E5916223F1EEC99EA42E9FE79A6D621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          0209
Signing time:             Sun 16 Jun 2024 00:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:13 +0000
Files and hashes:         1: zPHo0d6hbp1VthZmHYhP0gIaWss.roa (hash: j9CaBLR6FlYWzy0t0B0dBOpSzBO0YQZNonessStfPg0=)
                          2: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: GCmmyFWxWd4B0MHyXfUkfWtd8RvIvV2ahUDdMRWMCuI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:16:22:3f:1e:ec:99:ea:42:e9:fe:79:a6:d6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Jun 16 00:01:13 2024 GMT
            Not After : Jun 17 00:01:13 2024 GMT
        Subject: CN=b9208c77efd2ec5739f8585a08cc645aeff0bbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:a8:37:07:93:55:8e:e0:23:42:db:4d:9f:
                    a6:7b:28:a0:3f:8e:43:50:0f:54:4d:96:ce:3e:5e:
                    bc:6f:fd:0f:82:52:4f:84:59:eb:89:d1:30:c8:bd:
                    43:b4:ef:cf:d3:f0:22:9c:ca:40:db:83:ef:08:00:
                    c1:30:44:58:70:a1:ad:4a:40:68:e3:04:a2:4f:bc:
                    fc:c9:fd:0e:29:97:03:1f:1b:bc:89:6f:25:9e:95:
                    8e:da:51:ae:f1:93:fd:93:d6:a7:2f:4e:03:a7:59:
                    fe:07:bc:41:df:cb:ba:48:0c:6f:e1:75:9a:27:2e:
                    92:ab:3d:f4:fa:ea:96:b4:57:c3:08:6d:3d:56:0d:
                    4a:73:af:de:54:89:cd:91:66:fd:88:e8:65:62:61:
                    98:04:62:f5:7e:4c:7a:f2:00:bd:54:e3:c2:d3:68:
                    3c:de:58:66:e6:81:0e:56:38:bc:bf:52:41:30:06:
                    18:20:bd:16:6a:18:5d:7e:03:29:a4:bb:5b:13:ba:
                    4f:2d:33:72:15:09:09:15:ce:e9:17:cb:1f:49:eb:
                    38:72:38:a4:67:e7:bd:7a:94:21:1b:82:55:02:a3:
                    17:4b:42:e3:d1:2e:aa:f0:e9:db:db:f1:4c:51:27:
                    f0:84:89:fe:26:05:ab:e5:a4:95:84:9c:8c:2d:b2:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:8C:77:EF:D2:EC:57:39:F8:58:5A:08:CC:64:5A:EF:F0:BB:E6
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:57:93:3b:68:fc:ad:19:61:e5:11:e1:ed:dc:7e:e2:27:c9:
         11:90:8b:67:73:5a:df:65:fa:7e:67:f3:b8:5b:ea:69:ab:94:
         40:0f:fd:ee:9f:ed:5e:a5:9c:b3:d0:e1:47:53:79:1e:2f:08:
         50:10:5d:0d:1e:d3:e6:99:d7:52:d6:1f:c4:88:09:73:f5:0b:
         50:97:d7:d3:ad:26:10:95:29:74:21:5f:90:c8:90:09:de:37:
         67:ef:e6:4b:7e:fb:19:4e:43:51:bc:0f:45:4b:af:6b:47:c5:
         ef:1d:db:fc:47:c4:af:51:6a:91:cb:8f:68:f6:2e:43:37:30:
         6c:8b:47:37:f0:08:12:be:d7:ac:31:94:e9:73:4e:a0:38:0f:
         8a:41:0d:55:bd:1d:83:73:1b:a8:c2:b8:09:ce:d9:45:2d:8c:
         b6:a3:52:ad:29:00:0f:8c:50:52:00:d1:e9:bb:14:48:f7:df:
         eb:8b:82:97:dc:4f:25:e6:71:0d:30:95:b2:67:15:99:76:7a:
         df:02:67:35:35:59:18:0b:72:1f:af:f1:c1:5d:21:69:db:ff:
         7d:31:71:d2:f8:5a:e1:60:fe:95:6c:7c:53:75:79:9c:b6:52:
         8d:d7:8d:da:06:d3:bd:53:a3:43:38:c2:7c:78:1c:1b:fd:d8:
         c9:b0:d8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:14 2024 by rpki-client on console-ams.rpki-client.org