Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File:                     z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier:          0SQBjZevg3qT1wLbjgWtqjMHqxHCREo/CJwndAlc1WE=
Subject key identifier:   D4:57:48:F3:86:5A:7E:52:E7:F0:08:03:A8:A4:1A:A7:9F:FB:46:FF
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer:       /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial:       01901F34F844A32E3D130B87EDB2556644E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number:          0B07
Signing time:             Sun 16 Jun 2024 04:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:23 +0000
Files and hashes:         1: 6SjcBlpYYqKzh4UxlmVPENHZySs.roa (hash: K/x+89ke9yxbT8AYAb4vAEKeOrp+acmX6M9xo4ET0is=)
                          2: z7fv5UlNfCDkNzsMdEgzIhGl6uk.roa (hash: SXwXiCmbUYDdsZm+mCwEWslRbD+VAs4hGAUT8HKZszk=)
                          3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: mLfqIgdZuii2EfZCs2L08I/me5PVs8NU4A6vEYySPks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:f8:44:a3:2e:3d:13:0b:87:ed:b2:55:66:44:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
        Validity
            Not Before: Jun 16 04:01:23 2024 GMT
            Not After : Jun 17 04:01:23 2024 GMT
        Subject: CN=d45748f3865a7e52e7f00803a8a41aa79ffb46ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:22:25:cf:f9:39:d7:21:bf:c1:ba:8e:a4:
                    9b:6b:68:9d:e9:57:6d:2a:f1:a2:44:48:30:5d:cf:
                    0b:3a:3b:37:23:86:0b:be:e7:44:3d:07:53:3e:83:
                    a4:97:4a:5a:2f:6f:a5:5e:c4:cb:00:7e:e5:2c:ff:
                    51:aa:c9:20:90:8e:36:6b:ff:35:7b:0e:13:c0:c1:
                    24:4b:41:dc:27:18:3c:e3:42:d5:78:d1:45:24:2b:
                    a9:6a:ca:60:24:23:be:8f:81:5e:a4:db:bf:60:fa:
                    68:35:74:36:f0:39:7f:55:d2:7f:93:da:39:e7:9b:
                    64:4c:84:95:6b:a1:ff:eb:a1:59:31:cb:da:7f:0e:
                    b0:65:7a:15:32:54:4c:06:8d:38:df:37:4c:b7:8e:
                    cf:9a:6d:04:97:1d:89:48:72:87:00:94:fb:09:e8:
                    63:d2:82:9c:23:50:46:1f:5d:68:65:bd:be:ee:90:
                    4d:ad:c9:48:33:10:5a:9d:23:77:58:3e:4e:ce:49:
                    82:24:c0:d4:7d:5c:a8:fa:94:f8:74:f9:e1:52:0f:
                    15:6a:45:cc:c6:23:a3:49:2d:da:79:2d:ed:aa:e3:
                    a0:dc:07:8b:7f:fa:1b:17:76:b6:ce:ae:fb:03:bc:
                    28:2d:f5:d0:f2:51:bf:47:65:69:19:43:04:e0:c9:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:57:48:F3:86:5A:7E:52:E7:F0:08:03:A8:A4:1A:A7:9F:FB:46:FF
            X509v3 Authority Key Identifier:
                keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f3:87:21:14:2e:9e:00:1b:0e:5e:79:b5:74:5d:a4:16:8a:
         f6:55:c4:e0:00:49:20:04:2f:97:77:0b:b7:b4:8d:37:96:f5:
         49:83:5b:59:b7:37:94:08:f8:bb:79:48:2b:89:60:bb:89:b7:
         81:b8:90:1c:92:85:2b:1b:69:a0:2c:67:1a:da:1e:bf:77:92:
         f8:61:1f:b3:13:02:2e:ee:75:c9:77:b5:49:8a:1c:e9:dd:99:
         42:1b:6f:b9:40:34:88:be:c1:1a:54:45:f2:cb:8e:c9:2e:07:
         1f:8b:b5:6b:3f:95:92:47:4f:7d:f0:9d:e6:08:94:40:92:07:
         53:49:1e:7e:bf:1a:4f:fb:2d:90:ea:8f:b0:a6:26:73:36:81:
         f9:8c:e1:8d:32:e5:d5:42:d2:f0:f3:cc:44:c2:d4:e1:9b:34:
         40:3c:73:b4:f0:21:ab:57:c8:d0:4b:0a:43:8a:1f:e3:a6:78:
         b7:cb:e7:96:f5:09:36:66:de:e4:23:6f:7a:b6:db:e1:fe:61:
         b9:ef:18:24:50:32:a9:f1:af:93:c3:f3:e1:53:cd:f5:ac:8a:
         9b:5d:ba:2f:44:b1:71:44:5c:89:28:f8:13:e3:63:f8:3a:ea:
         e6:35:62:89:fa:25:62:1c:77:70:a3:4a:7e:9d:f7:c8:09:d4:
         f1:aa:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:05 2024 by rpki-client on console-fra.rpki-client.org