Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File:                     ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier:          4U/mkiW3kZmovphQvXGUr+UFSIHaHgu7MT957uKohsQ=
Subject key identifier:   07:C4:01:64:F2:64:F0:64:E0:77:E4:6E:07:44:CF:2E:36:CA:A4:44
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer:       /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial:       01903517E70E4E9502C0FA2D199827798B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number:          04C5
Signing time:             Thu 20 Jun 2024 10:01:17 +0000
Manifest this update:     Thu 20 Jun 2024 10:01:17 +0000
Manifest next update:     Fri 21 Jun 2024 10:01:17 +0000
Files and hashes:         1: HeBmPgZA5AB79C-7lMk2IQxhCpE.roa (hash: zVbmMLMlYP3ottsSsc9o213U3GUMSAoGMNy2sz4QKMs=)
                          2: MKBv9tXINH5m5Ju4rAUZzUomkN0.roa (hash: AK6t/tpKDx3EHUAKJQ7TMNpjzB8piMyPBSjiu+HTFWc=)
                          3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: EihrYdimJ+ar32wTD9Olm6jI9YuMK6UgjwpAISHphD0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:17:e7:0e:4e:95:02:c0:fa:2d:19:98:27:79:8b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
        Validity
            Not Before: Jun 20 10:01:17 2024 GMT
            Not After : Jun 21 10:01:17 2024 GMT
        Subject: CN=07c40164f264f064e077e46e0744cf2e36caa444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:53:d6:a2:7f:9e:af:a5:b0:d5:cd:e5:34:
                    3a:15:3d:50:c5:81:0b:b2:6e:d7:ee:41:82:98:c6:
                    05:b4:bd:dd:e6:d2:e1:dd:ac:f7:d6:dd:90:55:24:
                    c7:e7:3c:62:5b:c3:33:99:a4:10:a6:e9:d7:12:33:
                    a6:4a:50:e4:28:f3:b5:23:87:21:6b:e1:b3:c3:14:
                    77:25:79:c2:a7:a5:25:5f:fa:bc:e4:89:28:1f:4e:
                    64:dd:5d:c0:f9:f2:8d:94:4c:d6:25:86:de:83:6b:
                    c1:0e:5a:7f:ec:0c:5d:27:b6:ad:72:4d:18:a0:50:
                    41:52:af:41:5a:c4:dd:df:db:df:9e:26:29:f2:22:
                    9f:8b:ce:86:af:a7:50:95:0c:e9:1f:4c:09:3b:d5:
                    02:6b:c5:19:08:72:76:1e:49:e0:8e:cd:5a:bf:c7:
                    c4:c1:80:a5:dd:6b:72:ec:85:e3:7b:2f:ce:52:3b:
                    28:75:e8:5f:93:cb:12:4f:be:50:89:9b:b0:6b:d4:
                    a1:ae:32:79:f6:3e:ce:f9:b2:42:c8:21:b8:05:bb:
                    96:e8:65:62:21:78:fe:c7:f7:75:28:ef:78:2a:8a:
                    81:25:ba:1a:a4:a4:53:25:5d:9a:17:f4:98:55:a9:
                    e3:3c:62:04:91:4b:ef:8d:bf:d9:d3:6b:a6:31:b3:
                    3b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C4:01:64:F2:64:F0:64:E0:77:E4:6E:07:44:CF:2E:36:CA:A4:44
            X509v3 Authority Key Identifier:
                keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:c6:80:ab:d7:76:e1:ff:c2:8e:cc:df:19:bc:9b:62:a8:
         85:9c:c8:fe:a1:13:b5:5b:97:ec:2c:80:57:04:38:e2:fc:07:
         15:66:e7:45:ec:44:93:c1:0f:ee:32:e5:44:cf:01:dc:e0:57:
         3e:e8:f5:95:a2:a1:37:3c:b8:49:14:12:41:32:c3:a2:ec:68:
         c2:db:5f:6c:01:27:5d:47:e3:8e:cd:5c:2d:cf:10:94:99:08:
         70:d8:ec:bf:5c:e8:7e:a0:e6:5f:e5:2f:eb:cf:78:6b:9e:05:
         fc:9b:99:6b:49:c9:0c:e9:a1:6c:96:b7:b2:4e:88:d0:88:bc:
         42:c2:a3:a1:b6:d4:0f:7c:78:a1:24:d5:0b:1b:55:44:61:13:
         03:77:4a:9d:ae:36:72:68:64:c2:fe:04:29:73:d1:b7:f1:33:
         ca:b4:4b:8c:e2:97:b4:3d:5f:f1:7e:f8:72:08:8e:d9:8c:36:
         cd:da:a7:6c:33:8f:1a:19:86:2e:12:d3:5d:22:14:f0:12:95:
         be:0f:cb:a4:ce:12:40:6e:3a:93:52:bf:99:34:be:23:4e:84:
         42:d8:28:e6:30:dd:b6:93:2a:3b:f8:e7:e0:13:1d:0c:10:80:
         8f:e0:c3:aa:75:a5:ad:44:94:1d:40:6a:7e:ca:f4:d0:b1:b9:
         ad:6f:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:25:28 2024 by rpki-client on console-fra.rpki-client.org