Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
File:                     zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft (raw, json)
Hash identifier:          tzQCSx+fyI45gq/E2gQZgdFLvNmPWihHtLTXdlupA/0=
Subject key identifier:   5C:B3:60:F3:39:C0:5D:C0:B4:56:29:EB:31:1E:76:80:CF:FE:5D:D9
Authority key identifier: CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
Certificate issuer:       /CN=cddd902a1271270027e4577778ea35883b4515f6
Certificate serial:       019040AE9FE5C704501C60087A57BB796BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
Manifest number:          11DA
Signing time:             Sat 22 Jun 2024 16:01:44 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:44 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:44 +0000
Files and hashes:         1: 7KcXkGAxrngfn8g2AOlb7MqrD-k.roa (hash: 4FgRdL7mmRY+/fHRg3eBnImSwWxHytDitaQ5telDG4s=)
                          2: dpPghb2be9ew0uImaXN1pElidSw.roa (hash: M1gktY8Nq7BGHfrmClJcq6cWM8Q6BRiJ38MxwKZFoag=)
                          3: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl (hash: Pg2kM5gO4KdjYFdv1WlOhL76u6b70nPD1aCizRn9jPg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:9f:e5:c7:04:50:1c:60:08:7a:57:bb:79:6b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddd902a1271270027e4577778ea35883b4515f6
        Validity
            Not Before: Jun 22 16:01:44 2024 GMT
            Not After : Jun 23 16:01:44 2024 GMT
        Subject: CN=5cb360f339c05dc0b45629eb311e7680cffe5dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:13:b7:a0:74:a1:6b:3d:83:c6:cb:5d:84:
                    52:32:dd:8c:6a:64:8f:51:b0:15:bf:8d:b9:05:1c:
                    66:04:01:fc:9e:85:c9:46:78:49:50:db:7e:6b:2e:
                    2c:41:86:a5:9d:2b:8c:a7:f5:26:90:fd:ec:43:b7:
                    5d:61:e2:f0:0d:4f:74:bc:d3:f8:a3:1b:74:ff:09:
                    cc:67:62:49:59:3b:84:c7:59:8a:3d:e2:c1:d6:a1:
                    1e:a2:8c:fd:2e:09:0e:70:cb:51:06:df:48:be:3f:
                    72:fa:8e:d8:95:8d:75:ee:d6:fd:f6:f4:9a:bc:0a:
                    1f:9f:a3:3d:3f:26:f0:b2:1e:a4:f0:b7:1c:28:b5:
                    e7:9e:91:09:98:bd:11:c1:94:35:de:57:e1:1f:a8:
                    a6:d3:e0:3c:3a:e6:40:62:50:8f:94:8a:7e:09:52:
                    44:83:f9:04:46:71:f9:ef:c8:a3:fa:a4:02:96:98:
                    21:63:3f:c3:ab:72:c3:e2:0f:e4:10:c0:90:88:75:
                    2a:4a:d5:62:42:df:21:f4:cd:d1:18:af:b3:6e:09:
                    d6:dd:69:f9:a8:87:23:24:5e:be:f4:20:3b:66:6f:
                    e9:c0:53:01:de:3b:2d:b1:3a:d9:6c:c8:9b:13:60:
                    70:ab:33:c2:ca:15:6d:59:3d:c8:36:39:43:b5:26:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:60:F3:39:C0:5D:C0:B4:56:29:EB:31:1E:76:80:CF:FE:5D:D9
            X509v3 Authority Key Identifier:
                keyid:CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:6b:46:b1:fe:30:a8:7f:90:0f:9e:fc:f0:97:7d:72:4d:
         a4:cf:f1:69:d9:f4:a6:55:18:94:5b:34:be:b0:f0:a1:85:57:
         eb:02:6b:fd:f9:ca:9e:c2:71:f5:66:98:47:53:7e:3a:39:70:
         f6:06:0f:8c:ed:02:ce:80:ef:84:97:3b:2f:46:13:71:e3:3c:
         21:c9:05:7b:8e:53:3b:70:60:fc:7a:2e:0e:f3:ea:62:3e:8a:
         06:23:93:f1:20:73:14:58:c6:12:b5:c2:56:3e:cb:6c:fb:9e:
         e0:33:35:68:6d:44:00:ac:0e:7d:76:94:0f:c4:eb:07:2d:b2:
         fb:8d:07:ef:b7:4f:18:9b:01:9d:ac:0f:d7:7d:f0:cd:f3:87:
         72:6a:ff:be:8e:e1:67:7d:85:91:b4:67:75:49:b6:59:12:9a:
         5d:cf:5d:14:19:89:d8:e6:00:de:f4:83:59:a6:87:e2:1a:66:
         44:15:61:2e:af:94:25:6e:2d:e7:a4:bc:47:f8:4f:44:21:5c:
         75:15:ad:7a:1c:ce:ad:1e:fc:ea:7a:e5:9a:f1:09:c6:98:b8:
         37:49:bf:0c:65:5f:6f:88:73:3f:cc:e4:c3:bd:89:3b:7c:13:
         62:a1:5c:e0:8b:a2:39:9f:6a:ee:90:66:bf:01:2a:f5:83:15:
         11:b9:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:55:57 2024 by rpki-client on console-fra.rpki-client.org