Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File:                     ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier:          QwPLZVuz9jJtCFDqJn9JnS1PML+mk40WY3YtuB6epHo=
Subject key identifier:   9E:BD:7D:01:43:91:D4:56:A0:80:3A:40:C4:09:BB:EC:59:1C:79:8B
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer:       /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial:       01901E58A52D92B03BD2ADC3FD5A9CC27AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number:          08AA
Signing time:             Sun 16 Jun 2024 00:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:44 +0000
Files and hashes:         1: 2-ENE8qCVRNGZ3Gg_9ecsLZTeHw.roa (hash: DgHOebdTTX85KX1AT/TLLstDp6ASkQmWh/lQhUNBM6k=)
                          2: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: w3kOjxuE/yLwgGlZjUS0687dB/x7n3iiL9nQCAJ5i7o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:a5:2d:92:b0:3b:d2:ad:c3:fd:5a:9c:c2:7a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
        Validity
            Not Before: Jun 16 00:00:44 2024 GMT
            Not After : Jun 17 00:00:44 2024 GMT
        Subject: CN=9ebd7d014391d456a0803a40c409bbec591c798b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:6c:13:9b:98:6d:1e:5d:e2:0b:5a:bb:5e:
                    2a:65:ec:cd:65:d5:11:3a:a8:76:e3:7b:da:c4:2e:
                    b1:c1:38:cb:be:87:21:ed:bc:6e:a5:9e:cd:c6:ce:
                    33:da:d8:b6:01:7c:f3:d6:1f:04:f5:1c:e1:b8:99:
                    45:ba:06:f7:b4:66:b1:16:cd:d6:f2:3c:72:fb:cc:
                    0e:1f:1f:0e:47:59:97:f4:0e:04:03:c7:0b:64:f3:
                    33:54:79:65:9e:d3:72:c8:c7:7d:2a:93:81:96:6c:
                    fe:d7:ab:c7:84:cd:9c:c8:7e:13:22:d6:d6:f9:88:
                    8f:e6:81:59:ba:5f:e6:10:88:79:16:f0:b5:a6:f3:
                    b0:e5:b5:00:0d:c4:a0:56:fb:56:c7:70:75:d8:0a:
                    69:1a:fc:f9:57:b1:f2:52:52:e1:c0:97:64:cc:14:
                    69:98:01:09:45:e8:4f:54:20:fd:c6:26:c8:36:75:
                    74:ca:c2:55:dd:7e:89:c3:50:2c:ad:51:95:0d:6f:
                    7f:25:86:eb:a3:c8:d6:a7:11:90:90:2e:62:db:fa:
                    90:d6:29:dd:bb:b1:e8:96:20:16:a4:fe:1e:d2:d5:
                    5f:b3:24:ae:49:67:cb:f0:6f:d2:bd:55:30:be:dc:
                    40:00:43:ce:10:1d:e4:51:cc:06:bb:3d:88:d0:c8:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BD:7D:01:43:91:D4:56:A0:80:3A:40:C4:09:BB:EC:59:1C:79:8B
            X509v3 Authority Key Identifier:
                keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d2:c0:55:ec:d4:1f:67:09:21:93:f3:72:bd:e1:a4:19:40:
         35:be:40:fa:f7:cc:cf:01:0b:91:19:79:c0:68:0c:bc:7a:26:
         b1:66:a1:98:52:59:d9:90:48:65:ff:9e:1f:a2:69:fb:71:dd:
         b0:6a:06:9f:6f:22:7c:ea:f9:4e:37:ba:a4:b2:9e:55:77:c4:
         c3:3b:a3:c7:52:97:02:19:4b:08:4c:c4:9e:7b:f3:c7:99:39:
         f9:69:74:29:6a:89:fa:0c:5a:b7:cc:b7:9d:d0:b2:ea:e6:78:
         5b:75:2f:76:45:b7:b9:34:b6:9a:95:d9:a3:0e:94:c9:7f:4b:
         c3:eb:93:9a:ad:07:5b:94:74:5a:5d:4c:8c:91:6d:9d:b6:85:
         5d:05:a3:10:db:78:dd:c6:d1:db:6d:82:ec:f9:a5:fe:66:9f:
         71:ea:33:92:f5:71:0e:e3:b0:aa:21:47:99:99:e1:0e:cf:73:
         41:57:25:50:cb:09:dc:9b:c0:61:82:7c:86:6d:b3:a6:8b:2b:
         73:5f:da:31:65:99:c6:c9:a9:0a:1e:1e:1e:13:17:7b:f9:81:
         08:ef:cc:80:17:e1:59:ee:69:87:78:ee:84:c2:d8:a6:3d:96:
         ea:ce:3a:45:5e:48:ef:54:59:59:49:43:c4:83:19:10:29:c6:
         96:c2:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:56 2024 by rpki-client on console-ams.rpki-client.org