Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          Ydt3hguRN0Iky2SO5N9LI1Yx0j98DNgbNXWw4Q/1t+g=
Subject key identifier:   56:E6:1E:CE:86:10:5F:13:B0:71:F8:AC:EC:E8:41:E3:63:FE:E6:71
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       018FB233698474BCAC531A3D8654F0694210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          1192
Signing time:             Sun 26 May 2024 00:01:04 +0000
Manifest this update:     Sun 26 May 2024 00:01:04 +0000
Manifest next update:     Mon 27 May 2024 00:01:04 +0000
Files and hashes:         1: 9iNNjitmnxEMLr2K1yCbvuQUs-I.roa (hash: DOiyHp8slWnZ34606YAeFptixA22bjrRB1dI4k7fo3k=)
                          2: Neqj_Uo2IH979jpQtFxOAhP3KgU.roa (hash: eMlQILlUSDHWc+VPLLsa+M+kQcgb5M997fVJWehkeBA=)
                          3: Yxb0tQH6JbBw81cjfua2ZA3hME0.roa (hash: 1qK1Iqi1UXJTNMWyoZhJdZYYMS22vHvxVDNnj4Ne+Jk=)
                          4: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: VhbgQN+g5kkChNL8Om+6GtMIig0GB5q4NrkbyZXrKDI=)
                          5: _fKGQgaJezM2GM4k10QyNUNTCuQ.roa (hash: xj9tc3HgRHHOaF9irl6Si2kNvOWfiWuIme8OtwLfZ/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 18:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:33:69:84:74:bc:ac:53:1a:3d:86:54:f0:69:42:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: May 26 00:01:04 2024 GMT
            Not After : May 27 00:01:04 2024 GMT
        Subject: CN=56e61ece86105f13b071f8acece841e363fee671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:bc:af:dd:0f:14:a7:2d:5c:0b:e0:98:07:
                    bb:98:01:7b:88:16:13:90:c8:30:6b:db:b8:06:a4:
                    6e:b1:d0:58:6e:40:e7:95:4c:0f:a1:f0:83:c9:96:
                    92:80:a1:d1:9a:08:89:5b:e5:72:8a:ac:34:6a:9e:
                    cb:76:a7:6b:b2:8f:62:af:c4:ee:ea:62:8d:4b:ff:
                    2a:df:0a:d9:58:41:89:a0:48:24:91:a6:41:03:3e:
                    dc:3d:d5:dd:c3:0f:8f:82:4b:29:5b:40:92:4e:d2:
                    55:34:29:e5:d7:80:8e:d9:08:22:17:d2:67:d2:ed:
                    e2:db:a5:27:03:9e:45:2b:89:af:c1:31:52:38:f0:
                    86:44:81:e9:84:24:ec:e0:cb:2f:64:43:02:7f:d3:
                    37:94:73:a2:9f:7c:12:dc:54:2a:25:5b:99:96:4e:
                    9a:e5:86:b8:8b:7c:3b:ff:47:90:25:68:11:58:3d:
                    7f:f7:7a:98:af:81:b4:1a:e3:f2:bd:16:bd:71:35:
                    fd:4d:f4:e4:2e:c5:3d:df:f6:05:f3:ad:8e:3f:19:
                    e2:2d:c5:7d:64:21:c9:5d:f1:cb:71:5c:b0:99:11:
                    07:ea:c8:a2:f5:07:42:3d:39:c0:69:66:1d:70:31:
                    00:b6:a0:d7:6e:7f:60:64:32:ec:c3:67:10:bf:3e:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E6:1E:CE:86:10:5F:13:B0:71:F8:AC:EC:E8:41:E3:63:FE:E6:71
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:6c:bf:85:53:c3:14:31:f1:f1:7a:74:0a:9d:21:d0:5b:
         7f:dc:db:42:9b:42:4d:ba:ba:2e:d0:d4:95:e9:8a:a1:1d:8d:
         ae:41:56:e9:2d:e2:61:e1:27:5d:84:08:80:1f:54:f0:62:76:
         3d:33:50:ad:5f:a7:49:17:d1:5b:b1:ee:2a:2b:f1:26:32:43:
         46:63:86:0c:ca:eb:0e:3d:4f:6e:ae:ad:4d:8d:46:00:bd:b0:
         88:43:bc:1b:e1:1d:f1:5e:9a:3a:a5:ec:42:6c:c4:91:f9:e7:
         c2:95:3c:02:dd:2d:21:a3:32:f7:5d:6d:39:84:38:49:0c:d8:
         83:d5:6d:af:19:43:d6:36:ee:eb:eb:4b:62:ae:a7:d7:ce:29:
         49:32:e3:48:6a:f7:5b:13:b8:a9:7a:79:89:25:c9:6f:97:7f:
         79:14:29:8f:1e:b3:e5:11:ed:21:0f:9a:b9:a4:5f:ac:bd:7a:
         7e:27:d2:45:11:ee:39:06:82:da:95:57:3e:de:05:79:1a:e9:
         d0:9c:2d:d6:3d:d9:ce:71:df:29:cf:67:3d:7b:7f:58:95:fb:
         f1:52:c6:7b:b0:71:bc:ff:8d:9d:e6:f6:98:58:56:d3:eb:7f:
         2b:8c:ce:af:bd:2a:1b:c2:37:59:2c:f7:7f:65:be:b8:e0:78:
         72:16:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:47:32 2024 by rpki-client on console-fra.rpki-client.org