Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File:                     ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier:          eYKuodbLvNwOGoAibvy6zeNl7DB0U+0venCOZerQuIg=
Subject key identifier:   00:25:3C:8D:33:53:99:AB:16:7B:B4:C1:F7:01:14:82:AA:14:BE:8F
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer:       /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial:       01901DEC7D64C88B4DBCD4EAC9C3382AA34A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number:          0678
Signing time:             Sat 15 Jun 2024 22:02:36 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:36 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:36 +0000
Files and hashes:         1: 3gHtvvEH1A4egl70kgr1NpWYgLo.roa (hash: 22HQPOOiRanBM1Sk0T9PhCmzcmQVB4DjL/IBowpnUVQ=)
                          2: Mw7QmMhzHzv_PL73x1UkQSPTXrI.roa (hash: tla9BBKgOJcAAltCqrn9A/cr+eZXLKGO6tOJq6Mrv9A=)
                          3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: g+Mv+7QQ1fqeKcMMvUcsCMVYmUELVtxwWeKbgE0dccw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:7d:64:c8:8b:4d:bc:d4:ea:c9:c3:38:2a:a3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
        Validity
            Not Before: Jun 15 22:02:36 2024 GMT
            Not After : Jun 16 22:02:36 2024 GMT
        Subject: CN=00253c8d335399ab167bb4c1f7011482aa14be8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:76:c9:7a:b3:46:6b:a9:33:fb:19:d0:68:
                    1e:bf:8d:10:0f:d8:76:f7:ae:af:00:a0:f7:00:fa:
                    00:f5:73:19:d8:7f:36:25:17:3e:9b:c8:d3:04:ed:
                    37:d8:56:ee:c1:12:fc:d3:37:37:ac:fb:97:7d:22:
                    21:b9:ca:bb:f3:ef:61:6b:2e:42:7b:39:2a:9a:38:
                    1c:16:c0:9f:3d:cb:63:cf:8c:1a:42:2e:11:b0:de:
                    af:c7:48:78:b6:d7:be:f9:c5:ad:b0:63:dc:1e:14:
                    b0:b5:a2:fc:66:7b:20:04:39:9d:7f:ae:39:66:1f:
                    6d:7f:a4:b5:11:77:af:82:90:f1:27:72:45:89:c1:
                    3d:65:b7:40:a5:75:5b:ce:ff:03:18:f2:3c:8e:c8:
                    ae:ad:fb:52:9d:01:25:39:23:41:e0:9a:67:ac:b7:
                    b9:86:7f:8a:f7:b5:b5:4d:4f:e4:bf:07:8c:d2:c7:
                    73:e6:8c:2e:82:97:a4:da:62:62:4a:89:b5:6a:e5:
                    4d:4e:4a:a8:33:d1:c4:38:c9:fd:1b:e5:31:a0:de:
                    c1:dc:9a:96:b4:b9:1c:f9:15:04:d2:85:11:44:3b:
                    72:bd:e8:97:8f:a7:46:a2:bb:60:57:b5:a1:40:e5:
                    e8:ad:9f:8d:cd:43:dd:49:17:aa:f7:f8:f1:a6:2d:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:25:3C:8D:33:53:99:AB:16:7B:B4:C1:F7:01:14:82:AA:14:BE:8F
            X509v3 Authority Key Identifier:
                keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:b7:b3:ab:77:fd:bd:2d:3b:58:88:63:c9:21:a0:0b:7e:
         c8:21:ed:e9:91:6f:04:64:fa:ed:15:0f:99:22:cc:cd:d5:52:
         f8:86:8d:c8:e6:b9:56:71:2a:45:e3:f1:6d:53:d6:6a:b4:35:
         3f:4c:56:86:92:4b:80:59:4a:ef:22:8b:c9:c6:37:89:7f:51:
         1d:c9:09:5e:fa:f9:00:f7:e4:8c:37:a4:e7:bd:8f:67:b9:0d:
         d7:8e:16:b6:b4:ea:1e:93:1e:9c:f6:6d:52:ae:c2:67:6e:fd:
         37:28:64:b2:58:b7:79:b3:29:6f:67:2d:40:df:10:50:03:17:
         fd:b7:b2:5b:ef:3e:14:99:a7:f0:33:6a:be:ee:ae:fd:0a:57:
         94:15:a7:bb:ac:34:19:2b:9b:7d:fb:4b:1d:64:e7:19:07:43:
         99:e7:13:e4:37:89:e4:35:43:cb:ce:04:1b:81:be:df:6d:3a:
         df:17:5f:d2:4b:8e:80:07:d3:dc:8d:8e:c6:07:6d:43:ee:6e:
         b3:12:21:e8:fc:37:71:03:13:78:76:eb:5a:2b:23:0d:dd:42:
         f3:95:37:86:ea:c1:99:0b:34:6a:42:27:20:99:bd:9e:e8:e1:
         6b:4b:46:bc:46:dd:cc:3e:56:02:0d:6f:db:06:bd:75:4c:31:
         73:aa:b4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:59:04 2024 by rpki-client on console-ams.rpki-client.org