Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File:                     Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier:          /p8VTjzCc4vO8OB51YLD+mVj/YIdw05omD3njUjPzCA=
Subject key identifier:   2E:D9:DE:31:CB:E1:D0:D3:00:19:C9:A7:9D:07:F2:D1:33:97:89:43
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer:       /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial:       01901DEBD5E7A88A47AF8F25E70F21E714BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:01:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:53 +0000
Files and hashes:         1: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: vrNe+Spfxt8RKGH+VCx0002zN1q/W0IhXsRKadLqTQI=)
                          2: mknzsfXcnWvFn1V5gddZORyQFeo.roa (hash: IhiYrYObw43cmHgTW/2qehddv45ZvOR3AbTr8bWu11Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:d5:e7:a8:8a:47:af:8f:25:e7:0f:21:e7:14:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
        Validity
            Not Before: Jun 15 22:01:53 2024 GMT
            Not After : Jun 16 22:01:53 2024 GMT
        Subject: CN=2ed9de31cbe1d0d30019c9a79d07f2d133978943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:65:95:90:64:2a:16:a1:aa:36:a2:ba:c3:
                    fa:83:66:02:71:1b:b4:8e:1d:d8:68:53:e4:3a:e6:
                    18:a7:7b:ce:e4:2f:f9:11:21:d4:61:1d:35:0a:30:
                    38:85:79:f1:6a:ec:36:2a:75:dd:b5:44:d0:76:22:
                    a1:49:ed:b5:f1:33:1a:7f:54:99:bd:9e:ca:b7:b5:
                    2b:16:55:7f:76:a9:90:38:2b:c6:a0:75:aa:66:5a:
                    4e:51:cb:1a:70:02:e3:5c:01:7f:ec:cf:49:80:64:
                    2f:61:7b:9f:0a:e3:21:37:44:da:57:b8:36:91:16:
                    7d:eb:7f:5b:d7:82:4c:f5:1b:65:7c:4d:8b:f8:78:
                    05:e3:8c:90:8f:4d:86:11:7b:b9:17:a8:4d:92:31:
                    9d:1c:26:b7:57:ff:00:16:c9:37:41:af:c5:f1:58:
                    d2:72:1b:8e:08:30:1f:89:ee:a6:6a:62:a3:6d:bb:
                    fc:6d:65:b9:ca:bc:aa:aa:b0:fe:47:2a:07:5d:0e:
                    a4:02:c3:5e:30:e4:63:60:a0:96:8a:78:6b:b3:4f:
                    fd:4e:db:74:5e:09:e4:53:05:51:56:37:9b:e8:de:
                    23:3c:1b:2a:9b:7f:e8:78:bc:14:ce:f7:b1:53:e9:
                    73:7e:97:7b:31:de:68:38:49:75:c0:7b:1f:7a:16:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D9:DE:31:CB:E1:D0:D3:00:19:C9:A7:9D:07:F2:D1:33:97:89:43
            X509v3 Authority Key Identifier:
                keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:68:e1:84:71:08:b8:e3:32:09:98:cb:ea:1a:11:0f:0b:d7:
         2a:a7:e3:80:19:08:37:64:90:8f:64:e1:62:4e:0c:76:f7:25:
         e1:a1:7f:a8:89:fc:77:38:ca:d7:c0:61:ea:49:64:3c:4d:f5:
         a0:02:37:18:aa:14:6a:3c:b0:ce:85:1d:3a:7e:45:91:33:aa:
         f6:98:e2:82:53:ff:0d:57:9c:55:27:22:76:dc:69:89:a3:e3:
         4f:89:e8:ff:66:c0:27:e4:c8:12:49:fd:b5:f7:9c:74:3c:0b:
         7a:89:07:f8:2b:ce:58:2c:2b:9c:f4:78:bb:67:74:b7:5c:34:
         d4:f4:3e:73:7a:bd:f2:82:c4:8f:f9:4f:fc:bc:37:43:0f:ea:
         82:93:96:cb:3c:5a:1a:91:36:13:3e:e6:43:8c:ce:3d:4a:ee:
         f1:fd:eb:cc:8c:8a:2a:67:05:20:f0:c9:03:79:84:72:c9:59:
         ea:b7:90:83:f1:2a:ae:f3:92:cd:61:17:21:2c:87:8e:73:c8:
         83:d6:e0:0e:e3:c5:a1:1a:3a:a3:23:96:0b:b5:d9:0a:2b:a4:
         81:40:8b:1c:20:42:ee:db:84:f8:bf:18:ed:86:25:42:16:44:
         78:80:9d:8c:ef:f2:cb:fa:54:49:d4:9e:68:13:d4:2a:9c:33:
         21:f9:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:59:44 2024 by rpki-client on console-ams.rpki-client.org