Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File:                     ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier:          vvf8WD8eBP1wQvmvsYSpjVUY8Jl+abvkDOR1twe8nmQ=
Subject key identifier:   FB:C1:6D:81:12:A5:0F:AA:29:1E:AC:AA:46:1D:1F:D5:78:95:CC:11
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer:       /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial:       01901E59103FC6B100E55A46ECB602D43486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number:          0243
Signing time:             Sun 16 Jun 2024 00:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:11 +0000
Files and hashes:         1: FHe9rpCRTWJDYSpdYwNzlO9cp9M.roa (hash: 1iTgN/CBjuvhhAw/Zae5augb1xDKVpaSvynLbYaZMmg=)
                          2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: 2aKvs0ON6ekSQDPhAM4XQxfl5IdVdzC8S9eP6bKU21k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:10:3f:c6:b1:00:e5:5a:46:ec:b6:02:d4:34:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
        Validity
            Not Before: Jun 16 00:01:11 2024 GMT
            Not After : Jun 17 00:01:11 2024 GMT
        Subject: CN=fbc16d8112a50faa291eacaa461d1fd57895cc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:22:f6:6b:39:29:09:03:a0:80:63:14:fc:
                    33:16:67:14:fd:31:3b:7a:2f:55:22:20:aa:58:12:
                    a4:5d:95:82:8f:35:b2:37:29:e5:a0:2c:ac:4b:39:
                    d2:63:56:37:f7:04:a5:d2:e6:57:35:ff:88:95:99:
                    be:d8:4c:05:4a:e6:7c:45:d5:e6:e6:85:03:d0:b1:
                    a2:78:59:3f:e3:8b:7a:7f:27:bc:a3:f6:80:7a:2d:
                    5c:ba:a0:3e:72:09:7e:30:9f:04:44:0c:b6:73:6c:
                    9a:fe:21:90:cd:60:49:4b:ee:11:b2:31:b5:4b:09:
                    69:c7:2e:de:ea:db:d1:db:dd:8a:90:32:13:32:3b:
                    f4:b8:e5:9e:81:b9:00:8a:c9:09:6d:6e:fe:5a:a2:
                    bb:ec:59:09:e1:4f:00:71:46:fa:a0:4d:97:68:11:
                    d9:df:45:b1:2a:4b:78:2d:b5:6c:3e:12:b4:5b:ca:
                    9f:7e:9e:62:c8:e4:c2:a0:e2:5b:96:1d:97:95:11:
                    a3:7b:14:4a:1a:36:8c:aa:33:cd:33:6b:33:bb:27:
                    77:9a:ae:4a:7d:1b:2e:6e:92:87:51:29:fc:6d:f4:
                    1a:db:3f:f1:83:26:96:60:1a:61:a4:2c:c1:38:5b:
                    ac:77:2b:2c:83:38:48:0b:a2:1e:93:ee:c0:3d:f3:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C1:6D:81:12:A5:0F:AA:29:1E:AC:AA:46:1D:1F:D5:78:95:CC:11
            X509v3 Authority Key Identifier:
                keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f2:3b:3d:51:31:09:99:5d:86:4d:89:e1:a7:d5:a2:03:18:
         9b:82:64:4d:5f:fd:38:53:8e:e8:d0:bc:21:21:94:b7:2a:a6:
         f3:31:fe:6a:ac:ab:47:95:46:93:1d:94:dd:e2:74:5a:89:05:
         92:e2:e7:1a:c3:b1:20:8e:e3:fc:52:40:93:8d:e9:25:43:05:
         eb:21:2a:97:06:e7:fe:92:59:1b:be:e8:6a:3f:ae:78:28:80:
         4c:dc:00:a2:fe:43:70:d4:df:37:e1:53:4b:57:dd:7e:96:28:
         b1:13:ec:ce:22:40:bb:d6:d9:aa:00:a3:39:5e:1a:2f:d1:92:
         31:7b:83:c7:ca:33:8c:3f:4e:b9:cf:f0:1a:11:34:8b:30:96:
         57:40:60:64:59:42:0b:77:c0:68:67:70:a3:c7:ce:a0:f7:f0:
         d7:12:83:f7:06:30:a9:5a:61:9a:1b:19:dd:b8:0c:8e:eb:9e:
         dc:44:70:c3:e5:1c:25:6b:07:07:2c:8e:3d:76:2a:67:1c:23:
         f5:1c:9a:3c:d6:ef:f2:30:16:ed:0d:da:79:14:6d:80:cf:5d:
         57:8b:86:f8:2b:12:03:c1:23:35:b0:b2:f6:ac:57:d5:e8:12:
         c8:4b:96:85:b5:2e:2c:d0:1f:9c:5f:05:71:e3:cb:c2:95:a9:
         35:79:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:25 2024 by rpki-client on console-fra.rpki-client.org