Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File:                     ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier:          VKb3ZuNu2hSSA9vJ/SOmaF/Uu57s4Z4BcD204C9iU1Y=
Subject key identifier:   83:6A:D8:D4:3E:3C:3B:97:2C:BC:6D:B1:97:08:69:B6:89:68:46:7C
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer:       /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial:       01901BFEF0B3053B9450D1B43360E4CBAE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 13:03:30 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:30 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:30 +0000
Files and hashes:         1: 73aXk6WGyA8wUaap1lshePOuIsQ.roa (hash: U+42p5nwE/zAD472X5S8UTwG9B4ROrdosm60woEvHmk=)
                          2: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: u1e4+nMi5SufZwHGSAxgWiI6zAz2ucY5//ilybV/prM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:f0:b3:05:3b:94:50:d1:b4:33:60:e4:cb:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
        Validity
            Not Before: Jun 15 13:03:30 2024 GMT
            Not After : Jun 16 13:03:30 2024 GMT
        Subject: CN=836ad8d43e3c3b972cbc6db1970869b68968467c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:27:0f:50:42:0d:17:3b:2a:3f:85:5c:a0:
                    5a:33:13:8b:44:2a:86:c3:83:f0:b5:28:4c:1a:4b:
                    df:d0:18:fa:c9:57:2e:60:20:fb:5c:f9:1c:8a:b5:
                    a0:92:5c:05:53:2b:64:6d:0c:50:d4:06:2c:ee:ae:
                    18:f9:60:d5:83:f9:48:78:e4:b4:99:83:f5:a0:d7:
                    c5:03:6c:6a:d7:06:c9:c5:93:90:74:9e:90:77:36:
                    96:4f:f9:73:7c:60:6a:d3:ae:44:ba:2f:7a:4f:8f:
                    73:2f:d9:94:d7:a6:dd:95:2d:0c:bd:9f:ce:62:49:
                    9a:4e:16:8a:0e:2b:6a:66:8a:6d:a9:eb:8e:19:95:
                    a0:96:36:67:c6:ce:a0:63:05:d7:45:cb:21:80:2b:
                    97:ae:a8:e5:fa:4a:8b:a7:6c:3c:1d:54:67:00:ca:
                    f3:92:00:1b:5f:76:03:3e:fd:6b:e9:d7:48:8e:1b:
                    c8:aa:ba:23:79:14:27:28:2d:a7:b0:1c:4f:8e:21:
                    d3:e8:4c:82:d3:ac:b9:db:e3:2f:87:f6:ab:fc:8b:
                    e9:10:7d:5e:38:4a:bc:49:95:7e:7b:3d:e0:dc:77:
                    f6:0b:ac:1a:5e:b3:c5:68:ba:a1:89:0d:2f:ab:ca:
                    df:16:29:74:f3:a5:22:9d:33:46:b5:c9:87:15:1f:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:D8:D4:3E:3C:3B:97:2C:BC:6D:B1:97:08:69:B6:89:68:46:7C
            X509v3 Authority Key Identifier:
                keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:c0:dc:72:48:e7:30:e1:11:2f:bb:71:46:36:2f:97:ef:
         cb:2c:e3:d3:19:56:ef:4e:6a:43:63:8f:7d:97:c2:fd:7c:68:
         b3:9d:cb:a4:6e:15:96:ac:43:78:40:4d:49:de:1a:7f:be:3b:
         b8:af:af:35:54:44:e1:13:1a:23:54:82:0b:43:68:e8:57:0b:
         1b:b8:9c:b0:34:44:24:2e:9f:3f:38:df:ef:26:3a:3d:4e:03:
         c1:81:f2:ff:88:bc:17:d0:49:b8:97:d8:e7:00:84:d4:5a:10:
         ba:83:91:05:cd:15:5c:ac:13:87:57:c9:bc:e6:d9:f2:a7:6d:
         24:86:dc:cd:92:3b:54:59:38:e9:ec:de:a0:a7:3c:d6:6d:f6:
         b9:97:15:47:d9:db:dc:9f:1a:3f:5c:17:28:e8:ab:62:91:8e:
         df:e7:e1:a0:7e:88:33:62:6d:ea:85:87:83:20:b9:21:73:91:
         72:b5:b0:86:87:72:2a:b6:07:cb:42:75:8a:bc:d7:f9:93:0d:
         06:13:27:65:e6:d5:91:e2:f7:9d:68:d6:18:22:25:3a:c5:9a:
         c3:ea:4a:0d:fc:65:cc:48:b5:11:e2:b2:f4:45:45:2a:f6:f4:
         f9:b0:ec:47:6e:de:df:68:9a:1a:43:25:73:a4:32:7a:a7:ec:
         13:ed:66:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:13:08 2024 by rpki-client on console-ams.rpki-client.org