Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File:                     Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier:          zOJMGmsuR5177SjbZhV6qdv1Zw9pDznSGeUwi0PT34I=
Subject key identifier:   38:ED:F5:0B:20:0A:51:4F:FC:26:FE:F4:F3:DA:5C:76:65:A4:0A:1F
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer:       /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial:       01901BFED75F1683760FA9DAEAC937A4B5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number:          0CCF
Signing time:             Sat 15 Jun 2024 13:03:24 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:24 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:24 +0000
Files and hashes:         1: DsbS7S5FnQ7114fu_CklbSiIKvQ.roa (hash: NeX0stGr6+FWpk9zUARO1jWS2kZCYIaqRvW023hReSs=)
                          2: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: JevYLadNOceznb+WqSp+9JwgQb4okqvjSRxz3JsdS8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:d7:5f:16:83:76:0f:a9:da:ea:c9:37:a4:b5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
        Validity
            Not Before: Jun 15 13:03:24 2024 GMT
            Not After : Jun 16 13:03:24 2024 GMT
        Subject: CN=38edf50b200a514ffc26fef4f3da5c7665a40a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:8d:e6:47:2d:bd:47:da:44:c5:37:3b:d0:
                    de:44:c6:ec:b9:0e:dc:47:f5:a1:6a:0b:e9:b0:73:
                    34:02:77:c3:b3:7a:d0:19:13:88:a5:18:04:c6:c0:
                    ef:89:99:4d:9a:db:b3:fa:5a:1b:14:d1:cc:30:52:
                    46:95:82:56:1a:39:26:ef:65:17:48:c4:d5:6f:3a:
                    58:66:f8:55:c2:31:24:89:7e:5f:97:4c:72:ee:3b:
                    c5:56:47:65:9a:46:b0:c5:c6:03:6a:43:8c:07:87:
                    62:20:60:4e:d9:b1:68:e9:ea:a1:f7:84:4e:e0:96:
                    2f:17:67:8c:e5:e0:1b:87:79:61:8b:57:7d:68:c6:
                    88:7a:82:74:1c:79:86:eb:ac:23:e4:68:83:12:7e:
                    f6:1a:54:f1:27:0a:b4:1f:0e:92:94:84:5f:83:d3:
                    50:23:9d:93:44:a2:5b:9f:1e:22:9f:c0:75:9c:eb:
                    3c:fe:ca:15:0b:af:c5:34:d1:b7:a7:f2:64:a1:b3:
                    cb:d1:95:d2:8b:0e:a9:e1:4c:d2:e7:9f:dd:e2:ec:
                    db:d5:4c:1a:a2:38:a6:a5:39:ab:ed:dd:bd:a7:50:
                    9d:0a:c5:3d:60:f1:67:60:08:85:c4:01:cd:69:9c:
                    48:9f:d0:31:86:d7:2f:98:c6:70:2f:05:dd:96:66:
                    a8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:ED:F5:0B:20:0A:51:4F:FC:26:FE:F4:F3:DA:5C:76:65:A4:0A:1F
            X509v3 Authority Key Identifier:
                keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:64:89:1f:d9:f7:54:13:80:1a:d5:6f:e7:b8:26:2f:c2:ff:
         0c:dd:7b:35:7c:fc:2a:57:34:17:46:64:0c:40:34:b2:48:60:
         60:f2:6f:23:45:e7:02:60:1f:37:c3:f9:65:69:a5:f9:fc:b7:
         db:cc:29:8e:db:f7:0c:f6:a5:61:41:83:a5:23:b3:87:b3:c7:
         b5:70:34:60:9f:d3:ca:a4:0c:68:83:61:6d:e6:3f:12:9c:3e:
         3c:ad:e7:b3:48:1d:ac:d8:77:1f:7d:e3:31:0f:ee:ad:27:68:
         64:06:bc:53:66:27:66:79:31:18:d7:18:e6:17:65:ec:4b:53:
         73:9e:f8:c3:03:5d:b3:4f:89:b0:5c:14:3f:03:d4:eb:63:74:
         3f:b2:95:a1:4e:5d:e3:5f:5c:93:d3:b2:8d:0a:d7:5f:c7:0d:
         ea:fe:0b:eb:2f:a5:1a:c8:ee:b6:fc:1c:e1:09:fe:2d:8a:e0:
         1c:95:f2:30:5e:6c:26:4d:f1:ef:33:e6:32:ec:7b:13:f0:b1:
         b5:5d:20:33:fd:27:16:6f:28:5f:04:66:03:10:02:0a:d9:f2:
         2f:93:8e:fc:e5:4e:d3:f9:7e:a6:1e:56:ce:cb:22:e0:c3:fe:
         c8:c1:26:5f:3c:7a:7d:e6:d7:16:4b:d7:87:75:d2:bc:29:27:
         ff:4a:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:57:08 2024 by rpki-client on console-fra.rpki-client.org