Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File:                     Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier:          +JJTyMKNg/SA8cESbMEvWzkmQZ7oDJFXbt+e1KkA38Q=
Subject key identifier:   84:1C:D3:92:51:05:02:F9:DC:23:56:12:46:B8:98:D6:D9:2A:22:18
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer:       /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial:       01903AE27D0CAAD407FFED06C274EEFB5204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number:          0CDF
Signing time:             Fri 21 Jun 2024 13:00:39 +0000
Manifest this update:     Fri 21 Jun 2024 13:00:39 +0000
Manifest next update:     Sat 22 Jun 2024 13:00:39 +0000
Files and hashes:         1: DsbS7S5FnQ7114fu_CklbSiIKvQ.roa (hash: NeX0stGr6+FWpk9zUARO1jWS2kZCYIaqRvW023hReSs=)
                          2: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: RTNzX4kL9G4qoUrReHcgWMJ3P7iLxTT5o4+3Zk0ry64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e2:7d:0c:aa:d4:07:ff:ed:06:c2:74:ee:fb:52:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
        Validity
            Not Before: Jun 21 13:00:39 2024 GMT
            Not After : Jun 22 13:00:39 2024 GMT
        Subject: CN=841cd392510502f9dc23561246b898d6d92a2218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:36:d8:44:e4:af:c3:f0:a4:b1:91:26:2e:
                    9f:a0:77:8e:a4:48:ea:d6:a1:2e:ea:a0:7e:10:98:
                    98:58:fb:2c:e7:ef:fd:12:7a:b2:04:ac:76:9b:08:
                    c7:9f:17:d0:94:03:20:28:07:35:2a:f8:0f:69:b7:
                    9d:b3:58:18:59:5a:be:32:02:55:03:c1:c0:92:e5:
                    4e:63:24:f1:d5:cd:79:00:59:60:c9:91:f2:49:4e:
                    34:a3:f8:52:86:c9:d8:18:5f:99:94:57:ca:05:af:
                    70:f8:bc:bc:4d:e1:fe:a9:fb:6e:00:be:cf:38:25:
                    76:53:fe:d7:06:23:1a:37:ba:a5:fd:4b:3c:b3:b9:
                    d4:dd:60:67:10:ca:7f:48:94:1c:b9:00:07:ac:6c:
                    5e:ee:85:95:3d:a9:8e:0c:5c:34:ac:b5:19:3e:1f:
                    eb:3c:42:d1:36:88:ce:2d:7d:c2:29:d1:54:74:f3:
                    2a:a4:65:64:61:19:0d:e0:ca:ca:65:47:15:1a:e9:
                    42:96:91:19:1a:c8:c4:6a:de:78:bc:58:8b:44:b3:
                    7a:a2:71:2d:d2:36:33:9a:da:b0:21:82:07:6c:5a:
                    f6:e8:c8:d1:11:71:db:a9:93:69:b5:59:21:20:e7:
                    95:ae:20:b7:7e:74:44:61:d2:a3:43:01:e9:a1:dd:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1C:D3:92:51:05:02:F9:DC:23:56:12:46:B8:98:D6:D9:2A:22:18
            X509v3 Authority Key Identifier:
                keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:28:14:41:34:de:22:f5:e8:2c:15:35:7f:b4:db:68:1b:
         00:0f:37:a7:3f:02:24:6a:89:45:db:54:bc:e9:3f:ac:f4:1d:
         17:2d:c1:c6:a3:25:3e:a5:00:5f:0c:b1:4e:94:c8:7a:7d:86:
         9f:03:8b:ef:af:4e:4c:64:bb:c1:f6:4a:b2:79:17:fa:6a:d9:
         29:ba:e6:5f:bc:41:e1:d5:11:c1:9b:e7:88:df:de:a8:97:b4:
         98:05:36:42:9c:c1:be:7a:31:63:4c:19:df:ca:f4:80:26:5c:
         39:02:a4:ee:3b:f4:47:ce:ba:8d:db:0d:c8:92:81:d0:b2:be:
         d3:49:be:68:38:e9:e7:87:ec:f4:3b:46:57:e2:43:30:04:1e:
         2e:bb:40:97:31:91:1b:df:ab:41:23:ec:8f:07:6c:e3:6f:50:
         37:07:65:3a:e0:04:5f:4c:75:e8:4d:de:58:59:59:7f:0b:d4:
         00:05:4a:f9:17:94:cd:92:3a:fa:0d:78:fd:df:cd:60:f8:69:
         d0:90:e6:9c:c6:ce:73:f2:6d:7c:d1:6c:5c:c2:a3:e8:03:8d:
         7c:06:26:97:eb:d4:27:b2:c8:77:6f:fb:dc:c4:98:b8:5a:d9:
         6b:1a:3a:c3:af:17:a5:79:2e:fe:29:29:44:24:be:b9:81:f5:
         05:79:86:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA64n0MqtQH/+0GwnTu+1IEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjQwNjIxMTMwMDM5WhcNMjQwNjIyMTMwMDM5WjAzMTEwLwYDVQQD
Eyg4NDFjZDM5MjUxMDUwMmY5ZGMyMzU2MTI0NmI4OThkNmQ5MmEyMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzY22ETkr8PwpLGRJi6foHeOpEjq
1qEu6qB+EJiYWPss5+/9EnqyBKx2mwjHnxfQlAMgKAc1KvgPabeds1gYWVq+MgJV
A8HAkuVOYyTx1c15AFlgyZHySU40o/hShsnYGF+ZlFfKBa9w+Ly8TeH+qftuAL7P
OCV2U/7XBiMaN7ql/Us8s7nU3WBnEMp/SJQcuQAHrGxe7oWVPamODFw0rLUZPh/r
PELRNojOLX3CKdFUdPMqpGVkYRkN4MrKZUcVGulClpEZGsjEat54vFiLRLN6onEt
0jYzmtqwIYIHbFr26MjREXHbqZNptVkhIOeVriC3fnREYdKjQwHpod2R9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQc05JRBQL53CNWEka4mNbZKiIYMB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8AoFEE0
3iL16CwVNX+022gbAA83pz8CJGqJRdtUvOk/rPQdFy3BxqMlPqUAXwyxTpTIen2G
nwOL769OTGS7wfZKsnkX+mrZKbrmX7xB4dURwZvniN/eqJe0mAU2QpzBvnoxY0wZ
38r0gCZcOQKk7jv0R866jdsNyJKB0LK+00m+aDjp54fs9DtGV+JDMAQeLrtAlzGR
G9+rQSPsjwds429QNwdlOuAEX0x16E3eWFlZfwvUAAVK+ReUzZI6+g14/d/NYPhp
0JDmnMbOc/JtfNFsXMKj6AONfAYml+vUJ7LId2/73MSYuFrZaxo6w68XpXku/ikp
RCS+uYH1BXmGiQ==
-----END CERTIFICATE-----
Generated at Fri Jun 21 20:22:21 2024 by rpki-client on console-fra.rpki-client.org