Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
File:                     Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft (raw, json)
Hash identifier:          7zO28j5XeUm1pznFezar3D5EZoQiu3yMbRSigi0KSDc=
Subject key identifier:   BA:D5:BD:BB:19:B0:67:E7:0B:DA:51:DA:46:AD:FE:9F:BF:86:96:63
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       01901DEC08EDA14990543503EA6301261ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
Manifest number:          085B
Signing time:             Sat 15 Jun 2024 22:02:06 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:06 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:06 +0000
Files and hashes:         1: 94WybEWHusqLDA1e4DmJK9xv2ZY.roa (hash: ha+ewXdhTFlLBY3zR+JKbUwy3Uw4RnysbfFBfXAxk34=)
                          2: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl (hash: 4jMHP2Oz1F87E8uQXxT9kK9c6bGGt5pEYDC7eE0TBo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:08:ed:a1:49:90:54:35:03:ea:63:01:26:1e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: Jun 15 22:02:06 2024 GMT
            Not After : Jun 16 22:02:06 2024 GMT
        Subject: CN=bad5bdbb19b067e70bda51da46adfe9fbf869663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:8e:f2:fc:3e:b4:b4:ef:88:ce:63:35:f0:
                    15:93:5d:68:1e:01:56:b4:e5:18:7c:80:48:25:46:
                    78:9e:0e:c0:3b:4a:68:ff:84:77:e1:da:b0:74:8a:
                    5d:99:6c:25:13:49:33:f9:25:31:6c:41:b1:cd:7e:
                    ac:7b:6f:a3:39:dd:90:03:19:8a:18:7d:eb:17:8a:
                    1d:5e:c6:ea:8f:5c:7f:23:dc:74:4a:e0:3f:3c:b4:
                    19:74:a8:5d:a2:3f:3d:3a:1c:00:b6:79:06:0f:fc:
                    6f:a0:b6:d1:19:c1:2a:bb:fa:f1:85:87:9d:24:1a:
                    6e:26:6c:56:97:b7:cc:da:ff:52:ea:7e:ea:7b:2e:
                    e4:1e:86:b4:76:d8:dd:0e:13:5b:9b:22:53:48:60:
                    22:7a:5f:e0:94:db:de:e9:21:1b:0d:08:03:13:ec:
                    0a:fe:41:59:84:45:e5:65:d6:b9:2a:91:af:d0:67:
                    9d:6a:e6:49:10:c8:94:d9:c9:7e:05:81:d0:63:a1:
                    6b:5c:bf:1d:02:fc:cf:98:8a:21:d5:bb:ad:5d:e3:
                    b5:55:62:20:95:85:89:5f:6a:51:3a:be:b8:ee:d4:
                    e5:a8:98:d0:af:71:97:d2:d7:2e:79:46:f5:60:5d:
                    74:af:05:49:4c:19:67:f7:6f:bb:f1:59:bb:3b:4d:
                    b4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D5:BD:BB:19:B0:67:E7:0B:DA:51:DA:46:AD:FE:9F:BF:86:96:63
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:42:13:dd:7a:c5:cc:03:aa:c0:ad:b4:74:6f:6e:15:7a:32:
         d3:92:02:e2:e7:f5:93:06:2b:b4:98:a1:fe:73:73:1a:2f:6e:
         22:e1:ce:cf:25:8f:e3:17:78:5f:cf:da:df:b9:28:b3:9a:1d:
         47:49:4c:ea:55:5e:55:16:3f:29:b8:e6:d2:19:a8:f0:d3:cb:
         40:c5:31:ca:a0:eb:d4:4f:b3:42:31:e3:7a:4d:4d:b2:e9:29:
         d8:47:20:55:99:00:1b:ac:cd:7a:9b:ef:5a:9d:cc:24:60:48:
         5f:ef:f7:30:8d:83:31:6d:15:1b:5f:6d:92:70:ef:88:d1:28:
         bc:e6:f0:34:f8:dd:6c:c0:59:22:6f:2a:c6:34:0c:32:4a:ab:
         9f:7b:db:db:57:6d:d5:41:a0:0e:ed:4c:cf:1c:07:2b:cc:d5:
         eb:b8:3f:86:a7:46:64:f1:1d:81:60:0b:2a:c5:fa:51:52:4d:
         b8:8e:bb:c7:53:51:82:4c:00:ca:eb:22:0c:da:a8:f5:c7:f6:
         56:ac:9f:73:1b:91:17:ad:88:ef:79:1c:cc:56:b9:23:dc:cf:
         e0:20:ed:92:86:46:d9:62:1a:79:7e:db:bd:f1:c5:ce:46:29:
         fc:a2:87:4e:62:02:e3:20:ff:c1:97:a3:6c:4a:09:f3:45:ac:
         be:1d:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:39:35 2024 by rpki-client on console-ams.rpki-client.org