Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File:                     ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier:          Md+hEKRppt6XJxRj16KeEbAI2RxJ7V924MowX0DBiN0=
Subject key identifier:   A4:F4:BD:0E:78:7E:63:6E:E5:3F:19:5A:8B:73:C0:32:45:85:6D:87
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer:       /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial:       01906001CAC48265F69450232E20682B4BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number:          0161
Signing time:             Fri 28 Jun 2024 18:00:48 +0000
Manifest this update:     Fri 28 Jun 2024 18:00:48 +0000
Manifest next update:     Sat 29 Jun 2024 18:00:48 +0000
Files and hashes:         1: Gr26Mk1HQvGp3sVLrdIySyl84Gw.roa (hash: l7vPbrDP3DPCxNMH1aCFH8VseOI0/L6hinP/cqhZgRc=)
                          2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: R/xlmm4Lr0y8XTJGeiPZuEQYkshmirm62zggkkyfehw=)
                          3: b-KWuIeEguBwQR2O757y41PQWdM.roa (hash: VbIxyqHuCj0AADHbwPa4LF8FzoMbhXX6g+lSJGRrqcA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 16:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:01:ca:c4:82:65:f6:94:50:23:2e:20:68:2b:4b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
        Validity
            Not Before: Jun 28 18:00:48 2024 GMT
            Not After : Jun 29 18:00:48 2024 GMT
        Subject: CN=a4f4bd0e787e636ee53f195a8b73c03245856d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:53:95:26:c7:e0:c2:34:a1:0a:bd:4a:df:
                    53:9f:fb:4a:43:ff:34:da:84:81:e5:f4:c2:c2:26:
                    c2:07:0e:ec:ac:f9:6a:ef:83:e3:24:29:38:e4:02:
                    d9:60:19:a7:4c:73:03:cd:60:f8:c9:74:f9:c7:c2:
                    19:5d:ff:34:08:46:e7:c1:3a:8d:02:6a:55:ae:c4:
                    e9:b4:11:51:6e:7a:ad:36:1b:ae:45:ff:4c:35:a2:
                    a6:ed:32:20:56:85:19:d7:40:78:e9:f8:96:89:90:
                    cf:91:4c:84:13:ba:78:d8:03:05:05:d1:02:1f:6a:
                    65:38:96:9c:b2:81:f0:08:07:fb:20:27:dc:dd:be:
                    c3:1a:32:83:bd:ea:0c:71:ef:21:e7:f4:da:62:d6:
                    62:e6:26:86:f7:8e:7d:c4:ec:1e:00:79:53:5f:e1:
                    86:63:de:67:44:22:6e:c8:d5:64:de:46:ba:49:b4:
                    47:8c:6b:64:68:46:d0:a5:01:39:c3:9f:93:a1:0a:
                    23:0e:a1:d0:4b:16:44:d7:36:1f:b8:79:c0:ae:60:
                    44:28:e4:aa:b9:f5:cc:41:6c:bd:32:50:65:0d:b9:
                    8c:8c:98:23:a5:8b:3f:89:02:94:ea:24:86:e3:c2:
                    3e:d2:90:fe:18:29:23:0a:80:d7:1a:81:a9:62:55:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F4:BD:0E:78:7E:63:6E:E5:3F:19:5A:8B:73:C0:32:45:85:6D:87
            X509v3 Authority Key Identifier:
                keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:85:c1:d0:3e:0d:04:58:c9:9e:da:2e:cb:b3:90:0b:cd:
         5b:aa:5f:ab:fc:89:8d:84:23:62:35:c1:88:69:31:e3:87:66:
         b0:fb:f0:7f:02:b7:38:a9:3d:95:ba:4a:0a:5c:aa:78:ea:67:
         13:da:28:34:32:ef:04:f1:c0:06:3e:5a:fd:4c:c9:c7:73:34:
         b0:dd:1a:b8:26:d8:0f:bc:bb:4b:72:32:7f:83:b8:50:d0:ca:
         b4:8a:a6:1c:aa:b3:66:df:f5:f3:f4:ed:c6:43:af:d5:38:b3:
         37:71:a5:0a:ce:82:9a:39:97:e3:e5:9f:dd:0c:3a:f2:65:7c:
         82:0c:96:12:27:36:c8:76:8b:78:67:7d:2d:fe:94:7b:29:16:
         cd:87:e8:46:96:24:6d:a2:b2:38:3d:d4:5a:30:6c:22:51:6e:
         f2:8e:2c:c2:3b:99:9b:94:4a:fd:34:74:63:9c:6e:6e:e8:2a:
         cc:20:2c:93:8f:dd:4c:28:4b:47:46:4a:e2:b8:8c:1b:f4:1b:
         07:04:7b:8a:70:6a:bc:c8:74:fe:58:7e:60:14:d0:14:5e:11:
         34:70:7e:4d:82:e5:3a:99:9e:83:db:a1:2c:39:dc:1e:50:3f:
         ec:74:f3:d7:33:bc:a1:51:9d:eb:6e:9d:ee:b3:eb:1e:e5:36:
         f1:a5:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:49:04 2024 by rpki-client on console-ams.rpki-client.org