Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File:                     ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier:          DwHT9a0GCrfwWYzlP/vtqVL7kvVoZhvnDfnjzIl5d40=
Subject key identifier:   23:8E:89:B6:19:6B:FC:DA:F8:8B:B6:F0:92:12:10:74:F5:71:D9:12
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer:       /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial:       018FA51CF78DF61B2728B3A6393ADFC09E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number:          1189
Signing time:             Thu 23 May 2024 11:01:29 +0000
Manifest this update:     Thu 23 May 2024 11:01:29 +0000
Manifest next update:     Fri 24 May 2024 11:01:29 +0000
Files and hashes:         1: RWO_3hxKCDX8W34dmBe83CmvIZI.roa (hash: xyUMWJZ99VAbwIKtNGyhpWv3K/fGgz2L7PNFHLw4BTs=)
                          2: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: 0wIkVN7eQUjQhfH4um4r4C/Az3dA6CklyXeLlCmLuUk=)
                          3: _FxQjr3wOUFoc7uKt45zexb9rIQ.roa (hash: Qs04KdohopHRLhxxnOuO4a9FJv8NpBBE8YYo0NevXbY=)
                          4: kRM1n2VD8eYb6J0z9oQ6YTR6KH0.roa (hash: iVrsTRxzGBIn/3SmtBL+2Gv1oa7tIcovSj1JARY/H6o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a5:1c:f7:8d:f6:1b:27:28:b3:a6:39:3a:df:c0:9e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
        Validity
            Not Before: May 23 11:01:29 2024 GMT
            Not After : May 24 11:01:29 2024 GMT
        Subject: CN=238e89b6196bfcdaf88bb6f092121074f571d912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:12:87:f5:1e:a9:87:3c:ac:22:94:ac:0e:
                    1f:30:fc:bf:63:ad:cd:66:b4:94:8f:fe:d4:e8:20:
                    db:46:1e:4e:01:2f:4a:65:c5:d6:bd:65:c2:a4:71:
                    38:4f:29:02:77:17:d5:ab:ce:b6:62:78:97:2a:27:
                    b0:16:ac:08:a9:65:03:3c:7a:03:e5:c7:99:55:03:
                    e0:d9:0f:31:1a:b8:31:98:87:46:b0:e8:6f:02:2e:
                    3d:64:1e:58:14:a5:2b:56:9c:64:a5:59:ac:8d:3e:
                    6b:3a:7b:dd:27:71:0d:17:7c:4a:97:a9:d8:c7:cc:
                    01:50:ee:fc:7b:ab:db:0f:33:d7:07:77:4b:2f:62:
                    63:e1:4b:95:4f:95:52:37:e2:7b:f1:da:d4:ed:fb:
                    b6:99:62:29:24:20:98:c3:60:7e:57:f6:5a:a8:a4:
                    6c:8d:5b:1f:b6:e4:48:6d:11:3f:20:eb:9f:5e:21:
                    9b:bc:cc:79:ac:46:05:09:8b:22:99:e3:c1:7e:2e:
                    31:70:0e:e1:41:a2:4b:e3:96:0d:73:04:98:5c:37:
                    04:dc:2a:57:9d:b5:6e:5c:8c:95:3b:9e:e3:ca:1f:
                    8c:34:8b:14:be:24:83:6f:fa:9d:33:28:02:81:f5:
                    28:a5:4a:b9:26:cb:c1:4b:ba:6d:c9:bd:13:7a:3c:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:89:B6:19:6B:FC:DA:F8:8B:B6:F0:92:12:10:74:F5:71:D9:12
            X509v3 Authority Key Identifier:
                keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:9c:59:b6:61:e4:b5:bb:d9:18:80:51:35:32:aa:48:c6:
         d5:57:6d:8a:d0:56:1d:81:52:ad:cf:ee:31:97:6e:15:62:3b:
         60:f0:61:9d:94:1f:c4:b7:40:4e:94:97:5a:42:f2:d7:2a:c1:
         07:4c:43:2b:0e:ad:48:3b:b8:56:86:39:ac:27:62:c9:4d:f6:
         05:a7:bc:d3:c2:a5:2c:11:83:74:e6:d4:cc:bd:5b:db:26:ed:
         23:36:56:cd:27:69:f4:01:24:03:d1:66:5d:11:79:e3:52:6c:
         af:2b:d8:48:a3:f6:0b:f6:ae:ea:55:21:ce:8c:9e:06:b6:ad:
         75:a9:92:68:87:b4:2e:cb:58:e9:9e:d2:57:20:09:8c:f4:da:
         9a:13:6e:81:c9:10:e5:45:bc:83:66:29:6d:82:ef:c5:b4:49:
         75:71:13:87:a3:d6:eb:77:df:49:08:46:eb:ed:68:20:f3:f3:
         ef:72:20:33:7a:df:93:7b:3f:eb:69:5c:5e:84:e2:1a:36:53:
         ac:94:f4:5c:fb:df:3b:d5:4b:31:12:84:41:25:38:3c:07:4c:
         fc:f3:a9:86:90:6e:5a:32:a4:03:5c:d2:85:91:b9:d0:83:2b:
         e4:e2:70:51:51:df:ee:b6:ee:06:e2:2c:d7:8e:6d:0a:5f:d8:
         a5:7e:57:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+lHPeN9hsnKLOmOTrfwJ5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5
ZmJjMTMwHhcNMjQwNTIzMTEwMTI5WhcNMjQwNTI0MTEwMTI5WjAzMTEwLwYDVQQD
EygyMzhlODliNjE5NmJmY2RhZjg4YmI2ZjA5MjEyMTA3NGY1NzFkOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh0Sh/UeqYc8rCKUrA4fMPy/Y63N
ZrSUj/7U6CDbRh5OAS9KZcXWvWXCpHE4TykCdxfVq862YniXKiewFqwIqWUDPHoD
5ceZVQPg2Q8xGrgxmIdGsOhvAi49ZB5YFKUrVpxkpVmsjT5rOnvdJ3ENF3xKl6nY
x8wBUO78e6vbDzPXB3dLL2Jj4UuVT5VSN+J78drU7fu2mWIpJCCYw2B+V/ZaqKRs
jVsftuRIbRE/IOufXiGbvMx5rEYFCYsimePBfi4xcA7hQaJL45YNcwSYXDcE3CpX
nbVuXIyVO57jyh+MNIsUviSDb/qdMygCgfUopUq5JsvBS7ptyb0TejyHrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOOibYZa/za+Iu28JISEHT1cdkSMB8GA1UdIwQY
MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt
MzMzZjBjOTkyNzllLzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll
LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/ucWbZh
5LW72RiAUTUyqkjG1VdtitBWHYFSrc/uMZduFWI7YPBhnZQfxLdATpSXWkLy1yrB
B0xDKw6tSDu4VoY5rCdiyU32Bae808KlLBGDdObUzL1b2ybtIzZWzSdp9AEkA9Fm
XRF541JsryvYSKP2C/au6lUhzoyeBratdamSaIe0LstY6Z7SVyAJjPTamhNugckQ
5UW8g2YpbYLvxbRJdXETh6PW63ffSQhG6+1oIPPz73IgM3rfk3s/62lcXoTiGjZT
rJT0XPvfO9VLMRKEQSU4PAdM/POphpBuWjKkA1zShZG50IMr5OJwUVHf7rbuBuIs
145tCl/YpX5XtA==
-----END CERTIFICATE-----
Generated at Thu May 23 17:23:39 2024 by rpki-client on console-ams.rpki-client.org