Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File:                     zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier:          eb0V67sWH0eQjS/N6w8B6a8r2U0/WQ3e+/PcqS0xHHo=
Subject key identifier:   09:E0:44:49:BC:E0:B1:F7:58:98:F3:B7:DF:7D:9B:6B:4D:F7:B0:31
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer:       /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial:       01901D4633E50C6B489D6871A7A8ADD129BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number:          08FA
Signing time:             Sat 15 Jun 2024 19:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:58 +0000
Files and hashes:         1: SsLuogVbNlRcYb49Q0xufyEGi3w.roa (hash: Ua3hhW+33NaW+IUuNyqw8gsPe7pWhztvY1pulOgZVOk=)
                          2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: wNkIirys2gVEhK48+Tqq4y2bcG30FbcQKag9UBF1kxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:33:e5:0c:6b:48:9d:68:71:a7:a8:ad:d1:29:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
        Validity
            Not Before: Jun 15 19:00:58 2024 GMT
            Not After : Jun 16 19:00:58 2024 GMT
        Subject: CN=09e04449bce0b1f75898f3b7df7d9b6b4df7b031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:77:17:28:b4:1b:bd:72:2e:39:7e:5e:51:
                    c4:a2:c5:e9:b4:bc:5e:a4:12:d9:65:59:88:ef:ad:
                    76:f7:1d:0c:2c:82:e6:49:3f:1e:46:47:7b:00:24:
                    e7:57:c8:b9:7e:6b:66:97:6d:c6:4a:6b:a7:a0:fa:
                    ab:5d:8d:ef:05:a9:47:23:36:57:4e:db:00:9d:98:
                    25:86:68:1d:54:e3:c0:5b:30:69:b2:38:39:1c:ab:
                    63:e6:ff:96:8e:5a:cb:0d:d6:65:d0:b9:01:c3:55:
                    14:a7:89:36:95:6c:f4:b5:4c:37:21:0e:ee:e0:b4:
                    37:d3:80:ae:53:a3:e4:d4:3e:97:7a:52:25:24:55:
                    00:2f:0c:49:4f:83:c9:c4:1d:30:c0:93:97:13:6a:
                    90:ac:05:2a:5b:f8:b4:e1:71:1c:03:1a:56:17:19:
                    3b:90:4d:71:db:d8:c5:f4:f2:14:65:35:a6:bd:e9:
                    f7:1c:c9:88:71:40:4b:8f:d8:bb:ff:c9:dd:19:f5:
                    b7:9f:8f:59:24:55:f7:b3:b5:76:5d:2d:f6:80:3d:
                    55:73:39:fa:04:2d:cc:79:d5:64:2a:29:c2:8d:12:
                    af:07:27:e2:84:a8:ff:0a:41:f9:f7:69:10:94:c8:
                    2d:7e:61:a3:9f:2a:15:f7:fe:c5:25:a5:f5:8b:d2:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E0:44:49:BC:E0:B1:F7:58:98:F3:B7:DF:7D:9B:6B:4D:F7:B0:31
            X509v3 Authority Key Identifier:
                keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:26:8c:07:25:6a:a0:a7:05:9d:4f:c4:cd:e0:e7:5a:48:b3:
         d4:cd:ca:3b:bb:1a:15:57:1a:e6:39:3e:65:3f:57:d2:df:2a:
         2d:e9:98:c8:98:90:72:c0:60:58:85:4a:6a:9f:16:29:25:fa:
         29:ce:82:36:33:b5:e4:cf:96:ce:5f:9b:19:18:a4:91:bb:a9:
         08:ea:92:d6:c5:31:4a:93:16:c0:64:c6:f5:c9:3c:5a:04:11:
         95:27:13:38:29:f7:76:a0:bb:4b:47:5f:3c:eb:13:f6:0a:6f:
         9b:23:6a:40:9e:f6:87:0b:03:5a:77:6b:c6:d1:54:d5:ac:f5:
         b0:9e:2f:e6:17:bb:44:6c:21:4e:04:74:23:a4:1a:de:81:dd:
         46:f2:a7:06:c5:3f:55:05:3d:1a:26:a7:75:59:5c:e3:a7:86:
         6e:9d:5c:0f:79:f5:25:8b:aa:e0:10:ba:49:dc:29:47:ba:49:
         c2:6c:c1:f9:0d:95:4e:d2:93:29:9d:29:03:7f:7a:a8:cb:6b:
         cc:f6:06:43:43:64:25:8d:a0:21:fe:78:df:32:8f:5d:32:f1:
         6b:11:bc:7c:94:2c:7b:22:63:b2:ee:26:dc:ab:4d:d5:c4:b5:
         16:7e:58:3c:4a:8c:a7:82:95:ae:a8:a7:54:cb:37:8c:cd:b0:
         68:25:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:11:50 2024 by rpki-client on console-ams.rpki-client.org