Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
File:                     Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json)
Hash identifier:          glTdUXacdAPUz4kXjDOefa+REzksYl523mu8a48KhEs=
Subject key identifier:   49:D6:2C:8F:78:AE:20:43:70:D3:7D:8D:96:D9:34:02:6C:8E:BF:62
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Certificate issuer:       /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial:       018F83D9620E76CD95959F7EA6CE88FBC18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
Manifest number:          0E87
Signing time:             Fri 17 May 2024 00:00:12 +0000
Manifest this update:     Fri 17 May 2024 00:00:12 +0000
Manifest next update:     Sat 18 May 2024 00:00:12 +0000
Files and hashes:         1: 9hd9pdjjhxf4B04nn9ngolfb1xU.roa (hash: CCQe4+3ZrPBL9AjgBNjkN3HMyWwOhlCrWLS+W8B86G4=)
                          2: Ho22FqmKeqgBqRa86GMWEBfDTRM.roa (hash: P6tsf7VPKtSxqhp0DLYaFAtyyZsNNudxoi4AZxii8L4=)
                          3: QB4py0OBFSg-1c5VJ1cD4OdMDaI.roa (hash: Pn4th1NY1tn6RgSLkF9rUFIH36QqAdXJbcdmDkWFqzs=)
                          4: QMgZ-aWoH5BiPDlV5fS1lzH7ElE.roa (hash: fJC4F9eTYRW1nMdgfkpS+1zShAiv3mHLum96ydgCFKA=)
                          5: W5o2NmkxjThqIV7FHBp36luPvlI.roa (hash: 17k/Gh9eFquFYJD5k6fJUJwFyKLrn6T+MVwzetoSeR0=)
                          6: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: E7qpLxo6GrSm+1DtInYT/8BYTYJ9fC0OiEGhIL887ps=)
                          7: ZlurwJBNLdU1yJbzmXqXaGkZdMs.roa (hash: a0Y3AyoQerw0Q+uZ7x4GxeezLoHvyHUyxIPhAidqqB4=)
                          8: csxmFsHOWOPGOst-CWkvbJTOw_U.roa (hash: OClUXCZlQtd8yCuxFXJ8SrBTQRfW/iHSn4YTFcnJ+yw=)
                          9: etGJKZWJOHDMEHj_1-wALoeMZ6I.roa (hash: NQ4aG+sl/cPxukQQGkhj/zm4x86eGYA0nAuxZ8ljoCg=)
                          10: kUs8UVQKcpWkGWDky6F9tchkb0I.roa (hash: OHn+4VbShVfhHbgfjP4Tg/NMciZqZaw/1u6iFgBG2V8=)
                          11: qEPd0nqSig91awjPn67ELfYs8As.roa (hash: SHIg9XBoUMy411p/9FGAneRAtPgULKrWih69F9Q73Kc=)
                          12: wb9NbtVtsQLgqZRBjngwKIc9AqY.roa (hash: vcaS36zKdaefNlG1eIzFa4s2xjRoVqjYEFtqPWgxNZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:62:0e:76:cd:95:95:9f:7e:a6:ce:88:fb:c1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
        Validity
            Not Before: May 17 00:00:12 2024 GMT
            Not After : May 18 00:00:12 2024 GMT
        Subject: CN=49d62c8f78ae204370d37d8d96d934026c8ebf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:87:1b:87:e9:ed:56:43:14:53:4b:c8:39:
                    3c:b9:93:9d:a0:ed:f5:86:11:5a:e1:74:ea:7f:8e:
                    a5:62:45:76:c5:6f:5b:6f:21:62:4e:10:45:83:32:
                    e0:65:86:ec:9a:e4:dc:df:22:56:3d:ac:a5:34:ea:
                    98:1c:f4:3b:27:0a:81:c8:62:2e:0c:a3:5b:a3:f8:
                    ad:dc:22:9a:71:15:08:90:0f:29:69:f2:8f:7d:3d:
                    c1:49:5a:94:b2:b1:d6:dd:47:3f:9c:dd:c1:79:56:
                    29:cf:5e:e6:98:f7:a7:e2:8b:40:74:fd:24:57:66:
                    9e:c9:c3:a8:72:b9:a9:43:7c:01:09:d5:53:9f:11:
                    37:8e:63:20:bf:c2:76:d6:f6:16:41:a2:f9:96:4b:
                    c3:3b:ee:48:c3:c1:8a:e4:c0:1a:66:78:5b:14:72:
                    9f:b6:5b:12:e3:cc:69:be:bb:b4:c5:76:05:66:8e:
                    ba:6a:0a:67:a1:62:b4:56:16:b1:e8:df:6e:21:79:
                    cd:63:96:07:a9:fb:96:b7:ba:43:78:62:fb:3a:38:
                    13:a8:32:35:6d:69:a9:d4:2c:8e:2f:c6:26:6f:69:
                    92:70:b4:b0:5f:8d:1b:15:9d:66:34:4f:e9:8e:c1:
                    16:dd:99:fe:f2:71:62:97:30:29:f5:7d:56:90:23:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D6:2C:8F:78:AE:20:43:70:D3:7D:8D:96:D9:34:02:6C:8E:BF:62
            X509v3 Authority Key Identifier:
                keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:42:9e:1d:b9:f8:98:64:dc:28:08:fb:52:e3:bd:60:3e:58:
         bc:9d:2f:31:24:85:a0:16:87:ee:5f:da:6c:58:ae:43:aa:ce:
         90:d5:8d:4b:81:07:97:98:90:f5:dd:d7:eb:1c:ba:36:2a:48:
         a0:da:e8:cc:84:e0:d9:87:ee:5f:1e:5e:eb:e9:e9:f6:36:d8:
         f2:31:16:6d:0e:59:f1:9d:dc:e1:6b:2e:64:ad:6a:a2:90:28:
         e9:37:40:ed:e9:12:15:aa:7b:40:bf:51:5e:2f:05:27:5d:f8:
         24:3e:9f:f9:46:36:ee:62:be:f4:be:2c:5f:51:ee:42:dd:94:
         01:32:03:56:ff:11:66:8f:a5:c4:52:5e:b8:2e:7a:32:4d:1c:
         b7:48:76:71:fc:40:77:84:e1:02:f9:f4:08:d9:46:77:db:30:
         54:e9:35:1c:fb:17:b7:04:de:0f:da:bc:cc:38:03:2e:9f:84:
         d0:ce:4b:b9:f0:11:d0:24:64:e7:ac:f8:fc:2c:21:34:96:78:
         de:e3:bb:34:80:de:ad:a4:37:92:e5:be:1d:fd:56:cd:e3:c4:
         1f:28:c1:b8:e3:d2:68:66:73:df:4f:49:c7:63:fa:d7:31:0c:
         f6:4c:81:2a:b1:6a:53:62:63:b3:43:46:43:93:28:1d:35:0c:
         a8:5b:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:21:07 2024 by rpki-client on console-ams.rpki-client.org