Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File:                     zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier:          YFFlKiUCpVt+N5nTKkv/RdFrP6jEs/d8CllXw0e0SAM=
Subject key identifier:   09:D9:81:DA:C8:94:23:69:D2:EE:25:56:F9:A6:37:C5:EC:50:52:60
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer:       /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial:       01901DEBDCF877600A59E369C3554452FE66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number:          1158
Signing time:             Sat 15 Jun 2024 22:01:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:54 +0000
Files and hashes:         1: BpRW5-nU2XhwOPNkldEihh6Ukfo.roa (hash: tJ0LsYc2NoliPgi0BmFdZjcsFCGQMmoU6heIuSDFiAc=)
                          2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: 8mUkgkhCNB4JJuPMX6t4s1RjAAhXQp6E+jUnwCOwE/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:dc:f8:77:60:0a:59:e3:69:c3:55:44:52:fe:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
        Validity
            Not Before: Jun 15 22:01:54 2024 GMT
            Not After : Jun 16 22:01:54 2024 GMT
        Subject: CN=09d981dac8942369d2ee2556f9a637c5ec505260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:09:63:1e:bf:6d:2f:bc:6a:4b:66:00:da:
                    28:d7:b0:14:d1:82:58:5d:44:c5:f4:b1:35:65:26:
                    75:69:c3:0f:85:b6:5f:74:b6:a4:e0:28:3f:09:78:
                    2b:3c:97:3c:a9:27:cc:48:87:24:36:19:20:72:b1:
                    96:7c:7d:2a:a9:60:f7:31:fc:5f:b4:11:a7:3c:e2:
                    93:e0:ad:de:c0:80:0e:4b:ff:56:29:86:aa:5b:48:
                    ca:5d:7f:26:49:f7:47:a3:02:2a:b0:c7:4c:c1:68:
                    49:5f:f2:eb:01:d8:9e:36:4e:d5:ae:ff:e8:c0:2a:
                    8f:92:6c:12:35:d0:be:c2:3a:6c:5b:dd:f9:14:cd:
                    15:fc:38:87:ed:fd:5b:7a:3a:b7:75:36:33:e0:10:
                    32:b7:9a:a5:b5:e3:81:9e:6a:91:ad:0d:f4:46:e9:
                    64:87:34:51:cb:f9:96:cf:b3:c1:44:57:d3:47:f8:
                    ec:de:80:c7:69:19:eb:db:8e:79:10:d3:1f:c7:5d:
                    56:8f:bc:b0:fa:43:a8:e1:9a:2d:af:e5:0b:41:49:
                    79:b5:b1:30:14:37:48:aa:2f:df:46:83:8a:7e:ff:
                    23:38:3f:96:67:df:af:88:91:af:43:eb:5e:79:d4:
                    f7:b5:f5:64:89:28:1b:ee:91:d7:1f:65:e5:37:02:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D9:81:DA:C8:94:23:69:D2:EE:25:56:F9:A6:37:C5:EC:50:52:60
            X509v3 Authority Key Identifier:
                keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:33:f1:29:0d:9c:94:cd:44:21:06:c3:53:e2:aa:3e:01:b0:
         a6:ef:5c:8d:47:59:82:2d:a8:97:1b:f1:ec:78:da:7a:0c:08:
         94:db:a3:d9:aa:3a:c8:5c:8f:5d:03:c4:f1:95:bf:3e:f8:af:
         06:ab:44:05:fa:48:c5:01:0a:ee:18:9a:82:88:6e:57:37:35:
         ac:ae:63:bc:57:0f:b8:12:92:6b:42:ed:cf:86:55:ef:b0:ca:
         13:7f:77:51:0f:55:4c:5f:25:8a:fa:25:74:8a:35:08:f2:5a:
         6d:5e:82:8f:4c:fd:7a:91:e9:ca:66:66:bc:99:4e:51:54:12:
         d6:a2:a6:b3:02:41:10:e6:66:2e:ba:2d:87:ca:7b:43:c2:b4:
         df:01:f8:9d:e0:b5:99:42:f7:8e:57:ff:d6:76:9c:3c:46:7f:
         6e:e5:7e:a5:6b:6e:e6:da:59:d3:0b:7b:c5:f6:ac:0f:30:3d:
         a7:39:b1:95:7c:76:69:09:a6:48:41:e8:e7:de:e2:0f:5c:4b:
         c5:9d:ea:f6:4b:14:5a:77:63:bb:2e:70:8f:9c:53:78:89:30:
         44:d3:c5:5f:0f:8f:8a:b9:09:cf:78:5d:43:d2:08:84:6d:e2:
         f1:19:a0:6f:cb:d6:42:3c:c3:8e:bf:e1:1f:54:08:ca:8c:b2:
         bc:73:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:13:43 2024 by rpki-client on console-ams.rpki-client.org