Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File:                     ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier:          7lJ5OB76jXO/sXuot366UNKAD6xyNtE77qvT4UrhZiM=
Subject key identifier:   58:B0:B2:BF:9E:88:C7:56:CD:2A:EF:8F:8E:CD:50:FD:51:D8:08:C9
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer:       /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial:       01901DECD2F9631DC7265347B63DC299EA93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number:          0E80
Signing time:             Sat 15 Jun 2024 22:02:58 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:58 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:58 +0000
Files and hashes:         1: PHVH9ILKPGSGqfsnO69OUUJmvTo.roa (hash: aWyK9PNp7Y95UymM6kwrHLKb/M00YL3CN6Anp04d+Is=)
                          2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: d6XioJenpeOo7/+dWsbGvj89y104aJDKpESLgwJugZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:d2:f9:63:1d:c7:26:53:47:b6:3d:c2:99:ea:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
        Validity
            Not Before: Jun 15 22:02:58 2024 GMT
            Not After : Jun 16 22:02:58 2024 GMT
        Subject: CN=58b0b2bf9e88c756cd2aef8f8ecd50fd51d808c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:76:30:3d:76:82:19:71:33:11:05:8d:35:
                    75:19:69:97:a7:b5:05:99:6b:45:bc:bc:27:7d:1a:
                    d4:59:d3:ed:c3:f0:77:96:90:c1:89:d9:9a:c5:92:
                    0b:0e:35:01:bc:31:75:df:0e:d9:f9:99:5f:f6:91:
                    1b:70:10:aa:9f:ad:fd:44:47:ee:4c:b7:b4:eb:e0:
                    bf:b2:a1:aa:ac:2d:11:43:05:6d:18:48:16:28:84:
                    7e:ee:29:31:ed:c7:12:53:2d:df:a1:6b:4b:45:61:
                    58:3e:c2:e0:8a:9e:e5:9a:0f:8e:5f:d1:45:59:fd:
                    54:64:3c:01:ae:6e:f9:36:e7:f1:75:6d:11:ac:8d:
                    38:d5:2d:3a:63:9b:45:09:be:ff:ed:ab:c9:af:13:
                    67:35:e5:28:c0:59:d2:31:f9:f0:66:dc:ce:74:53:
                    c3:5e:20:a9:bf:77:c8:ce:ad:03:d4:09:d2:24:e8:
                    fc:27:c8:98:6c:55:52:9d:de:7f:3e:a9:02:20:a2:
                    f1:8e:53:71:89:dd:1e:4f:b3:54:a2:ae:5d:8b:d3:
                    4d:3c:eb:8e:14:e9:54:0b:fa:92:7b:8f:79:e3:7a:
                    71:e3:a4:ee:51:d4:54:07:c7:80:9a:67:2c:e0:d9:
                    0d:bc:53:3b:e6:5b:a8:ef:64:f1:e2:1a:45:37:f7:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:B2:BF:9E:88:C7:56:CD:2A:EF:8F:8E:CD:50:FD:51:D8:08:C9
            X509v3 Authority Key Identifier:
                keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:85:6c:00:30:00:66:14:92:a0:25:1e:94:9c:d1:1d:8c:b6:
         58:98:cc:96:09:1a:3e:67:41:15:8e:14:ff:2f:b7:20:55:42:
         f1:7e:66:7d:7a:80:b2:18:03:76:18:7b:14:64:ec:ca:6b:1e:
         82:ce:02:41:46:7b:fc:49:62:be:44:3f:42:f5:46:d7:1b:60:
         07:64:55:7b:40:11:1d:7c:bc:ee:d9:a0:b0:e3:87:1a:52:6a:
         b9:f7:a0:61:68:0d:1a:69:53:78:29:51:37:8f:ed:e2:1c:47:
         df:a1:cc:36:79:d2:4c:30:a7:9c:62:72:9f:f6:2a:9b:84:6b:
         4b:00:37:4f:eb:1e:85:12:35:11:cd:4c:7a:58:d2:62:7a:12:
         01:28:37:41:31:79:d3:da:ed:1d:a1:20:8c:29:63:a8:c1:94:
         72:52:2c:08:68:66:2c:ee:79:4e:2c:03:27:00:1e:c2:f6:c9:
         53:3b:b2:83:a9:31:65:c9:63:d4:2b:0a:a2:4c:ff:cb:bb:15:
         6f:fc:f6:9c:87:3b:5a:3a:2f:14:f1:52:1b:d8:1d:f6:4c:e0:
         7d:20:e8:7e:ac:ed:fe:98:05:ee:7d:51:68:4c:9f:bb:3a:b9:
         3a:a3:3c:f7:aa:9d:2f:41:63:97:d7:cd:23:e4:ff:1f:2f:ff:
         0c:fb:6d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7NL5Yx3HJlNHtj3CmeqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjVlY2Q2MTVmM2E2YzU2MzljNTFlOWUzMTk3NjczMTUy
MDc4YjgwHhcNMjQwNjE1MjIwMjU4WhcNMjQwNjE2MjIwMjU4WjAzMTEwLwYDVQQD
Eyg1OGIwYjJiZjllODhjNzU2Y2QyYWVmOGY4ZWNkNTBmZDUxZDgwOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJF2MD12ghlxMxEFjTV1GWmXp7UF
mWtFvLwnfRrUWdPtw/B3lpDBidmaxZILDjUBvDF13w7Z+Zlf9pEbcBCqn639REfu
TLe06+C/sqGqrC0RQwVtGEgWKIR+7ikx7ccSUy3foWtLRWFYPsLgip7lmg+OX9FF
Wf1UZDwBrm75NufxdW0RrI041S06Y5tFCb7/7avJrxNnNeUowFnSMfnwZtzOdFPD
XiCpv3fIzq0D1AnSJOj8J8iYbFVSnd5/PqkCIKLxjlNxid0eT7NUoq5di9NNPOuO
FOlUC/qSe49543px46TuUdRUB8eAmmcs4NkNvFM75luo72Tx4hpFN/eUPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiwsr+eiMdWzSrvj47NUP1R2AjJMB8GA1UdIwQY
MBaAFGRl7NYV86bFY5xR6eMZdnMVIHi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMt
NTRjN2M0ZWU1YmI1LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMtNTRjN2M0ZWU1YmI1
LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYVsADAA
ZhSSoCUelJzRHYy2WJjMlgkaPmdBFY4U/y+3IFVC8X5mfXqAshgDdhh7FGTsymse
gs4CQUZ7/ElivkQ/QvVG1xtgB2RVe0ARHXy87tmgsOOHGlJqufegYWgNGmlTeClR
N4/t4hxH36HMNnnSTDCnnGJyn/Yqm4RrSwA3T+sehRI1Ec1MeljSYnoSASg3QTF5
09rtHaEgjCljqMGUclIsCGhmLO55TiwDJwAewvbJUzuyg6kxZclj1CsKokz/y7sV
b/z2nIc7WjovFPFSG9gd9kzgfSDofqzt/pgF7n1RaEyfuzq5OqM896qdL0Fjl9fN
I+T/Hy//DPttHg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:18 2024 by rpki-client on console-fra.rpki-client.org