Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
File:                     ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft (raw, json)
Hash identifier:          AanW+Rky4sY4JYjYIY6U1/W110EfyLAqZCLTMr8hiEc=
Subject key identifier:   B9:B4:45:A3:52:AB:5C:F8:FD:CC:F5:42:DF:E2:C6:46:CD:EA:2F:D8
Authority key identifier: 65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
Certificate issuer:       /CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Certificate serial:       01901D46384E06B046C9B38D8E696AA0DAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
Manifest number:          0EA4
Signing time:             Sat 15 Jun 2024 19:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:59 +0000
Files and hashes:         1: K4QiKCBCDVJNwj3LyfcbIMw_rKE.roa (hash: b6+PypL9ti9hIT0yeSg40quGYOT605m+sImk4ubc57w=)
                          2: ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl (hash: 3hhSh/t5OOgSn5j3qaOQ/vdwrQQVKDb96I3sn5pQzGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:38:4e:06:b0:46:c9:b3:8d:8e:69:6a:a0:da:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
        Validity
            Not Before: Jun 15 19:00:59 2024 GMT
            Not After : Jun 16 19:00:59 2024 GMT
        Subject: CN=b9b445a352ab5cf8fdccf542dfe2c646cdea2fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:b4:d8:b5:9c:3e:41:e5:12:3b:3b:ab:52:
                    e5:80:54:c0:54:06:fd:eb:54:60:a4:73:c1:fc:16:
                    ce:16:ec:bb:e4:b0:ba:2a:ae:ba:c0:53:95:8d:6d:
                    51:bb:dc:51:bb:a9:79:11:5f:48:21:9a:43:8c:02:
                    dd:65:c9:9f:68:ba:a8:6a:79:9e:fd:5f:33:ad:5c:
                    6c:33:da:9a:63:f8:58:ec:0c:f8:7a:51:20:0a:92:
                    c2:b1:ef:de:ae:e9:e7:0a:f4:f1:01:90:09:df:b9:
                    0e:99:e4:b4:b0:a4:05:03:ec:15:89:98:0b:61:16:
                    67:ef:b3:ee:13:b2:d2:55:e0:75:d2:39:d6:8d:73:
                    5c:d3:47:60:61:c9:46:c3:35:6a:67:67:84:e7:72:
                    8f:36:fa:c6:ec:12:f6:5a:22:c9:be:da:45:9a:e7:
                    1f:fa:e7:32:77:18:0e:0f:9e:0a:1b:82:2e:a4:31:
                    d1:e8:44:76:f2:c6:35:2e:d3:4f:da:e3:73:ce:07:
                    15:39:25:93:bf:7f:aa:0b:51:02:bd:3a:e1:27:db:
                    9c:ec:3a:83:5b:3e:1c:d5:1c:21:29:a7:3c:d5:c9:
                    d4:e5:b3:88:1d:56:40:ed:82:56:32:49:86:1c:1b:
                    75:6b:7d:0b:d6:5c:ba:97:05:b8:f0:4c:7b:24:8a:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:45:A3:52:AB:5C:F8:FD:CC:F5:42:DF:E2:C6:46:CD:EA:2F:D8
            X509v3 Authority Key Identifier:
                keyid:65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:9b:56:44:ee:36:e4:80:72:1e:cf:b6:67:dd:a4:5a:82:
         bd:c9:8c:e5:21:8e:35:a8:9c:17:06:96:cc:f8:ff:81:5f:ce:
         c6:a2:e1:57:4f:9d:42:f7:44:1f:6f:b5:9b:a4:41:25:0f:f3:
         33:d8:f0:a5:f8:e2:b7:2b:8b:63:09:c4:c1:8f:c0:02:59:ab:
         b4:b0:31:90:37:e8:e8:6d:b5:0e:7f:33:a2:16:e3:ca:7f:90:
         55:f0:34:8e:d2:26:18:b5:be:75:f4:2d:4c:6c:16:6d:0a:3e:
         db:a3:ce:70:16:de:e6:7a:b7:f3:f5:fc:22:ce:c1:59:fb:92:
         57:dc:bd:54:b4:05:2a:5e:a1:c9:7f:bd:5d:f6:0a:fc:39:ec:
         d8:f0:50:a6:11:f3:38:2d:a6:bb:e5:ac:08:c2:de:c2:21:23:
         2b:4d:05:33:7f:0b:5b:e5:21:c7:c7:49:10:cb:ea:0d:e9:28:
         4c:f4:c5:79:3c:bb:95:75:d1:02:69:1e:4e:08:24:45:c8:3d:
         d3:93:ad:0e:4d:4e:95:cc:c0:81:d2:ab:b5:61:fb:9a:74:31:
         f7:ef:5f:9f:56:b8:ca:67:aa:b4:e1:8f:e0:ad:7e:4d:33:e5:
         2b:c0:30:5e:58:01:9a:b2:29:e3:1c:79:ca:97:32:91:32:86:
         00:c1:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:46 2024 by rpki-client on console-fra.rpki-client.org