Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File:                     ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier:          8li/X6qQXuQezF4O6nU8iExK+sneENFhFTWHvwNpakc=
Subject key identifier:   38:36:C3:9D:0C:E4:34:2A:D6:63:A8:25:DB:E2:5F:71:14:89:E5:55
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       018F88248EC1CF4643FCF5112DEB305D6952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 20:00:48 +0000
Manifest this update:     Fri 17 May 2024 20:00:48 +0000
Manifest next update:     Sat 18 May 2024 20:00:48 +0000
Files and hashes:         1: D-hbNEgkDbtPfZRe3cRmvOPt04s.roa (hash: OjWnRxHjyrFtjznIpjXh/JaOqbs197KzEhvJRHqSgsE=)
                          2: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: OB4xt1Tl3ZPbnS7nj3vE8emuhD9HeOiL8EHUFtYT1Dc=)
                          3: gZDp52mLrD3ehIfvaLEKrYEhWcQ.roa (hash: lMeWSoR4Q0LSVLDwL3afCOVFcb7LlthyPkKF4b1TRIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:8e:c1:cf:46:43:fc:f5:11:2d:eb:30:5d:69:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: May 17 20:00:48 2024 GMT
            Not After : May 18 20:00:48 2024 GMT
        Subject: CN=3836c39d0ce4342ad663a825dbe25f711489e555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:7b:81:fe:48:a2:e5:ff:a3:2f:75:70:bb:
                    6a:86:d4:a2:a7:bd:7c:69:78:e6:5b:46:e6:d8:87:
                    a2:6b:ca:e8:7d:c3:49:7f:30:09:7b:6c:c1:46:28:
                    5c:15:94:1d:84:7d:ec:95:0d:22:31:e2:17:c8:d4:
                    15:74:c2:53:ea:c9:d4:32:1b:d6:63:0c:93:43:8a:
                    db:26:2a:01:fc:e7:23:78:f0:4e:98:00:91:4d:5a:
                    2d:42:07:15:ce:6c:c4:2d:dc:cf:e2:43:d0:21:73:
                    95:dc:58:5f:85:83:09:32:ac:3a:1c:da:f1:f3:a3:
                    12:49:0a:8f:d7:fa:54:fa:c7:63:24:d3:c3:53:3c:
                    97:06:a9:d0:c6:5c:0e:e8:ca:3e:f5:4d:19:76:6f:
                    4a:41:95:5a:12:fb:c4:b9:49:a1:f4:1f:c0:c4:d8:
                    20:9c:87:4b:ba:ed:aa:be:cb:c4:7d:20:15:f3:71:
                    3f:7a:5d:1a:ac:95:54:5a:57:b3:b1:00:6f:46:84:
                    b8:7e:b2:ba:37:56:30:5d:19:ec:94:30:b2:98:33:
                    23:2f:87:28:84:e7:4b:90:fb:93:21:f2:f3:9f:6c:
                    94:b2:89:cf:bd:54:ab:ea:b9:ed:f8:4f:dc:34:04:
                    de:0a:2d:6b:08:75:3f:e2:dd:46:d0:25:2b:57:6d:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:36:C3:9D:0C:E4:34:2A:D6:63:A8:25:DB:E2:5F:71:14:89:E5:55
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:09:9c:19:0c:ad:2a:fb:3b:f9:fd:e7:60:49:0e:6d:86:
         c6:20:53:ea:90:e0:87:fe:a9:3d:e8:64:a5:02:53:c0:5e:b0:
         dd:98:cd:47:e5:99:10:b6:46:eb:2a:69:ff:d1:94:94:3a:f5:
         26:48:2e:1d:39:4f:cd:f4:ad:5f:7d:04:d1:9f:58:d3:74:a6:
         f5:6f:d6:d4:d1:d2:4a:ce:5c:fb:7b:20:9e:3c:97:ae:17:8e:
         a7:47:87:19:6b:19:09:be:89:17:fb:af:dd:d6:5f:db:5e:8f:
         1a:c8:3b:03:0d:c7:42:37:e4:95:5b:7d:fb:8f:6e:b8:b2:20:
         4b:1e:47:8a:74:33:13:b6:ad:f3:97:7b:ad:5e:fa:8a:4d:3f:
         5b:08:80:ff:2b:37:56:7f:83:6f:df:d6:9d:f1:f9:7a:52:a8:
         e6:81:75:21:a9:53:42:72:dd:2c:3d:3a:39:6c:c2:2a:fe:31:
         bf:c0:39:59:f4:12:4b:1a:b3:5b:f8:80:bf:10:aa:f6:fa:87:
         86:9b:5f:60:03:1a:fa:80:25:2b:97:4d:4a:b7:08:6a:d9:79:
         79:a6:36:04:bc:f0:f8:88:3e:03:45:1d:d9:4e:4b:80:82:3f:
         33:e5:4b:56:04:d3:d3:ce:2a:2c:99:7e:5c:3a:b7:e2:15:dc:
         a0:22:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:43 2024 by rpki-client on console-fra.rpki-client.org