Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File:                     zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier:          Z79A4js/dZI3p3ozP7+6M29p9bcK2d6VY2AT9g8Wuoc=
Subject key identifier:   B5:74:2D:B0:CB:50:7D:11:87:AA:50:7C:19:43:72:37:2F:3B:3F:F5
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer:       /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial:       018F8F026C3B85958AB8F96E5344BCC3B4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number:          0863
Signing time:             Sun 19 May 2024 04:00:51 +0000
Manifest this update:     Sun 19 May 2024 04:00:51 +0000
Manifest next update:     Mon 20 May 2024 04:00:51 +0000
Files and hashes:         1: Cz_VZdeyonShFI8qEn_6G9MByhg.roa (hash: /ya8WO4O70K4WE/wDyMOo9qSHotLu3V4Zdy7toLvRRs=)
                          2: Mzy1w5n2hqTEQmRtGJiD6cltRGY.roa (hash: UMdHSdtudYBclN7puqWRGD2kkJNfiHTRa0kTB4vhCyU=)
                          3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: RbDBxvxmmNKW35PfKznHEE+SFFofYQahtHoquVBe5Ig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:6c:3b:85:95:8a:b8:f9:6e:53:44:bc:c3:b4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
        Validity
            Not Before: May 19 04:00:51 2024 GMT
            Not After : May 20 04:00:51 2024 GMT
        Subject: CN=b5742db0cb507d1187aa507c194372372f3b3ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:ae:13:ec:9c:95:59:5a:c5:36:90:2a:e8:
                    af:07:39:7a:28:7a:f1:a8:e9:aa:b1:bc:43:2a:1b:
                    75:52:e7:70:ce:93:5b:ce:f6:f1:e4:6b:98:a2:58:
                    fc:4a:f9:f2:77:71:e8:72:67:d7:eb:ca:64:2c:eb:
                    e4:23:f1:cd:6c:2c:1e:01:49:99:9d:8d:ed:00:07:
                    46:06:bc:63:7f:9b:9c:2a:d4:49:0c:1a:e5:a0:36:
                    44:a1:67:d8:7f:29:0a:1e:ee:87:26:7d:a6:60:2e:
                    b0:4f:7a:19:29:06:22:cb:45:33:b9:6b:6f:d7:5c:
                    eb:63:1e:ce:c3:ec:ba:fc:11:d4:10:b4:50:da:e2:
                    9b:66:c9:fd:58:a1:ca:aa:cc:99:35:48:6e:50:1c:
                    a8:ce:aa:74:3d:b6:07:f1:76:f2:a9:af:87:c5:6c:
                    7b:f0:b2:2a:f4:18:74:4c:d8:4f:ae:5d:08:df:f8:
                    10:d4:ab:f3:1e:75:5e:cc:e5:77:47:75:f4:19:f4:
                    e9:77:78:77:9b:e4:70:8d:21:9c:48:c0:da:ac:98:
                    4b:0b:57:8a:19:8d:a1:29:e4:fc:3a:27:2e:95:17:
                    54:3e:8f:f9:72:e0:68:31:bc:0a:d0:1c:b1:3e:87:
                    90:0a:ac:18:8d:a3:c6:75:96:04:c9:fb:bf:e6:79:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:2D:B0:CB:50:7D:11:87:AA:50:7C:19:43:72:37:2F:3B:3F:F5
            X509v3 Authority Key Identifier:
                keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:0f:dd:a2:04:c6:c5:0e:b7:93:86:a1:cb:e6:4b:c9:63:
         ff:f2:41:25:3b:4b:96:b6:e9:3f:8a:f4:2e:6b:7b:79:00:e0:
         dd:9c:f0:90:d0:7a:f7:14:68:c7:5c:2d:02:fe:af:92:b3:f5:
         6b:b3:44:1d:66:c9:11:21:95:ce:92:99:1e:d6:06:a7:09:52:
         3e:5a:26:46:af:3f:14:64:5d:60:2a:32:11:8d:13:78:0e:04:
         4e:76:c9:80:a9:b2:07:6a:b6:18:bc:cc:8d:cb:62:00:2c:8e:
         5e:3e:a0:5e:a9:c7:2e:14:46:a7:21:80:02:c3:e2:9b:d7:4f:
         b0:8c:88:32:4c:50:4b:6b:c6:31:ce:40:e0:21:2b:c9:db:ff:
         10:34:ba:ea:9d:b9:f5:e2:79:cc:08:13:29:ac:39:70:e4:44:
         f1:8d:a9:60:f8:8c:24:10:f7:dd:14:a4:c0:69:c2:c3:a1:9e:
         81:41:c7:7f:5f:c5:73:57:16:f2:93:50:d7:c6:ac:ba:8c:0c:
         3d:5a:22:4c:b3:3e:ba:c2:a9:b3:d6:b3:37:00:e5:5d:3d:77:
         4b:f2:c8:51:ee:1e:23:fc:ec:c8:95:31:05:48:54:fb:17:55:
         52:64:b7:15:b3:df:95:ec:1e:d4:d4:59:ef:a2:6d:e3:e2:bb:
         00:91:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:20:36 2024 by rpki-client on console-ams.rpki-client.org