Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File:                     ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier:          29o/nlnNx8FArw6/I9l7MdsOxmNdjsiDvE6fCAWDcgQ=
Subject key identifier:   3A:48:BB:3E:46:09:2E:9D:D1:02:2C:8A:C3:F2:E7:70:C8:04:A7:E3
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer:       /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial:       019040AED62B76AB1A3E7F641194CEE56847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number:          0AA1
Signing time:             Sat 22 Jun 2024 16:01:58 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:58 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:58 +0000
Files and hashes:         1: OEbGjeOs2HtCa9NSMDgN8wq0UIw.roa (hash: GbxcUo0xE2YhZN46cyfMgtG7LhHnh1Am7HsaUOUrumg=)
                          2: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: KE4eXLR5Ugrt2o+H5ASoippSFSG3YQMxaiU5S2wCiGw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:d6:2b:76:ab:1a:3e:7f:64:11:94:ce:e5:68:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
        Validity
            Not Before: Jun 22 16:01:58 2024 GMT
            Not After : Jun 23 16:01:58 2024 GMT
        Subject: CN=3a48bb3e46092e9dd1022c8ac3f2e770c804a7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:bd:7a:76:d7:51:e3:09:02:7f:78:94:b3:
                    27:76:1f:91:f8:a6:98:02:d1:4b:30:03:95:bd:19:
                    5a:8e:4e:80:49:d4:1b:1c:09:91:8d:56:64:00:df:
                    be:ad:1c:13:a2:d4:27:17:22:7d:ba:3b:22:c7:a3:
                    a9:10:e7:96:d0:85:d9:b0:7a:cb:5c:ca:fe:c3:e0:
                    81:23:bb:7e:6c:99:71:d8:32:76:d0:e1:9d:33:57:
                    62:ef:f1:73:4f:62:2f:35:fb:9c:14:47:39:26:be:
                    af:ee:3d:db:52:a6:50:6c:6c:f0:f2:de:16:d3:56:
                    67:e5:4b:9d:3e:62:86:6d:c5:4f:46:d9:75:5f:46:
                    21:c2:cb:73:1f:78:f0:30:60:9c:3d:12:b3:04:5a:
                    d9:f6:ee:d4:23:47:b9:76:20:7c:c7:52:ed:93:4e:
                    7d:70:d1:e7:8c:b5:5d:af:b5:ac:10:af:43:4c:1d:
                    c8:7f:d6:4c:62:05:80:68:c1:b6:51:84:a8:be:03:
                    18:7d:2c:bb:bd:07:a8:c9:c8:8c:4f:59:e5:db:59:
                    37:5d:c9:e3:c0:e3:31:26:24:55:95:2c:54:55:a4:
                    3d:17:f7:98:86:c3:ca:86:5f:cc:ad:a1:3e:d1:c8:
                    2a:2e:b4:a3:a4:6a:6c:30:32:ba:08:a3:14:71:c5:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:BB:3E:46:09:2E:9D:D1:02:2C:8A:C3:F2:E7:70:C8:04:A7:E3
            X509v3 Authority Key Identifier:
                keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fb:2a:95:89:c2:d8:aa:39:45:5a:0e:80:1b:37:85:2a:d0:
         4b:e9:3c:4b:9d:38:b5:85:4e:0b:5f:ff:f3:9d:8a:9f:24:6c:
         66:2e:86:2f:f3:f8:aa:b0:6a:13:59:35:84:21:2f:54:78:f2:
         90:a6:77:d9:e1:51:8a:df:18:4a:ed:08:b4:30:de:39:d6:71:
         89:48:1c:5a:4e:55:dc:c7:ab:b0:bd:0c:21:0e:48:f1:95:8c:
         c3:00:73:6c:6a:04:99:81:8d:ac:44:eb:dc:94:60:e6:cc:d9:
         cc:9e:2c:94:99:0f:88:3c:f3:8a:dc:25:0b:2c:83:44:e8:43:
         8e:92:fa:f3:73:71:12:17:ef:85:b8:ad:95:fb:59:82:ed:0b:
         bb:26:a7:19:dc:87:6a:7b:9a:43:19:11:77:dc:71:e1:85:6f:
         68:e8:94:b5:b6:2c:3a:d7:e1:17:af:73:3e:d6:17:7a:43:bb:
         e2:df:46:a1:63:54:32:62:9e:29:1a:82:a6:b0:dd:79:31:45:
         71:8e:33:2d:f6:4e:0c:60:6a:20:92:1b:7a:e3:cd:7f:78:3d:
         d8:e6:74:52:77:45:10:9d:62:24:cf:8b:aa:ba:44:f4:31:67:
         bd:5c:09:ce:cb:08:59:5c:84:6a:ba:e7:5c:44:14:1f:59:3b:
         6c:69:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:20:58 2024 by rpki-client on console-ams.rpki-client.org