Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File:                     ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier:          5MwrxLS3Q3zeaSQ6A3A8hxoKnIlACaM8oscRmeS/05k=
Subject key identifier:   F5:EC:7E:11:B5:C0:B7:AD:06:A2:40:95:3A:54:0D:88:DF:91:56:9B
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer:       /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial:       019040AE4518010273CEE41D009AB19427D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number:          0ED7
Signing time:             Sat 22 Jun 2024 16:01:21 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:21 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:21 +0000
Files and hashes:         1: V-OFJbRGM_9v0T7n89lMojJh5mI.roa (hash: jwRHcPJk85x04fXyvZR5aPN0Lfg/J64JmtsfKSc/bvg=)
                          2: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: dqaTCRcVZ+brdP9OYK78K/C3cXqkIWO3R4oNVClXPbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:45:18:01:02:73:ce:e4:1d:00:9a:b1:94:27:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
        Validity
            Not Before: Jun 22 16:01:21 2024 GMT
            Not After : Jun 23 16:01:21 2024 GMT
        Subject: CN=f5ec7e11b5c0b7ad06a240953a540d88df91569b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:77:63:c0:b4:19:72:8e:f9:fe:32:f5:10:
                    53:8f:cb:13:10:ae:ba:d6:b2:cd:79:d5:6a:7c:f1:
                    d5:f9:2e:2e:cf:12:a0:f7:d3:55:8c:bc:2a:bd:44:
                    2d:d1:df:1a:f3:44:c9:50:33:64:ba:11:44:96:39:
                    f9:b2:87:31:f9:71:8d:8f:70:bd:6e:75:72:d2:95:
                    60:01:5b:9d:21:a1:11:22:ed:11:91:4b:76:4d:5f:
                    75:a9:dc:f6:4e:a7:4d:f6:97:5d:65:d8:fb:c7:dd:
                    6e:f3:4e:f3:93:1e:73:01:0b:b9:d3:83:03:b9:c2:
                    f2:9b:9d:75:9b:f1:8f:a5:18:2e:f4:7e:39:dc:c7:
                    1f:32:a7:b3:9b:fb:72:cc:b1:79:47:07:bf:c3:b9:
                    2e:06:12:d5:74:ea:11:16:dc:19:ef:3a:d3:f9:83:
                    7e:48:a2:bf:27:66:2d:13:8a:fa:76:1c:3e:9a:c5:
                    6d:7c:2c:15:c8:7b:16:74:28:a4:88:56:3c:ab:f3:
                    44:1d:19:c4:24:84:68:f8:6d:5b:4e:5b:f6:21:e3:
                    28:53:67:4d:e5:05:e6:44:72:5b:ab:85:99:3c:77:
                    6f:14:42:76:52:21:af:29:c7:4e:24:c1:c1:c3:29:
                    1b:32:b1:32:04:1c:7b:b1:e3:f3:ec:4f:c5:26:85:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EC:7E:11:B5:C0:B7:AD:06:A2:40:95:3A:54:0D:88:DF:91:56:9B
            X509v3 Authority Key Identifier:
                keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:0a:a3:18:5d:dd:9a:97:1f:8d:4b:ca:9a:2e:41:3b:c4:
         e2:5e:a7:a0:35:08:ba:58:cd:0a:ae:65:82:b0:1c:9a:1f:6c:
         99:1f:74:d9:1f:91:b8:ee:5a:8a:6b:a8:83:ad:5b:ce:5c:da:
         6b:f6:08:e4:5c:c8:95:c6:50:e9:69:32:11:41:ae:0f:e9:ba:
         b6:d7:fc:a5:e4:64:62:38:1d:02:3c:5f:a1:2c:81:00:4f:e6:
         b3:f0:c4:40:26:80:94:9b:68:d2:be:4a:3c:9a:f0:c7:01:20:
         0c:f4:41:ad:a8:06:a5:f9:ba:66:33:3c:75:0c:e7:46:ad:ec:
         4a:19:5a:ac:80:0a:a0:75:6b:98:c4:57:8f:04:19:3b:b9:81:
         61:4f:31:f6:58:e6:2f:79:c6:cd:4f:aa:b1:02:34:93:8a:e2:
         6f:12:48:9b:8c:fd:99:f8:5b:4b:ba:e2:59:2d:46:b1:57:b6:
         07:2e:05:44:b4:9c:a4:52:04:61:49:b5:21:51:01:f1:8c:b5:
         40:d6:ed:63:59:04:44:c5:d0:aa:19:bb:14:aa:05:76:09:02:
         ba:b0:a9:e8:54:6e:6b:9f:64:df:77:bd:71:dd:4b:24:4d:98:
         03:77:4e:0c:a6:6a:c4:65:1b:6a:f3:47:7d:a0:0e:e2:c5:7d:
         51:2a:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:25:08 2024 by rpki-client on console-ams.rpki-client.org