Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File:                     z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier:          5MNHc6vhvq4N244uA74T7E5gxIS0wtMkoij/YsXLpiY=
Subject key identifier:   DE:87:C2:C5:AE:90:17:C8:62:C1:25:14:33:F8:76:8A:45:CE:AF:A4
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer:       /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial:       0190448CBBE88207B0D9F221D1EEA2F85AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number:          0A3E
Signing time:             Sun 23 Jun 2024 10:03:12 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:12 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:12 +0000
Files and hashes:         1: ljIx3BXhXHLSDJ2kAhLByTgpSxU.roa (hash: F6spuY7jeg3TU/oE9SUSGN3k+SCL1EV53GM8wVsBgHM=)
                          2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: YMo5bT0Qa6LcO+opOfvxb363p0PmJoUiQ+ukmqZ/6QQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:bb:e8:82:07:b0:d9:f2:21:d1:ee:a2:f8:5a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
        Validity
            Not Before: Jun 23 10:03:12 2024 GMT
            Not After : Jun 24 10:03:12 2024 GMT
        Subject: CN=de87c2c5ae9017c862c1251433f8768a45ceafa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:7e:d0:2b:54:b2:86:83:14:6d:6e:00:28:
                    4b:4f:2e:19:43:4f:77:76:af:5a:6a:28:0b:e2:80:
                    98:52:2d:f8:54:94:a7:d8:a2:ea:1a:5d:10:ad:5e:
                    e1:1d:42:31:2a:52:e1:8d:8a:fc:ac:22:60:2e:36:
                    9b:9f:cf:96:fd:80:6e:b4:9c:86:8c:78:17:00:9c:
                    cc:87:10:08:08:e9:a2:ed:e4:92:e5:dc:5d:0a:dd:
                    b6:67:90:f3:1d:56:c5:27:72:fe:18:8a:aa:cf:b4:
                    66:3c:c6:fc:84:26:e4:a5:72:92:f9:44:3a:f0:db:
                    14:25:42:61:9a:e6:24:3f:ec:ca:4a:08:9f:c0:8b:
                    27:48:fe:4c:3e:65:1b:df:0b:d1:92:57:f7:bb:f4:
                    ae:92:5d:39:fa:5b:7f:8e:b5:e0:c6:db:64:7f:6f:
                    1e:d4:12:52:eb:7e:bc:a0:24:ed:dd:87:29:8e:3a:
                    88:74:ae:54:57:15:ca:21:b7:6a:46:a9:8b:b2:3a:
                    99:d6:c1:d7:33:6d:ba:56:f3:cd:7d:1b:ce:35:f8:
                    a0:87:e9:bb:95:63:c8:10:dd:44:3d:b5:91:11:9f:
                    65:ac:ad:25:0d:53:14:cf:ac:4d:7d:1c:93:ce:24:
                    6a:16:28:c4:cf:b8:5a:0e:22:cf:10:87:3d:1e:10:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:C2:C5:AE:90:17:C8:62:C1:25:14:33:F8:76:8A:45:CE:AF:A4
            X509v3 Authority Key Identifier:
                keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:20:fc:49:8d:9f:6d:f1:a7:5a:d7:ee:9e:d5:a9:c7:48:
         5a:f0:b4:8d:c8:19:3f:dc:bd:c4:41:13:d6:7c:22:a5:eb:c5:
         cf:ad:9e:d6:4a:2d:9e:1f:e6:45:fd:04:b5:9e:b2:18:e4:51:
         e1:5e:96:a6:a7:8d:6d:a2:4f:11:1e:87:f6:82:32:ba:c7:9f:
         de:70:b4:13:97:66:28:ef:c3:1a:4a:db:6e:c1:39:78:16:c9:
         f1:25:20:8c:35:58:76:0f:12:7f:da:9f:bc:45:82:35:fc:d9:
         6f:89:46:b5:55:c3:c6:0c:5f:1b:ec:bd:e0:10:c1:63:09:aa:
         d5:0f:e0:7c:a8:5d:bb:3d:ac:e7:7c:05:fe:33:9a:e8:aa:40:
         ec:8b:be:b6:4d:5a:a2:74:c8:50:d2:15:6b:c0:b6:20:07:fe:
         19:2a:40:82:a7:28:82:86:ce:d8:0d:4b:e2:e4:c7:7b:25:27:
         7b:25:e8:08:f6:26:dd:c2:fd:7a:70:93:5e:59:28:09:52:37:
         f8:31:63:a5:43:b4:8d:e6:af:d5:e3:8e:04:c7:0e:e9:16:4f:
         29:18:65:f6:cd:86:85:3c:c7:a0:4e:69:1d:98:89:d4:7d:8c:
         3a:19:86:69:7d:06:33:f2:70:03:10:cc:26:df:95:8c:93:7c:
         4b:96:3f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 14:54:31 2024 by rpki-client on console-ams.rpki-client.org