Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
File:                     ZGhabXP_WifhvB-WF9-1UIutKTs.mft (raw, json)
Hash identifier:          YTC7O+Wa3dA6iHUYN9CtQtkknaiVlHHZgYwFNr2J2mA=
Subject key identifier:   0F:AB:EC:FA:AF:58:27:1E:30:58:13:C3:F1:1C:B7:76:A9:C4:92:3F
Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
Certificate issuer:       /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Certificate serial:       0190448A66AB978DE859823084928373983F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
Manifest number:          0890
Signing time:             Sun 23 Jun 2024 10:00:39 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:39 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:39 +0000
Files and hashes:         1: ZGhabXP_WifhvB-WF9-1UIutKTs.crl (hash: lkzsSkAPPTLhUztFxYsgRUrnVfUxkxIeVT0QYZg6gFs=)
                          2: prIJmPixW-aIf10UCscCLDu_QkE.roa (hash: nSPSs+A+gSxYutfpZGW9r6U4HQydHU62MUmBV1OE3fs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:66:ab:97:8d:e8:59:82:30:84:92:83:73:98:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
        Validity
            Not Before: Jun 23 10:00:39 2024 GMT
            Not After : Jun 24 10:00:39 2024 GMT
        Subject: CN=0fabecfaaf58271e305813c3f11cb776a9c4923f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:5c:f7:24:67:e4:74:97:3e:3a:87:c1:ed:
                    3b:33:bb:90:99:fd:7b:44:86:03:00:af:12:91:c9:
                    b0:57:b4:4a:ec:b4:dd:be:e7:ee:76:78:f2:8d:b0:
                    c5:55:ed:bc:43:fc:1f:df:38:0e:b0:cc:ef:33:19:
                    4a:2e:11:8c:13:51:c3:ed:cf:01:e9:8c:7d:34:6a:
                    da:90:ae:e9:33:9c:b3:d8:19:2b:a5:a6:90:b2:8d:
                    af:83:7e:29:be:fe:a7:7c:d1:83:73:6b:b9:fc:8a:
                    42:1a:cf:cd:9a:97:db:f9:93:7d:5b:3d:b9:fa:61:
                    8d:59:0e:69:71:52:16:c9:25:dd:f7:29:5d:e2:7b:
                    0b:b7:09:20:d7:23:d6:9d:b1:47:71:3a:1f:2f:4c:
                    2a:13:03:0f:ac:79:99:b1:42:f3:34:90:e9:1a:e2:
                    e8:f2:f2:a0:f2:73:3a:56:04:7a:d4:e5:4f:cf:14:
                    7b:d3:06:db:af:82:db:85:61:27:f8:16:fd:94:0a:
                    05:40:14:ed:8f:b5:94:47:9f:28:3f:d0:08:11:6d:
                    1e:e0:d3:21:04:f9:48:46:17:28:45:7f:1e:3f:99:
                    bc:90:55:0a:29:5c:a5:23:99:0b:a6:03:95:e2:60:
                    6a:b6:50:c5:e2:42:4b:37:10:bb:dc:c8:33:12:42:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:EC:FA:AF:58:27:1E:30:58:13:C3:F1:1C:B7:76:A9:C4:92:3F
            X509v3 Authority Key Identifier:
                keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:d5:fc:c4:6b:31:8f:74:5f:35:c9:51:a7:35:38:46:60:
         22:62:bd:24:42:1e:b9:35:72:6d:b1:32:c0:de:c6:cd:a3:96:
         32:5f:30:b9:e9:6a:09:2a:b0:83:91:48:c6:16:cd:d7:3a:65:
         6a:dc:b2:4d:fb:d8:d9:27:b6:a5:76:1e:b0:eb:96:86:5c:35:
         c0:c8:92:6c:14:9d:60:83:25:6b:98:a9:da:a7:9b:e8:2f:6f:
         d1:8e:2f:6d:9f:64:76:86:44:82:34:ac:09:ef:d5:74:3f:1d:
         63:63:e2:0a:a8:bd:10:33:5b:d3:92:d0:c2:5d:87:ba:08:76:
         b3:9c:69:43:3f:37:38:4f:5c:de:82:18:95:4e:db:f0:fa:71:
         b6:7a:41:a7:c6:37:cd:25:95:66:05:cd:b7:ca:2c:35:8c:a8:
         77:6c:fd:79:30:86:f3:ee:f0:8d:ee:ee:11:6f:f5:f6:2b:2a:
         2a:e1:31:3c:36:80:1e:a3:3f:3f:9a:4a:64:f5:12:7d:43:f2:
         80:f8:8b:ad:41:a3:2d:13:98:37:c1:4f:ec:d0:71:37:7a:f5:
         77:2f:13:36:e3:71:c5:21:f7:f2:58:6a:4b:4b:c4:cb:45:9d:
         b5:1e:47:4d:e4:ef:63:12:93:66:89:d4:d1:0e:03:4d:b4:62:
         29:36:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:48:57 2024 by rpki-client on console-ams.rpki-client.org