Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
File:                     ZGhabXP_WifhvB-WF9-1UIutKTs.mft (raw, json)
Hash identifier:          3Xxw3ocHYv0FVFteWku4WFfZaFhMIUq4kxS0tSxo9sk=
Subject key identifier:   25:AA:B0:FA:D8:4C:BE:A1:33:D5:B8:64:23:F5:D8:E9:BB:6F:EA:FE
Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
Certificate issuer:       /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Certificate serial:       01901DEBB4EFDB4F7096238FEEB7139E907C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
Manifest number:          087C
Signing time:             Sat 15 Jun 2024 22:01:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:44 +0000
Files and hashes:         1: ZGhabXP_WifhvB-WF9-1UIutKTs.crl (hash: vrT4Ba+pqNw2Dc0zXKS51C9V/rdAsu11xRfBDoPSowc=)
                          2: prIJmPixW-aIf10UCscCLDu_QkE.roa (hash: nSPSs+A+gSxYutfpZGW9r6U4HQydHU62MUmBV1OE3fs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:b4:ef:db:4f:70:96:23:8f:ee:b7:13:9e:90:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
        Validity
            Not Before: Jun 15 22:01:44 2024 GMT
            Not After : Jun 16 22:01:44 2024 GMT
        Subject: CN=25aab0fad84cbea133d5b86423f5d8e9bb6feafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:b6:64:27:a1:29:f2:f4:0c:c4:6d:09:41:
                    28:d9:be:ff:79:11:15:06:6c:93:d4:46:b5:82:ce:
                    63:48:3d:9e:58:be:73:01:a4:93:68:e9:8e:ab:d9:
                    a4:dc:6a:68:23:67:60:cb:ff:ca:08:cd:51:0b:89:
                    e9:84:70:b7:4d:05:8d:98:c5:0f:a1:fc:5f:c4:f9:
                    46:0e:4f:32:16:db:0b:ea:da:f0:e6:44:d4:07:98:
                    12:0b:9c:8f:a6:e9:80:f1:e8:c6:3f:34:34:3a:df:
                    18:e7:b3:25:33:13:7a:af:22:93:48:71:63:2e:4b:
                    ab:3c:a9:0b:9f:de:16:5b:ab:7d:32:8d:f2:7e:aa:
                    1d:b5:b3:8c:ec:03:84:24:71:08:29:e2:c7:89:b0:
                    0a:87:d2:05:20:9f:df:a6:4d:16:d1:0a:7e:2e:da:
                    75:1b:36:e6:e3:bd:0c:95:76:80:16:08:f8:5a:91:
                    3b:2b:56:47:9c:b9:7d:b2:14:65:a2:6c:f2:a8:bc:
                    2c:64:41:c5:36:18:70:0d:10:b2:3a:77:21:32:3b:
                    39:8f:be:f1:05:d5:e2:01:9f:36:45:9c:6d:01:d4:
                    ed:d1:29:cb:68:f0:74:4a:d3:da:41:b6:cc:74:00:
                    47:b4:29:f5:b1:53:32:59:57:85:96:55:28:72:ec:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AA:B0:FA:D8:4C:BE:A1:33:D5:B8:64:23:F5:D8:E9:BB:6F:EA:FE
            X509v3 Authority Key Identifier:
                keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7d:05:0a:79:6a:07:01:49:56:98:aa:0a:0a:56:8e:62:a4:
         5c:52:d8:94:76:cd:fb:a7:c4:fb:7d:72:74:63:94:1e:d2:a1:
         89:be:cc:e7:30:88:36:a1:94:89:e0:43:75:65:11:62:16:de:
         82:e1:a6:6c:79:d3:86:a2:8b:2e:c3:02:78:c0:32:ab:f2:9c:
         9d:91:31:02:97:43:74:40:aa:b3:db:22:c3:b9:cc:5e:d9:35:
         76:97:4d:da:41:e6:ad:ae:8f:1f:11:5f:40:4c:af:05:60:29:
         c2:6e:a8:33:a1:18:11:06:c5:de:4e:5e:3d:4c:b7:47:6e:85:
         b5:8e:72:e1:fc:42:9a:a0:fe:f8:aa:a8:37:e5:79:46:0a:e5:
         be:2e:ef:cf:36:0f:17:29:3d:de:ec:f2:c3:54:36:44:f5:92:
         20:2c:eb:0e:53:9a:ce:ca:d6:19:14:7d:44:ee:57:06:d9:53:
         b3:b7:40:17:82:1a:5e:f6:ac:eb:6c:29:a4:aa:be:e0:d3:85:
         0f:1d:5b:71:64:5e:fc:3b:5b:45:3d:0a:90:26:52:a5:4e:87:
         61:77:43:e1:8b:a2:a6:9e:6b:0e:96:0a:a9:1e:58:3f:f0:a2:
         92:f6:0a:fd:76:c7:7c:fb:5a:bc:81:ee:90:1b:ef:d7:3b:25:
         46:14:6d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:59:30 2024 by rpki-client on console-ams.rpki-client.org