Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          nc0OpCox5zipGu+3GP0m+ZapsJV8WdlIEXQYQ6eNUg8=
Subject key identifier:   FA:70:C0:06:16:64:D5:02:C4:AB:DA:A2:AC:06:CA:FD:7C:86:62:95
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       01901DED9BD82E27E494C161DA08AFC00407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          0ED6
Signing time:             Sat 15 Jun 2024 22:03:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:49 +0000
Files and hashes:         1: M2OH_WFXBTlLndzIp5QUruovXI4.roa (hash: 5zo/dRVK4oui7RPJW8l0zbgckgoUxjo1WMoirNDyfEs=)
                          2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: beTTy+7CIMLZrVYr95dz5a6WTE//EeGXBz5RpY4vb+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9b:d8:2e:27:e4:94:c1:61:da:08:af:c0:04:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: Jun 15 22:03:49 2024 GMT
            Not After : Jun 16 22:03:49 2024 GMT
        Subject: CN=fa70c0061664d502c4abdaa2ac06cafd7c866295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:30:d6:26:3a:7c:d3:9d:39:3b:8d:85:31:
                    9c:e0:77:3a:85:ca:8d:a1:9e:46:0a:fa:4c:57:ae:
                    3f:e7:67:14:cb:67:8f:e5:a2:b1:a3:a3:7d:59:a8:
                    0e:23:f2:48:13:64:63:66:7c:80:bc:02:d1:b2:3b:
                    2d:2c:a2:bc:78:51:56:a3:bb:f1:02:18:bd:d4:ee:
                    e1:0c:c3:ec:2e:c3:c9:04:42:06:06:44:54:14:b8:
                    40:92:94:75:bc:a9:df:5b:25:85:0c:c7:85:c7:9f:
                    10:98:3a:be:54:99:04:bb:bf:6c:f3:a3:ae:f5:ec:
                    ec:48:52:76:6b:5c:5b:9f:06:c3:40:a0:be:0a:cd:
                    d0:4e:c7:df:fd:1e:01:9f:a8:40:3f:ff:a7:84:f5:
                    ab:28:d8:b5:e0:03:51:1f:21:3c:8a:71:29:0c:8d:
                    27:5b:74:aa:4a:2a:a8:32:27:36:9b:38:fa:9e:fe:
                    f2:02:19:52:fb:7f:56:c9:35:5f:73:38:c2:a9:ca:
                    b5:b1:40:ce:0d:51:5b:96:1b:6e:f6:06:4b:a1:47:
                    24:2a:07:cf:7f:e7:7d:f4:41:c0:c2:8b:ca:5b:c6:
                    25:aa:db:df:09:40:8a:a6:d0:0f:af:6a:42:89:fd:
                    bb:9c:c5:09:d4:37:70:8c:21:f8:d3:e4:77:4e:5a:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:70:C0:06:16:64:D5:02:C4:AB:DA:A2:AC:06:CA:FD:7C:86:62:95
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f3:62:31:47:e5:99:22:eb:d1:ca:16:ce:c6:b5:27:82:37:
         52:35:cc:ef:5a:8e:ff:a6:97:b1:b9:51:d1:37:54:74:de:31:
         c9:56:d9:11:01:1f:96:f4:77:af:1d:67:ca:0f:75:1c:51:08:
         46:cc:68:c5:db:54:e9:b3:06:5d:5a:ce:b4:e6:d1:08:bb:40:
         8b:6f:7f:0b:71:81:64:6f:b7:53:f4:8f:25:05:a4:f7:f6:17:
         cc:a5:ba:4d:d3:af:7c:a0:71:37:59:1c:a5:26:8b:45:fe:c4:
         e5:5b:e3:66:b5:f1:09:1b:c6:40:29:7f:6f:0b:23:10:ec:7a:
         61:ce:da:4f:de:66:8a:44:6d:fa:06:a4:73:1a:04:a0:d6:7c:
         d7:13:93:e6:32:9a:00:a0:df:e0:8b:5c:a9:d4:f8:a4:cf:9a:
         85:10:f4:6f:05:1a:e8:1f:a6:26:ac:c5:4a:88:93:2a:13:74:
         95:80:1c:17:7c:b5:8e:d4:15:b5:a8:88:26:34:66:ba:28:75:
         5f:6c:81:ab:33:93:ea:29:d2:8a:09:3e:5f:61:93:ca:4e:f7:
         ee:7a:7f:4e:07:cd:64:f1:ee:4c:b5:c5:f7:b5:e4:e7:40:a9:
         42:69:46:84:bd:f5:05:fe:fd:05:7d:d7:de:ab:c4:18:e9:46:
         37:f8:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:49:27 2024 by rpki-client on console-ams.rpki-client.org