Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft
File:                     Zn55k2TUFPZt82MTfHmr9hI5600.mft (raw, json)
Hash identifier:          xuBAcogsz7iOiFhFkFDs+2EWaztlqD89pMwsSfSWBPw=
Subject key identifier:   FE:AB:24:83:0E:77:6C:A4:E3:46:A0:76:8B:2B:96:0E:13:7F:D7:23
Authority key identifier: 66:7E:79:93:64:D4:14:F6:6D:F3:63:13:7C:79:AB:F6:12:39:EB:4D
Certificate issuer:       /CN=667e799364d414f66df363137c79abf61239eb4d
Certificate serial:       01901F3484449CE2FE975238773E4FEAAE59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zn55k2TUFPZt82MTfHmr9hI5600.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 04:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:53 +0000
Files and hashes:         1: 1T3yVq56VqUsCRNgAc26gHjStFE.roa (hash: PVzW9sgsFXJJvdI8hRhBdC+MSpLl+w3WD1Q650hjph8=)
                          2: Zn55k2TUFPZt82MTfHmr9hI5600.crl (hash: /yWjgDCBs7+cEo4Xa98fCmmqCIj5aPZaiufq1qHCQdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zn55k2TUFPZt82MTfHmr9hI5600.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:84:44:9c:e2:fe:97:52:38:77:3e:4f:ea:ae:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667e799364d414f66df363137c79abf61239eb4d
        Validity
            Not Before: Jun 16 04:00:53 2024 GMT
            Not After : Jun 17 04:00:53 2024 GMT
        Subject: CN=feab24830e776ca4e346a0768b2b960e137fd723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:99:8f:69:bc:fb:36:f4:08:ff:45:68:df:
                    2c:56:b1:3c:90:fd:29:ef:56:89:f2:ea:75:86:7b:
                    4b:1d:0d:e3:65:c1:88:81:34:78:2d:2e:66:06:69:
                    5d:9e:f9:81:e7:46:17:f3:83:0c:80:f4:65:6a:f4:
                    72:86:fa:00:b0:4c:15:25:d0:43:db:b0:90:b3:ad:
                    ed:5e:c2:2c:ce:8c:be:73:d7:dd:39:6d:d2:be:8d:
                    05:0c:be:90:f2:27:6e:fc:52:91:70:f8:d2:77:b6:
                    09:a2:7d:0e:b0:c4:76:9f:bb:e8:c9:0d:00:24:b2:
                    08:d7:26:22:56:e6:db:f9:a2:6b:07:7e:ba:00:d9:
                    42:13:e8:3f:3c:f0:ba:44:45:d3:52:5c:3e:7b:c2:
                    e0:60:c7:70:9d:50:16:2e:cf:23:0d:ed:d3:a5:9f:
                    f1:39:97:85:2a:b7:d8:3b:8c:69:69:80:78:c0:da:
                    48:01:8c:43:1c:4a:d7:ef:98:85:9b:70:99:95:5b:
                    4f:31:f7:6f:ad:a9:9d:a2:f9:1a:85:4f:fc:48:a0:
                    a3:06:ab:4a:88:72:bc:39:76:80:6c:31:0f:76:97:
                    a0:bd:ff:ba:92:85:ed:8f:5e:33:6d:dc:18:0c:f2:
                    77:40:d5:15:92:79:94:4d:7b:14:07:f8:7f:89:15:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AB:24:83:0E:77:6C:A4:E3:46:A0:76:8B:2B:96:0E:13:7F:D7:23
            X509v3 Authority Key Identifier:
                keyid:66:7E:79:93:64:D4:14:F6:6D:F3:63:13:7C:79:AB:F6:12:39:EB:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn55k2TUFPZt82MTfHmr9hI5600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:30:41:1a:81:a0:9f:18:72:06:0e:c2:ae:f6:a1:dd:2e:1c:
         d8:65:be:06:5d:bd:32:bb:44:57:7d:4e:e5:a8:57:b7:1e:0c:
         4d:50:73:04:be:2b:45:25:53:b9:d7:31:34:f4:28:33:98:0f:
         a6:c2:bf:e7:48:2b:d7:5b:91:a2:ef:c8:dd:bf:95:4b:1f:27:
         3b:70:f2:b0:43:16:12:78:a0:3f:74:07:0f:0b:af:e4:e7:6c:
         62:f0:9e:0d:be:7f:37:42:98:64:e5:d4:b6:c3:0f:30:c6:51:
         66:fb:d8:e2:e1:cc:70:c6:cf:3b:2e:f3:72:b8:fc:23:1f:1a:
         77:f2:31:a3:12:8c:19:cd:57:37:23:1a:04:94:87:e0:39:4e:
         2e:62:18:2e:95:ca:32:25:0b:fb:b5:8e:70:40:8d:46:fc:f2:
         bc:29:47:0b:53:22:36:de:76:a8:8f:11:36:06:88:ad:7a:9b:
         75:91:ca:16:15:f4:32:28:97:33:b0:93:ef:ef:f8:a5:14:13:
         19:68:41:58:95:f9:99:29:4b:ec:a8:30:dc:ab:31:b3:39:25:
         28:60:b9:30:aa:8a:22:64:c8:20:1c:a3:57:5d:89:63:98:95:
         88:68:88:75:d8:2f:2c:11:24:0e:37:c9:e1:f4:fd:13:df:9e:
         a4:21:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:01 2024 by rpki-client on console-fra.rpki-client.org