Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File:                     ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier:          8lIWnhni/M0SEntajSGFUh15wVC+J+hxjc++HOLp0LM=
Subject key identifier:   67:A5:33:5E:B4:35:68:D7:9D:B8:FA:40:E6:F8:53:00:F0:D8:63:93
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer:       /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial:       01901EC6AF0C8EE84E4B592D28D7B204A58F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number:          0CB5
Signing time:             Sun 16 Jun 2024 02:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:55 +0000
Files and hashes:         1: 5iAv7QWA5NMfwHWi5y1iJjBfwUY.roa (hash: 0L7zcIsQzAQExt8Ppd8j9ZjtXt0OdZ16Wz2ipROlkqE=)
                          2: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: /VAU+/V2jQ4G5xVBjVV9plxlenMi/HTXAXICNDyrSkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:af:0c:8e:e8:4e:4b:59:2d:28:d7:b2:04:a5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
        Validity
            Not Before: Jun 16 02:00:55 2024 GMT
            Not After : Jun 17 02:00:55 2024 GMT
        Subject: CN=67a5335eb43568d79db8fa40e6f85300f0d86393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:fc:e2:51:71:90:30:47:c9:c9:99:41:2d:
                    a1:25:04:f8:e5:ac:51:ef:1f:ce:76:48:bf:6d:06:
                    29:bf:c7:25:58:9e:ac:17:f0:be:dc:ba:b6:af:36:
                    9f:08:be:e3:29:d3:f1:6f:58:37:3e:31:f7:d3:d6:
                    47:d7:d8:c0:e7:b4:4f:71:d0:bc:67:5d:17:ec:de:
                    35:f1:97:90:2a:99:5d:84:12:3b:ee:5c:72:de:c5:
                    fe:6c:91:b9:b0:1d:c7:c8:3e:b4:09:9f:37:93:4a:
                    f9:c4:ba:0b:ed:c3:e2:1a:80:b4:9c:cc:45:d6:62:
                    22:2d:27:69:66:70:8c:c0:52:60:9a:90:64:0c:ae:
                    e1:3b:f1:d8:f7:e8:02:24:4f:8a:13:83:ea:fe:6e:
                    64:5c:ab:0d:de:35:b0:97:04:2f:0d:41:16:86:04:
                    c2:25:d8:f0:55:5e:a7:20:ff:9b:e4:2c:92:88:04:
                    09:1c:6e:5a:ee:6b:51:4e:70:cb:ce:16:a0:b4:e2:
                    d9:b0:4b:33:94:8b:6c:21:bc:a2:09:b0:d9:37:59:
                    96:53:cd:50:a1:2e:f5:2b:9b:c2:64:08:fc:12:f9:
                    ee:ae:c5:b1:97:c8:f4:d8:7c:32:e6:e2:34:63:c8:
                    01:d8:f7:90:36:f4:72:00:f7:89:00:47:88:00:2c:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A5:33:5E:B4:35:68:D7:9D:B8:FA:40:E6:F8:53:00:F0:D8:63:93
            X509v3 Authority Key Identifier:
                keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:3c:ba:65:58:c1:33:ab:0d:6a:45:98:89:0b:1a:3d:94:
         20:7b:e7:b3:37:ca:96:14:d0:06:94:97:41:3a:c6:0e:90:23:
         3c:89:4f:34:ab:95:20:02:c4:9c:c3:ad:fd:ff:4f:fe:6d:04:
         5c:28:6f:ec:e5:84:ba:e6:cc:a8:ca:74:e6:21:e3:93:4c:34:
         11:d1:4d:2c:6c:56:41:f6:00:e9:34:d7:85:7b:8d:a4:32:89:
         bd:57:50:aa:e9:2b:11:06:65:3c:46:11:29:2a:c6:8d:40:8a:
         a1:08:69:4b:84:e9:30:9f:bc:dd:c3:29:7c:1d:71:da:d0:b3:
         82:81:5a:ca:b8:bd:23:9b:16:7f:fd:54:60:18:1d:a7:20:af:
         9c:d5:23:70:09:1c:31:18:80:98:1b:ac:be:89:3d:1f:32:f6:
         ba:bf:2a:55:bb:b1:17:b1:d8:9d:69:32:7e:10:29:33:65:88:
         a9:2a:9f:b9:9d:b2:bf:a2:4c:f8:7c:28:14:08:32:05:3f:85:
         94:5b:eb:46:bc:7d:08:b1:0f:74:52:74:43:8d:b8:8b:08:b2:
         ed:35:fc:d6:65:2b:0d:e9:ba:2e:3f:81:a5:93:d2:9d:87:e6:
         2d:9a:73:01:e7:a1:8a:0b:34:9c:3e:26:19:d7:5f:15:c0:12:
         01:77:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:07 2024 by rpki-client on console-fra.rpki-client.org