Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File:                     ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier:          JKJcawMeSG4YVIseCPeXm9g/Y088fCazmmhOJ9CZ+Ys=
Subject key identifier:   67:FD:4F:19:A6:59:6B:53:60:C8:16:D5:5A:AE:A5:63:96:8E:39:EA
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer:       /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial:       01901DB3CE41B3119BC19D1DB850AF2EFE62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number:          0148
Signing time:             Sat 15 Jun 2024 21:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:41 +0000
Files and hashes:         1: R-s3SqkIcxrQAlUsiSw5hg8lK_M.roa (hash: XJ6263TEuQHs8Xl5XS5jB7PJ/ROzAkqReOIG8HHjpLE=)
                          2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: XFW3moOZbCtFbxk+FFvzJquA4EleQWvAqODiqLkbc1o=)
                          3: kZU3sAua_sZOZ0V6jaDCYwkEziM.roa (hash: SiAE/xuxMvRyD3q8Wy2Gp2jem4G7GEai49Jn6/PM+Ek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:ce:41:b3:11:9b:c1:9d:1d:b8:50:af:2e:fe:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
        Validity
            Not Before: Jun 15 21:00:41 2024 GMT
            Not After : Jun 16 21:00:41 2024 GMT
        Subject: CN=67fd4f19a6596b5360c816d55aaea563968e39ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:e0:0c:fd:0b:a7:46:88:f8:96:38:16:8a:
                    2e:cc:d8:17:23:c6:26:0f:f4:3a:68:8d:84:f7:6b:
                    41:d4:b2:56:13:2c:14:6f:83:76:b7:37:d3:62:8f:
                    eb:fd:bd:cd:29:33:d7:79:cc:f6:86:a0:bc:4b:2a:
                    08:08:cf:83:d1:88:a5:4a:c8:db:ad:3f:28:2b:c9:
                    35:91:32:84:80:e1:8b:fd:bb:ff:42:24:0d:1e:94:
                    01:f6:42:c7:ce:aa:35:d2:26:66:ce:c1:1d:85:a7:
                    5b:a5:6c:53:53:23:23:93:b5:ec:16:69:e5:06:44:
                    10:4d:48:b4:9f:e6:73:de:9e:52:f5:df:89:9f:aa:
                    80:1c:85:f1:3c:6c:7a:4a:2d:e5:7c:22:90:87:e3:
                    15:dc:9c:0f:16:30:ac:13:ff:a9:c5:4f:15:48:31:
                    3f:e8:8d:dd:b1:d1:53:5b:85:43:44:f4:fe:b2:d5:
                    41:c6:53:04:8c:90:16:0a:15:78:48:2b:0d:7d:1b:
                    de:3e:a7:cb:0b:f4:a8:9a:6d:a7:6e:2e:a6:8d:30:
                    9e:a3:13:bb:96:d9:e2:96:e5:aa:04:a7:c9:b2:cd:
                    a0:60:9e:63:2f:1f:a8:ce:d8:e1:b3:f5:bd:d3:32:
                    e2:ea:06:26:eb:bb:df:bd:f3:f1:38:90:61:8a:05:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:4F:19:A6:59:6B:53:60:C8:16:D5:5A:AE:A5:63:96:8E:39:EA
            X509v3 Authority Key Identifier:
                keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a0:c6:2f:17:f8:8f:46:6a:ba:d2:40:5b:3a:b2:4a:1e:fe:
         ff:41:61:6a:7d:b8:52:fd:43:dd:89:10:5f:c3:fb:b0:90:94:
         8e:63:0d:2f:7e:4c:cf:bc:fd:ac:88:c4:c1:01:67:f4:a5:ce:
         19:3a:f0:75:77:86:44:2e:2b:c6:20:fe:19:6c:e2:4b:54:fc:
         43:95:bd:d7:ec:89:c2:64:1e:e1:05:f6:71:2e:48:e5:8a:12:
         0d:87:54:7b:e2:c2:93:64:e4:81:7f:bb:cc:dc:e4:7a:16:df:
         76:9a:10:84:f3:cd:41:1b:a4:78:f4:4b:fa:c2:41:7c:7b:7c:
         71:d2:19:3f:d8:8d:0b:c1:2b:48:a5:42:2f:66:b0:ed:91:5c:
         c8:36:e4:1d:28:1c:6b:a4:43:10:b7:04:c6:43:c5:84:a7:cb:
         95:5e:e1:59:91:68:ea:e1:81:dd:0f:86:d8:b0:d2:28:cd:af:
         0e:3c:d5:f1:64:79:0e:79:76:54:65:31:dc:5b:96:b7:2e:22:
         c3:83:83:36:6f:02:a6:cd:4a:84:6b:87:b5:0f:9b:b2:8a:78:
         5c:d9:e8:aa:e5:09:aa:b1:3f:34:8f:76:54:6a:a6:cd:c3:2f:
         79:76:a5:56:80:3c:95:09:c0:5f:1a:b3:72:e3:48:63:62:19:
         42:fd:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:35:23 2024 by rpki-client on console-fra.rpki-client.org