Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File:                     Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier:          mxTmZe0Tq98/cU2U6nCweqAXUDxDYLYO+zCCBhAgBRI=
Subject key identifier:   36:EF:38:45:C4:C5:4E:96:F1:DD:D0:47:45:B0:6F:9A:AC:55:24:3F
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer:       /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial:       018F8749F09AD3E65EDE8802DF8F0181189E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number:          0A50
Signing time:             Fri 17 May 2024 16:02:00 +0000
Manifest this update:     Fri 17 May 2024 16:02:00 +0000
Manifest next update:     Sat 18 May 2024 16:02:00 +0000
Files and hashes:         1: B774ZrIkAb0bugX0JbZ0Xn7VrFw.roa (hash: xP5eh4MkYKle9hiLqgokxz2yWPyGtbp/k3PhrWM5LR8=)
                          2: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: dkX+0u51EWbn7iIp5Yjig+TFVBzcq5hkh1jdUGMPf+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f0:9a:d3:e6:5e:de:88:02:df:8f:01:81:18:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
        Validity
            Not Before: May 17 16:02:00 2024 GMT
            Not After : May 18 16:02:00 2024 GMT
        Subject: CN=36ef3845c4c54e96f1ddd04745b06f9aac55243f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:9b:17:a6:54:8c:7a:19:26:d4:6f:3b:1a:
                    54:ef:f3:e0:3a:e1:59:af:7b:1c:eb:10:a2:74:f4:
                    40:db:3a:84:3d:0b:89:7c:65:c3:b4:f8:a0:4b:2d:
                    21:29:6a:c6:96:3b:30:3a:0d:1d:17:e9:a2:5e:59:
                    2f:11:20:8e:4e:2f:31:8f:e8:e0:f4:f6:26:17:11:
                    cb:46:8f:e9:a7:d3:c3:47:74:1b:c4:4b:39:7e:12:
                    a1:2c:bd:73:3e:f1:27:f0:8a:65:bf:0c:c8:9d:8a:
                    d6:93:c5:84:3a:28:3f:c3:e0:2a:58:bb:a7:e1:72:
                    50:76:65:32:3a:93:0c:4f:c8:cf:4e:ab:3d:fe:96:
                    bf:4a:03:15:4a:cb:f3:4e:ab:43:59:f0:3a:24:ef:
                    02:83:01:8c:b6:60:f0:58:cb:76:5e:e8:15:6f:56:
                    45:fc:39:29:87:77:6f:6d:2c:a2:7e:ce:b6:f9:b6:
                    fc:2b:17:89:26:76:e7:6c:bd:93:9a:1f:30:00:2d:
                    4b:78:a4:fc:9c:7e:8d:52:ed:66:a5:e6:f8:80:0f:
                    e1:7d:19:09:e2:17:de:89:f8:67:20:ca:8c:b2:38:
                    1c:b0:7d:ab:58:dd:09:46:e1:84:de:6f:ed:ae:33:
                    ec:85:16:e8:45:a3:1c:f4:ae:85:e8:52:24:7a:0c:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EF:38:45:C4:C5:4E:96:F1:DD:D0:47:45:B0:6F:9A:AC:55:24:3F
            X509v3 Authority Key Identifier:
                keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:dc:92:5c:2a:ca:3c:7d:32:6e:1d:c9:08:a3:09:c0:86:
         8d:4e:e8:15:38:c6:e7:4f:16:5c:fc:c6:d2:dc:b1:05:3a:58:
         df:f6:69:ab:90:33:cb:b4:40:c5:d4:6b:e1:81:e8:c4:8d:84:
         20:22:bd:d0:36:d6:84:bb:e3:8c:8a:79:63:d2:fb:e7:e4:e4:
         9d:17:d0:9e:05:a8:4e:f4:33:d7:1b:8b:95:40:aa:98:c3:11:
         b8:be:ee:12:23:4e:74:f9:b2:36:47:c2:69:49:54:41:cd:3c:
         45:63:b4:7f:a3:ee:52:d9:c0:26:2c:2c:69:ad:2a:e7:14:14:
         e6:54:16:f6:01:32:76:9c:94:17:74:f1:3e:d4:41:8a:7d:16:
         d5:b6:3b:93:84:c7:ec:05:e9:30:22:34:d4:7c:84:45:b1:da:
         ab:d2:32:84:3f:47:53:8a:f8:8e:db:e2:fe:6f:64:9a:ae:45:
         a1:24:2a:72:f9:44:e4:1f:84:2e:ca:96:ba:42:cd:29:ce:d1:
         a4:91:7f:da:c7:c2:85:f2:9a:aa:7d:aa:6c:e4:4d:b3:a4:e2:
         2c:78:e1:e5:bb:1b:b0:57:c0:01:a9:ae:40:ed:bf:e5:16:8f:
         8b:ad:8c:2d:58:c9:e9:9e:bd:2b:c1:de:ce:07:06:af:6b:9e:
         a6:43:b7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:41 2024 by rpki-client on console-ams.rpki-client.org