Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File:                     ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier:          28LesXHGpzkEkACC9Hg4i5hQvAmHz9aTtznFJsi2Biw=
Subject key identifier:   F4:CF:9A:2F:01:23:D9:F2:10:5C:09:9C:B1:0E:33:4F:85:6F:0D:76
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer:       /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial:       018F893699075B3357EE8927244907234576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 01:00:07 +0000
Manifest this update:     Sat 18 May 2024 01:00:07 +0000
Manifest next update:     Sun 19 May 2024 01:00:07 +0000
Files and hashes:         1: 4LRbTZWI0P9zgp7wxjUYjiyB1Ns.roa (hash: sEZnYP3/OYwRSEfPjcOuGA0VxIWZ/7zgDvzWnlQfeSg=)
                          2: CGfQwaaxlW85b3YqPKM6Z-0E9S4.roa (hash: 0OTUmcvMxxAtafWmL068MbaVl22/5a+5lQwS1qmps1g=)
                          3: FWg8FBfYunsoVJDBQMIdqdUl6ZY.roa (hash: Se2GyIuI2/e+UgrEM9K65f7zlKhpQUROAwWtdVkTljw=)
                          4: XMUOh6ctfXaftB95dgu-pMfMmdw.roa (hash: krjJw5tLo29BgwV+AeVHnbIjWwv043Jk6MTDgZgyf3s=)
                          5: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: zS523ri0VEDTmf63Qb5C/edeQ5sIu6fT1Ws37YY7Kyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:99:07:5b:33:57:ee:89:27:24:49:07:23:45:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
        Validity
            Not Before: May 18 01:00:07 2024 GMT
            Not After : May 19 01:00:07 2024 GMT
        Subject: CN=f4cf9a2f0123d9f2105c099cb10e334f856f0d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:ca:39:75:0d:36:86:26:f4:6d:f5:f1:66:
                    3f:4b:af:88:dc:ad:d1:15:52:26:6c:9f:1e:34:35:
                    88:14:fc:26:2e:a8:17:98:ff:2e:80:14:0e:cd:ed:
                    ac:04:c4:57:e4:bf:23:2d:b0:dc:c8:40:1d:9b:5c:
                    a1:66:af:d2:d2:9e:be:4b:6d:ec:2b:9d:c1:7c:f2:
                    25:a2:55:6c:bf:56:71:57:70:4b:98:e5:6a:82:2b:
                    71:6a:67:12:49:6e:e9:96:95:5c:f7:44:87:95:86:
                    84:3b:ff:8f:3d:4d:94:43:cf:33:4a:75:ce:4f:ec:
                    f6:08:66:a0:d2:95:e2:18:83:26:36:78:0a:37:05:
                    be:b2:5d:a1:d6:5a:1c:ba:95:2a:62:2c:ef:58:33:
                    4a:ba:a8:fc:49:97:3b:8f:1e:08:33:b0:ae:bf:f1:
                    8c:85:c6:5a:5b:ac:69:43:7f:2f:b6:6b:ad:4a:47:
                    89:41:d7:2f:11:4d:9d:a3:71:ef:00:99:a5:62:43:
                    34:12:02:1b:90:e8:e9:ea:11:dd:c9:80:26:5b:19:
                    fd:32:76:e7:bc:9d:2b:5c:ec:35:42:c3:0f:c2:bd:
                    8a:83:ea:d8:56:b7:40:20:b3:25:b7:51:bb:9f:7e:
                    0b:31:d2:99:75:bf:b4:6a:7d:c9:e0:fc:c1:04:3b:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:9A:2F:01:23:D9:F2:10:5C:09:9C:B1:0E:33:4F:85:6F:0D:76
            X509v3 Authority Key Identifier:
                keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:33:21:69:4e:af:c3:2e:3b:59:f1:1d:fa:ef:bf:95:03:04:
         e6:c2:a0:4c:11:43:e8:57:88:52:bc:74:ba:86:9a:3b:e3:e7:
         df:51:0d:76:56:43:9e:7f:d8:e0:7d:1f:ed:f0:8f:85:6c:a0:
         22:3c:89:18:58:f2:c2:c4:02:2f:1f:8e:87:83:71:5c:a5:53:
         72:64:b0:0b:e3:0f:14:8f:83:f6:1a:c3:f3:79:c8:f9:ad:d1:
         31:0b:6c:5b:b1:57:71:e7:0c:c8:1f:1e:e6:14:fb:89:c5:a2:
         d8:df:9f:da:82:ed:1f:7e:6f:f7:c9:26:f3:c6:3d:d0:e1:f1:
         31:1a:6e:a7:fa:f0:af:12:4b:08:3a:fc:c8:06:25:53:d3:e7:
         cc:94:99:e4:e1:d5:d5:97:5a:f9:ba:cb:67:e9:5d:b6:c0:19:
         05:d6:d2:f5:5f:25:77:0e:f6:d2:ff:bc:fc:4f:5c:7a:a4:80:
         c3:45:fe:a0:d4:a4:23:af:1b:5c:40:6b:89:9e:ce:a6:e5:a4:
         d4:8d:39:0d:d4:be:d6:bb:a0:ee:c3:16:83:9c:cf:af:69:23:
         16:ca:87:20:74:bc:13:0d:8a:96:15:bf:43:b3:e8:74:32:e9:
         eb:c8:d5:e0:84:f2:81:e8:6d:36:d9:7c:c5:2a:c8:0d:6e:3e:
         e5:30:dc:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNpkHWzNX7oknJEkHI0V2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTA0ZTRmN2Q5ZjM4ZDhlMjJhMmQzMmJlMDE5MDMxOTMw
YzFhNDcwHhcNMjQwNTE4MDEwMDA3WhcNMjQwNTE5MDEwMDA3WjAzMTEwLwYDVQQD
EyhmNGNmOWEyZjAxMjNkOWYyMTA1YzA5OWNiMTBlMzM0Zjg1NmYwZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcXKOXUNNoYm9G318WY/S6+I3K3R
FVImbJ8eNDWIFPwmLqgXmP8ugBQOze2sBMRX5L8jLbDcyEAdm1yhZq/S0p6+S23s
K53BfPIlolVsv1ZxV3BLmOVqgitxamcSSW7plpVc90SHlYaEO/+PPU2UQ88zSnXO
T+z2CGag0pXiGIMmNngKNwW+sl2h1locupUqYizvWDNKuqj8SZc7jx4IM7Cuv/GM
hcZaW6xpQ38vtmutSkeJQdcvEU2do3HvAJmlYkM0EgIbkOjp6hHdyYAmWxn9Mnbn
vJ0rXOw1QsMPwr2Kg+rYVrdAILMlt1G7n34LMdKZdb+0an3J4PzBBDu6cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTPmi8BI9nyEFwJnLEOM0+Fbw12MB8GA1UdIwQY
MBaAFGYQTk99nzjY4iotMr4BkDGTDBpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQt
NDc0NzJlZDNiZWNiLzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQtNDc0NzJlZDNiZWNi
LzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTMhaU6v
wy47WfEd+u+/lQME5sKgTBFD6FeIUrx0uoaaO+Pn31ENdlZDnn/Y4H0f7fCPhWyg
IjyJGFjywsQCLx+Oh4NxXKVTcmSwC+MPFI+D9hrD83nI+a3RMQtsW7FXcecMyB8e
5hT7icWi2N+f2oLtH35v98km88Y90OHxMRpup/rwrxJLCDr8yAYlU9PnzJSZ5OHV
1Zda+brLZ+ldtsAZBdbS9V8ldw720v+8/E9ceqSAw0X+oNSkI68bXEBriZ7OpuWk
1I05DdS+1rug7sMWg5zPr2kjFsqHIHS8Ew2KlhW/Q7PodDLp68jV4ITygehtNtl8
xSrIDW4+5TDc6g==
-----END CERTIFICATE-----
Generated at Sat May 18 01:48:17 2024 by rpki-client on console-fra.rpki-client.org