Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File:                     ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier:          sgEqapfj58AqrgCZBzwde4ECMTHEZ4Mf6dBjpLnCZ0o=
Subject key identifier:   0E:1B:5B:88:32:25:FB:42:1E:BE:86:7E:3C:FC:AD:AB:1B:D5:B3:38
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer:       /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial:       019356892DD730E466A167A820745B3E2DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:50 +0000
Files and hashes:         1: 4LRbTZWI0P9zgp7wxjUYjiyB1Ns.roa (hash: sEZnYP3/OYwRSEfPjcOuGA0VxIWZ/7zgDvzWnlQfeSg=)
                          2: CGfQwaaxlW85b3YqPKM6Z-0E9S4.roa (hash: 0OTUmcvMxxAtafWmL068MbaVl22/5a+5lQwS1qmps1g=)
                          3: FWg8FBfYunsoVJDBQMIdqdUl6ZY.roa (hash: Se2GyIuI2/e+UgrEM9K65f7zlKhpQUROAwWtdVkTljw=)
                          4: XMUOh6ctfXaftB95dgu-pMfMmdw.roa (hash: krjJw5tLo29BgwV+AeVHnbIjWwv043Jk6MTDgZgyf3s=)
                          5: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: wJw2KvIHkUqMi7zxG/ehoy4oN2gCh5kuqDl4+XIFEVw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:2d:d7:30:e4:66:a1:67:a8:20:74:5b:3e:2d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
        Validity
            Not Before: Nov 23 01:00:50 2024 GMT
            Not After : Nov 24 01:00:50 2024 GMT
        Subject: CN=0e1b5b883225fb421ebe867e3cfcadab1bd5b338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:00:73:e8:c8:28:c4:c0:ed:9d:56:5d:53:
                    6f:e7:ea:ba:d5:c4:35:bc:1e:67:5f:35:fe:55:46:
                    e5:d7:8d:2e:ab:92:d5:28:2f:9e:06:88:e0:5e:84:
                    f2:8f:0d:4f:ad:56:16:73:20:a3:54:f1:82:57:10:
                    5c:dd:7f:02:81:6f:24:1c:54:31:b6:c4:44:7a:9a:
                    18:05:b3:2b:16:06:a6:8b:2a:94:9f:cc:75:d3:1a:
                    e0:00:e7:78:a1:63:f4:e2:01:6e:13:ea:04:a6:f6:
                    3a:b1:bb:7c:3d:f8:51:3d:3c:70:47:71:fd:84:78:
                    89:67:e5:90:8d:ab:64:8b:bb:a6:16:23:3a:fd:18:
                    36:48:c2:91:50:99:df:fb:20:8b:3a:df:fc:7e:08:
                    f6:7f:6b:33:28:b8:2a:00:6a:87:3b:eb:d6:89:cf:
                    fc:a8:da:7e:94:34:2e:6a:ac:77:c0:bd:3c:7e:88:
                    a2:e9:c2:7f:4c:d7:84:17:e2:e3:b9:81:17:b2:fa:
                    6a:b4:be:3f:12:dc:26:2f:66:85:64:ad:af:e0:34:
                    5f:d1:dd:be:4e:ac:f4:30:24:bf:4e:15:50:25:28:
                    f6:b2:96:91:e5:ee:55:cc:80:0d:c0:0a:89:e3:38:
                    33:57:0d:80:35:98:7f:ed:0c:05:9b:9e:e7:db:50:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1B:5B:88:32:25:FB:42:1E:BE:86:7E:3C:FC:AD:AB:1B:D5:B3:38
            X509v3 Authority Key Identifier:
                keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:4e:2f:11:61:be:f7:c2:1b:8d:64:74:a7:e8:e0:e5:37:
         9e:51:71:ad:d0:0d:b0:e0:23:67:84:29:95:e8:ed:a3:77:1f:
         69:99:28:e5:d7:67:4e:14:e9:61:32:08:22:03:2c:8a:c1:aa:
         a8:37:c7:3b:79:7d:7a:65:d0:bb:87:55:69:9e:98:70:30:01:
         96:04:9f:f8:9c:88:aa:4f:59:9b:3d:69:0a:0f:d6:db:6f:78:
         2d:d2:62:1e:13:8a:a8:0e:f9:c7:39:ea:2c:41:f9:45:ba:9f:
         6e:65:33:c2:35:85:0d:79:a3:02:2e:e7:3d:a4:1a:35:b6:f6:
         cc:0c:88:ce:e5:8b:12:d7:5a:5a:e3:99:99:93:0c:15:15:8b:
         ba:f5:16:fd:47:2d:15:12:3d:39:7f:19:2b:c0:5d:b3:c2:39:
         6a:ad:82:13:95:d7:00:75:b6:7c:a4:89:33:ce:b1:d6:dd:c4:
         97:45:8c:26:84:f0:03:3c:d9:c0:26:ae:b3:2f:b5:df:cf:a4:
         b4:c4:fd:fc:6e:e9:c1:77:5d:15:ef:4d:65:fc:97:7b:f8:e3:
         ce:52:23:56:60:54:74:9d:67:7d:b3:45:f5:3b:31:7d:b3:32:
         1b:3f:94:8d:5b:fd:ff:80:42:6f:87:3a:56:09:51:a0:8b:6a:
         d5:b0:22:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiS3XMORmoWeoIHRbPi3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTA0ZTRmN2Q5ZjM4ZDhlMjJhMmQzMmJlMDE5MDMxOTMw
YzFhNDcwHhcNMjQxMTIzMDEwMDUwWhcNMjQxMTI0MDEwMDUwWjAzMTEwLwYDVQQD
EygwZTFiNWI4ODMyMjVmYjQyMWViZTg2N2UzY2ZjYWRhYjFiZDViMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorsAc+jIKMTA7Z1WXVNv5+q61cQ1
vB5nXzX+VUbl140uq5LVKC+eBojgXoTyjw1PrVYWcyCjVPGCVxBc3X8CgW8kHFQx
tsREepoYBbMrFgamiyqUn8x10xrgAOd4oWP04gFuE+oEpvY6sbt8PfhRPTxwR3H9
hHiJZ+WQjatki7umFiM6/Rg2SMKRUJnf+yCLOt/8fgj2f2szKLgqAGqHO+vWic/8
qNp+lDQuaqx3wL08foii6cJ/TNeEF+LjuYEXsvpqtL4/EtwmL2aFZK2v4DRf0d2+
Tqz0MCS/ThVQJSj2spaR5e5VzIANwAqJ4zgzVw2ANZh/7QwFm57n21ANQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4bW4gyJftCHr6Gfjz8rasb1bM4MB8GA1UdIwQY
MBaAFGYQTk99nzjY4iotMr4BkDGTDBpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQt
NDc0NzJlZDNiZWNiLzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQtNDc0NzJlZDNiZWNi
LzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV1OLxFh
vvfCG41kdKfo4OU3nlFxrdANsOAjZ4Qplejto3cfaZko5ddnThTpYTIIIgMsisGq
qDfHO3l9emXQu4dVaZ6YcDABlgSf+JyIqk9Zmz1pCg/W2294LdJiHhOKqA75xznq
LEH5RbqfbmUzwjWFDXmjAi7nPaQaNbb2zAyIzuWLEtdaWuOZmZMMFRWLuvUW/Uct
FRI9OX8ZK8Bds8I5aq2CE5XXAHW2fKSJM86x1t3El0WMJoTwAzzZwCausy+138+k
tMT9/G7pwXddFe9NZfyXe/jjzlIjVmBUdJ1nfbNF9TsxfbMyGz+UjVv9/4BCb4c6
VglRoItq1bAimw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:02 2024 by rpki-client on console-fra.rpki-client.org