Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File:                     g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier:          HvUx1Ndo8QB2+25tNaTx9VdjrucrBV3Upg/i3FErh7g=
Subject key identifier:   B1:EF:09:29:A3:8C:DD:E8:1A:33:80:5A:18:B7:49:40:8D:F1:64:F1
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer:       /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial:       01935689DCCA2A189AE6DCE30235BF7540EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number:          0E63
Signing time:             Sat 23 Nov 2024 01:01:35 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:35 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:35 +0000
Files and hashes:         1: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: P0wCVo4ytgUcTtJ4Yms5lPD7T9VjlhqufC4Esu7k8VY=)
                          2: kj0cJmWL3rLgFLjXuZhSiX-b4Zs.roa (hash: wlQTKXeMhx3hr3ryjVuyAy1bVpMhekt6CdPqCRr5/n0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:dc:ca:2a:18:9a:e6:dc:e3:02:35:bf:75:40:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
        Validity
            Not Before: Nov 23 01:01:35 2024 GMT
            Not After : Nov 24 01:01:35 2024 GMT
        Subject: CN=b1ef0929a38cdde81a33805a18b749408df164f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0e:3d:a2:a9:33:9f:12:b7:f2:9a:fb:39:d6:
                    3f:e0:9d:8c:fa:62:0d:9e:e4:79:cf:e1:a2:f1:91:
                    69:08:16:0a:bc:72:c0:50:dc:76:b9:d9:99:04:16:
                    22:63:13:c4:b2:ad:b2:53:83:7a:75:4e:cb:72:de:
                    8c:dc:a2:26:e6:ae:7d:a2:a5:28:c5:28:bc:50:dd:
                    c0:22:50:27:6a:be:90:62:23:a4:05:76:7c:35:1b:
                    73:61:21:d4:d0:03:82:28:ff:b7:bc:b5:96:95:90:
                    5c:1c:5c:d2:d7:64:2c:80:2d:5d:be:c8:4b:bd:43:
                    4b:e9:b8:42:c1:c9:93:66:1e:d3:e0:97:b1:32:af:
                    90:ff:27:de:c9:99:4a:fe:6e:f9:95:ed:dd:35:60:
                    b4:80:0e:d1:16:b0:98:77:75:53:77:57:db:0f:02:
                    10:a9:02:71:bf:c6:01:ef:d9:85:29:9f:1c:07:6f:
                    c1:8c:fb:98:37:4e:f4:11:1e:c2:45:31:a7:17:47:
                    aa:f6:b9:2d:8d:af:0e:b6:f5:48:73:1f:6e:5b:84:
                    d8:c4:13:e1:72:16:4c:8d:11:f0:a3:fb:23:68:89:
                    3e:2a:44:85:61:0c:c2:8a:43:65:a5:ca:3e:e6:41:
                    48:ea:c1:76:4f:10:6b:31:56:db:e1:a9:37:09:4a:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:09:29:A3:8C:DD:E8:1A:33:80:5A:18:B7:49:40:8D:F1:64:F1
            X509v3 Authority Key Identifier:
                keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:86:b5:2d:0a:ec:fc:34:eb:02:eb:0a:b5:d0:6d:c0:32:83:
         29:74:e8:26:28:d1:b6:93:01:5c:b8:ad:47:fa:ee:d3:3b:04:
         6b:20:c4:5a:d5:85:34:86:40:ff:b5:33:62:cc:9b:c3:6d:ca:
         5b:a5:66:8d:72:ca:72:11:c3:ad:5a:ec:97:14:e2:b7:b5:92:
         49:b3:2e:37:00:3f:70:04:d0:5d:21:49:79:48:ae:99:e4:a8:
         1e:3f:2a:d4:26:aa:98:fa:4c:d2:30:1f:4a:62:7b:a5:9c:19:
         ca:ba:0a:0f:87:49:69:17:cb:48:03:34:ff:08:5c:03:1f:e9:
         b5:01:79:56:ba:64:41:30:02:1d:dc:ba:f3:14:89:b9:b8:d9:
         03:01:4e:db:5f:c5:76:e7:e1:2f:0f:e6:e5:fc:ae:a0:bd:15:
         cb:89:2e:4a:45:74:19:2b:f1:14:4c:8d:35:36:5e:c4:95:04:
         d7:2f:d3:d0:c3:06:a6:f7:0e:05:ce:54:68:08:5c:78:ef:9b:
         0d:ec:36:4d:b5:f5:67:c7:a8:58:64:27:81:5c:59:d3:fd:e4:
         6c:3c:fc:88:d9:2f:15:61:17:5d:90:94:bd:b3:bc:60:95:5f:
         94:4d:38:36:93:0e:ef:52:d3:6f:9c:04:8e:5b:79:17:1d:ad:
         3b:2b:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:07 2024 by rpki-client on console-ams.rpki-client.org