Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File:                     z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier:          3/yzG5HNfCK6icj3O2IdeOxhpI7L1F/+9CIsJei4ecc=
Subject key identifier:   DB:6B:29:DD:F8:76:09:FF:65:F9:A6:A9:23:21:2B:4D:31:5C:7D:2D
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer:       /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial:       018F866CFBA821CF7234CF78F9346B9EDBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 12:00:40 +0000
Manifest this update:     Fri 17 May 2024 12:00:40 +0000
Manifest next update:     Sat 18 May 2024 12:00:40 +0000
Files and hashes:         1: HUTFF8IkS3B-JeH8cwtH9bV0VjY.roa (hash: iu76HbD21iMKvVW8kfYK44pBeVpUTBUmx07+9nMMUYg=)
                          2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: J1VcuIpKV1xJOq7AeEX9lp10OE/X6s5FE3koiImha1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:fb:a8:21:cf:72:34:cf:78:f9:34:6b:9e:db:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
        Validity
            Not Before: May 17 12:00:40 2024 GMT
            Not After : May 18 12:00:40 2024 GMT
        Subject: CN=db6b29ddf87609ff65f9a6a923212b4d315c7d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:aa:29:c6:f8:b6:6b:f1:3e:a9:10:cc:d8:
                    87:56:53:ac:10:55:df:2e:46:1e:42:a8:b4:4a:f2:
                    ad:27:b8:89:ed:6d:d5:19:81:e6:e3:18:c6:cc:54:
                    23:f2:98:d9:06:2b:0d:15:ec:f7:72:af:76:e5:5c:
                    c9:45:3d:d1:b0:e1:df:3b:94:2b:83:1c:3c:42:96:
                    85:3d:7e:52:d9:67:94:90:09:0d:9f:f6:52:4b:80:
                    cd:9f:89:92:57:7a:4a:88:9c:d0:cb:e9:3e:b2:15:
                    a4:d4:8a:98:c6:ed:38:08:d5:d1:23:9b:99:f4:5b:
                    b6:76:66:b0:1f:05:ba:72:c8:a0:8e:98:d1:f2:45:
                    65:c8:3f:b6:47:87:20:cd:ad:b5:d5:d3:96:75:dd:
                    d3:c7:03:f9:27:16:51:89:0e:5e:21:d2:f1:7d:e1:
                    ab:31:8e:41:2a:d0:0a:e1:f3:ab:b5:0c:73:a8:fd:
                    b5:5d:5a:77:ee:70:07:fb:75:fa:59:6e:2c:d2:ac:
                    4f:dd:9a:1a:c1:a9:da:43:71:c3:58:e6:73:51:74:
                    b2:3c:db:25:8b:f7:89:7a:79:a8:4b:92:5b:61:60:
                    83:a8:b5:89:40:88:94:7e:d9:f3:7c:ae:48:4a:94:
                    66:a7:91:21:65:ba:a6:7e:a4:22:b3:9b:04:94:2c:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:29:DD:F8:76:09:FF:65:F9:A6:A9:23:21:2B:4D:31:5C:7D:2D
            X509v3 Authority Key Identifier:
                keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:77:f4:b9:b1:7a:9a:7e:01:f5:e8:d7:2c:7b:12:bc:b0:79:
         d6:68:e3:7a:2d:7f:87:1f:6c:ee:2f:93:bb:c8:13:29:87:d7:
         db:7c:f0:9e:91:d9:b5:46:3b:fc:93:bf:89:5d:85:20:4d:3a:
         60:5d:9a:1f:0c:66:02:6d:dd:c1:6b:42:f8:ce:f8:30:15:ba:
         6b:f4:67:e4:26:bd:3f:de:6f:c6:1e:6d:53:f2:fd:d5:19:ac:
         03:72:52:5e:e8:f5:0f:a7:f7:e3:d4:52:08:de:56:76:fd:56:
         f2:47:80:67:f1:35:f7:a2:e2:28:44:87:b0:de:66:45:77:2f:
         cc:f8:b4:a3:8f:0b:33:e3:e5:88:62:cc:e1:dc:be:1d:0a:24:
         c0:ec:45:72:5a:bb:84:db:16:b0:92:25:2c:f0:2b:80:76:08:
         b7:81:d4:75:8d:c5:69:68:c5:7a:9c:1a:3a:b2:1f:7b:1b:f0:
         d5:75:54:7b:6f:7d:74:0b:50:06:a6:ab:9e:e6:48:16:23:28:
         29:c7:58:58:bf:bb:2a:21:aa:03:45:38:a9:3f:cb:31:c4:f4:
         f6:1e:54:b3:0e:f6:1d:96:fb:36:5d:ca:00:50:bc:6a:a9:fe:
         a3:dc:98:86:5e:1a:47:94:ee:03:f3:69:9c:7d:46:c8:c4:ef:
         e0:d4:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:00 2024 by rpki-client on console-fra.rpki-client.org