Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File:                     zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier:          1aaY+TKpQ677+JlAVvlz+qy3E3M9kvfikk0bm3KaQPo=
Subject key identifier:   DC:56:40:03:F0:F8:95:D9:BB:AF:EB:64:37:F5:31:EB:FC:FC:D9:EC
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer:       /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial:       01936A46E556024C59E7ECC21E43EC9F64D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number:          0FE1
Signing time:             Tue 26 Nov 2024 21:00:51 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:51 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:51 +0000
Files and hashes:         1: ReEQTyht1kCHnZpryXgDzTLe9_E.roa (hash: yQKsYMbvYuh+lyJBme7TI0hMSk7Uupm9iuhz02yclcc=)
                          2: _nkZ2SxyUZ5irx5ZmV9AAz-asPE.roa (hash: rmzcTh4wNyMMRZe8mTL2tRBCQ15NKCo9QXsAHdHRKbE=)
                          3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: wAXlepLoRSt8ctzyIisPwonZgwuLWJ1JyWLuq8ju3d0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:e5:56:02:4c:59:e7:ec:c2:1e:43:ec:9f:64:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
        Validity
            Not Before: Nov 26 21:00:51 2024 GMT
            Not After : Nov 27 21:00:51 2024 GMT
        Subject: CN=dc564003f0f895d9bbafeb6437f531ebfcfcd9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:90:39:91:16:b4:4f:1d:a3:b4:d1:db:22:
                    bf:3f:20:d1:0d:0f:d9:76:25:66:c2:ff:28:ab:14:
                    53:55:51:e1:3a:01:32:f0:e4:22:e5:2d:68:5f:2e:
                    8d:51:a3:44:c1:f2:03:a0:7d:21:45:36:6a:1c:cd:
                    72:64:97:44:47:5d:4e:5f:b6:ba:ff:f9:e1:98:67:
                    cc:da:dc:06:61:21:90:25:af:29:b1:84:83:5e:c3:
                    70:49:a2:0b:20:ff:0b:a4:49:60:32:7c:77:b9:21:
                    08:0e:b0:13:d9:04:82:96:ed:a4:ff:2d:43:10:75:
                    20:b6:7f:c9:f9:cf:09:34:af:6c:62:c4:3d:fa:49:
                    0e:20:8f:90:38:44:6b:a7:e2:9b:c1:b5:ac:91:c1:
                    b0:b9:39:4b:99:81:e9:8d:af:79:d5:80:37:c0:f5:
                    21:f7:17:ce:cc:8a:9a:1b:cb:36:79:99:d0:ef:30:
                    ec:40:45:d9:85:5f:81:38:cc:e5:7c:55:4c:7d:06:
                    0d:ad:dc:6b:68:4e:9e:a2:fb:8e:c7:cb:ad:f1:8a:
                    8b:16:01:fe:3a:ed:50:ed:99:bc:92:41:42:2d:7e:
                    8f:28:af:d7:da:12:46:e2:bf:42:a7:5e:68:4a:7b:
                    c3:bf:06:27:cb:9b:b4:79:ff:6f:85:13:c4:1e:57:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:56:40:03:F0:F8:95:D9:BB:AF:EB:64:37:F5:31:EB:FC:FC:D9:EC
            X509v3 Authority Key Identifier:
                keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:40:ed:35:21:bd:5d:3b:63:ed:2f:33:a4:36:07:6e:d1:
         59:40:89:90:18:69:e1:7e:82:e0:c1:31:d7:94:f3:c4:e5:4d:
         1f:d4:9d:ec:e2:f7:33:40:8c:0d:1a:5b:21:be:c4:2b:d2:d7:
         58:be:74:da:83:d1:fe:69:7e:03:a3:55:62:58:80:22:e9:25:
         9f:a3:a5:ee:00:b0:4a:56:38:09:02:60:54:86:31:84:12:f4:
         8b:35:e7:fc:8b:39:5d:e4:37:16:8c:66:7b:b9:ac:21:3c:de:
         20:dc:32:4a:58:da:00:8e:3d:03:74:51:de:85:1a:e1:a4:0f:
         cb:68:89:5b:ab:e6:82:87:0b:8e:02:06:ba:1f:34:e6:7c:97:
         b2:76:51:fe:98:4c:37:07:5b:e5:99:25:9d:3d:34:4b:87:13:
         83:57:99:07:40:10:d3:ab:fa:0d:b1:d4:b5:d8:4f:5b:4b:5a:
         55:ae:5f:c2:e5:c9:9d:47:a1:1d:66:bd:2e:fd:77:92:e7:5b:
         9a:b5:25:b9:1d:83:a9:75:4f:ed:f6:34:f1:1e:03:94:3c:63:
         e6:f7:06:fe:4e:55:02:f6:ed:a9:19:3a:bf:6f:4f:04:6f:21:
         4c:84:c0:0e:7c:47:f5:85:0b:84:63:80:88:d2:7a:b9:7e:79:
         db:b5:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:29 2024 by rpki-client on console-ams.rpki-client.org