Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File:                     z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier:          xw+TKvtVRWTPivNtWgMZNqoQqLm8smUW7+nvP1kBbiY=
Subject key identifier:   5B:60:A6:98:F2:F4:CE:28:64:48:5B:88:53:B6:18:BA:FA:10:D0:96
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer:       /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial:       018F885B5A8DCCF7264B73801A4DCF59CC97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number:          0CC2
Signing time:             Fri 17 May 2024 21:00:39 +0000
Manifest this update:     Fri 17 May 2024 21:00:39 +0000
Manifest next update:     Sat 18 May 2024 21:00:39 +0000
Files and hashes:         1: QVk_LN6gv-o7QfSKnCyfLLtiaZs.roa (hash: Sj+pN8zUtaKazY74RUkIadFUCLg8epZygO6Vxt6sivY=)
                          2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: Ev/TEwSPUMIqql6vj1KRoQuJZF6IMsiVn1XXY27maBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:5a:8d:cc:f7:26:4b:73:80:1a:4d:cf:59:cc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
        Validity
            Not Before: May 17 21:00:39 2024 GMT
            Not After : May 18 21:00:39 2024 GMT
        Subject: CN=5b60a698f2f4ce2864485b8853b618bafa10d096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:26:c8:5a:2c:da:a1:b1:66:d8:8f:52:74:
                    18:ae:e2:9e:9c:11:b9:dc:66:21:52:5f:0c:c4:1c:
                    d9:8f:1a:66:bf:a4:d1:00:aa:3f:4e:fb:1a:eb:eb:
                    08:c5:9c:93:85:7b:40:1d:a3:05:f2:b1:76:85:c1:
                    67:6f:e5:7b:2e:81:cf:75:13:c1:c8:67:7a:2e:07:
                    b7:89:57:5d:74:ba:f8:27:41:b4:ed:72:65:2e:40:
                    1d:6b:76:2b:7f:be:41:47:3b:b4:5d:71:f8:fb:df:
                    62:3b:da:32:b7:a6:b5:a3:ff:d9:84:c2:55:b8:66:
                    e1:de:12:c4:11:5f:92:fd:76:fc:8d:dd:c4:e8:dd:
                    4d:2b:e8:d0:09:ab:92:b9:9e:2e:d2:3a:08:10:7c:
                    fd:fd:1a:df:e2:22:ae:3a:40:f8:82:d0:4b:22:fa:
                    7f:c0:c2:45:e9:d4:81:c9:32:ed:9c:f1:43:db:8d:
                    89:f8:c9:89:c4:50:6c:f3:0e:54:18:f5:63:c8:ed:
                    a7:52:4d:0f:15:94:26:e5:8a:ac:4a:fb:a9:ed:17:
                    e3:14:58:68:d4:e2:27:60:bd:9d:1a:b1:78:df:e1:
                    f3:7a:8a:02:fd:17:cd:fd:ec:a7:01:38:27:78:81:
                    8c:7a:7d:c8:f2:2c:c8:91:14:19:2a:78:0c:c0:7f:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:A6:98:F2:F4:CE:28:64:48:5B:88:53:B6:18:BA:FA:10:D0:96
            X509v3 Authority Key Identifier:
                keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:c1:09:29:ae:3a:c3:f1:df:a8:36:7e:a3:da:89:b4:12:
         9c:fa:1e:67:2a:d7:47:fb:37:6e:48:fe:e3:e4:04:c9:07:01:
         24:4c:27:72:da:3e:a6:55:70:99:48:cf:7f:73:67:3e:fa:1f:
         2f:a8:12:7a:44:75:9f:43:16:e5:cc:d5:fd:c7:ad:55:b6:c5:
         d0:7c:98:32:99:0c:37:45:bd:a5:3f:2c:12:99:2a:d4:11:dd:
         3e:c9:6f:30:72:1f:39:c5:14:2c:82:ef:4f:f1:8d:0c:c8:91:
         29:54:17:3e:07:1a:e4:59:96:ea:27:77:f9:8f:0a:c6:9c:4a:
         d9:94:b9:c2:c5:36:db:c5:64:ef:24:b4:aa:db:a7:c0:2a:3a:
         82:90:02:14:90:10:6e:89:03:c6:d3:5f:b3:62:52:41:e9:03:
         63:7f:db:80:73:4c:c8:12:08:ef:27:f9:a1:af:df:02:2c:15:
         12:1f:de:22:35:40:38:bd:a0:06:c3:86:37:90:01:11:25:d1:
         a6:c1:e1:30:78:6c:2d:44:33:9a:30:32:dd:c3:39:f4:69:bf:
         f9:64:41:54:36:41:c5:06:5e:91:ee:25:a0:84:50:c2:07:5b:
         8f:9d:d8:67:8f:38:67:ff:c2:2d:24:8e:0a:a9:ba:3c:af:6a:
         59:da:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:24 2024 by rpki-client on console-fra.rpki-client.org