Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File:                     Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier:          X6QcOFL30Dan/kIh9FXs1sYNxoYlSUjQaBULc7C47jI=
Subject key identifier:   7D:36:37:8A:D1:01:A5:1C:E2:D4:D5:19:FF:EC:76:31:B3:30:20:30
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer:       /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial:       018F8938FAEE3DDBAB3EF127A519A10FA294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number:          117B
Signing time:             Sat 18 May 2024 01:02:43 +0000
Manifest this update:     Sat 18 May 2024 01:02:43 +0000
Manifest next update:     Sun 19 May 2024 01:02:43 +0000
Files and hashes:         1: 1_LRyhd4mcXsGNX-VW9xFsh-8I8.roa (hash: W7yeV9ejOhQgvQRubEhtaeCTONnqBgo/EJpSogoi99Y=)
                          2: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: A05AGyE1+fvl/gbDDQzGZSRhyqv982cOTlvZ6dmV2hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:fa:ee:3d:db:ab:3e:f1:27:a5:19:a1:0f:a2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
        Validity
            Not Before: May 18 01:02:43 2024 GMT
            Not After : May 19 01:02:43 2024 GMT
        Subject: CN=7d36378ad101a51ce2d4d519ffec7631b3302030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:e0:50:19:f1:15:a6:e8:6f:38:73:2c:cb:
                    60:f3:2c:fd:b8:ce:83:86:1a:fc:9d:aa:aa:99:1a:
                    b2:23:f2:b4:b3:56:02:07:be:84:c0:43:79:80:f2:
                    5d:a8:12:7c:c4:3a:d4:f1:30:b8:f0:99:f2:c0:bd:
                    24:79:e5:51:be:bd:fc:6b:46:d9:95:b4:fe:76:b5:
                    24:a2:a1:f3:c0:31:50:2d:cc:b7:64:d1:e8:ea:18:
                    3c:71:a5:55:87:f9:5e:01:e0:a1:ae:8d:bf:99:66:
                    72:15:92:2a:e2:0b:cb:eb:c5:e4:14:25:3b:6f:de:
                    93:79:c1:53:1c:e9:0c:2b:b7:06:f3:52:4d:8f:db:
                    4c:af:1c:21:b9:18:b7:be:ee:e6:5a:cb:c4:e2:bf:
                    fe:f1:a1:77:fc:85:0b:44:a2:59:25:45:54:72:91:
                    60:76:55:d3:96:32:cf:e4:9b:06:38:6b:cf:c5:f8:
                    73:4f:e8:ca:2d:6f:20:16:fb:5e:a6:87:fd:62:75:
                    ca:d3:6d:e0:8d:ec:6b:09:f4:ec:b7:dd:77:3d:b8:
                    ee:26:f7:a7:b3:60:5e:88:46:62:a7:c3:a6:99:ee:
                    c5:ea:81:4a:02:4a:b8:32:67:7a:be:6f:1d:3c:22:
                    f0:70:1b:9e:44:22:c0:69:8d:93:fb:9a:aa:45:24:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:36:37:8A:D1:01:A5:1C:E2:D4:D5:19:FF:EC:76:31:B3:30:20:30
            X509v3 Authority Key Identifier:
                keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:58:c6:12:09:3b:7d:47:ca:6a:4a:93:95:07:fa:d0:2e:0e:
         3e:c7:78:62:d9:01:02:6e:20:ad:ca:1f:ab:67:d8:ee:c9:de:
         bf:f0:fb:2f:66:aa:0c:af:65:85:41:03:c4:64:d9:28:56:1e:
         56:3b:15:3b:67:e8:e9:7c:78:47:8d:4d:24:00:e3:a6:51:61:
         4b:f6:8c:8e:f2:25:34:9f:73:51:50:8a:90:70:64:7b:da:eb:
         75:af:38:a7:44:6b:80:d1:57:9e:d3:c2:cf:51:f8:51:5c:00:
         18:8d:f8:e5:e5:5c:2c:c1:f4:01:05:85:79:4b:cd:d7:f6:89:
         72:a6:2b:1b:c8:19:36:1d:13:33:5c:54:7e:42:c3:a0:8d:0a:
         ef:ff:82:81:75:69:c5:39:69:a6:35:e9:a1:f5:74:71:f1:f6:
         89:1f:38:8c:73:95:88:e8:0a:79:c8:dd:a9:eb:b4:e6:38:1d:
         31:f8:0a:26:26:0a:a2:d5:68:b8:88:5e:7b:6e:c0:ee:43:f2:
         dd:20:24:3a:7f:79:93:0f:3e:15:cc:c9:48:d1:88:85:85:53:
         9a:2f:29:cc:49:d2:29:fd:c9:1d:f2:8c:85:92:88:f4:43:3b:
         49:57:e8:6d:a7:b5:0f:d8:c4:f7:c2:b1:ae:fb:07:65:f2:74:
         50:d6:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:09:27 2024 by rpki-client on console-ams.rpki-client.org