Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File:                     ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier:          TY/ZR16gSLb/Un/83gEeYFuSEOoepx5DkpG5H/beyjE=
Subject key identifier:   B8:65:6D:AD:34:EF:46:F0:7F:17:23:65:5E:A7:5A:24:E8:D3:36:F0
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer:       /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial:       019352E2F73C89CF4DDF1337FB554239B756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number:          1397
Signing time:             Fri 22 Nov 2024 08:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:26 +0000
Files and hashes:         1: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: JB97brlVRBVdk/ig1pPfzcPtW+BCq5tfzkAVBSwTMKE=)
                          2: _z4SUbobR9EzIPluCoQ75LAT_-w.roa (hash: MCoSGPYhTPcOHjLLoa4ThHJflL6uoRKSbo/IASqxlG0=)
                          3: lJP8YL7Q2WeJTeTfP88OZwF5md8.roa (hash: mKsnn2aEiPzlw2q1XJ+bkCZPt1QuzSrFk7fwji6YlTk=)
                          4: yFHwIReZ6vnMVavP8bqKJICsZIk.roa (hash: Ia3Olpd27WfBOLSVVrL5iOxBYpBL7Y5aRk466htGwAY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:f7:3c:89:cf:4d:df:13:37:fb:55:42:39:b7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
        Validity
            Not Before: Nov 22 08:00:26 2024 GMT
            Not After : Nov 23 08:00:26 2024 GMT
        Subject: CN=b8656dad34ef46f07f1723655ea75a24e8d336f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:b5:98:59:a5:d2:20:7a:22:a3:19:2f:7c:
                    7d:41:b4:87:cd:41:70:4f:b1:5e:f2:f5:8e:d5:65:
                    5e:2f:ac:72:fc:45:75:3c:60:ec:a0:18:14:f7:ca:
                    bd:52:c3:36:9a:cd:45:39:87:8f:78:58:22:13:21:
                    e8:f9:64:e2:d9:73:6e:2e:e3:1d:e8:19:b3:34:29:
                    10:3a:38:3a:94:e1:7c:cd:c9:cc:c2:a1:63:4b:e5:
                    28:20:58:b8:ce:a3:69:cd:4d:00:0b:97:ec:9d:f4:
                    6f:c6:06:58:54:06:21:3a:87:a0:4e:0b:83:e9:48:
                    91:99:72:ca:64:d0:6a:14:42:6a:9b:67:4f:c7:38:
                    4b:61:a9:77:6c:35:86:cd:66:6a:b5:66:1b:62:9c:
                    b8:af:d4:c1:3a:c3:53:8d:e0:e0:76:aa:7c:5b:68:
                    65:a9:d8:5c:1c:a0:a3:36:46:ae:99:98:6c:c8:17:
                    a1:90:99:f0:35:62:48:9e:b4:21:44:d7:0a:d2:46:
                    94:4b:6e:fc:b4:15:be:86:73:28:16:90:31:78:1e:
                    4d:c8:a7:5c:c7:4a:70:c1:a3:c3:57:07:fe:66:04:
                    cd:00:8d:e8:0c:d2:aa:35:da:b3:d3:dd:cb:26:f0:
                    7b:fa:4f:56:d6:db:87:d9:10:9a:eb:1c:ef:d5:b0:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:65:6D:AD:34:EF:46:F0:7F:17:23:65:5E:A7:5A:24:E8:D3:36:F0
            X509v3 Authority Key Identifier:
                keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1f:a0:7f:5a:83:c8:5b:e0:83:de:6c:fc:e7:da:13:8c:b8:
         01:66:d1:55:64:86:ff:f7:86:6f:3d:02:c2:5b:9e:92:60:ee:
         a1:8a:17:8c:be:df:66:99:93:ec:62:be:4a:3b:7d:95:df:46:
         60:43:14:70:ae:00:06:70:b0:f4:48:93:f8:44:3d:9c:97:60:
         a7:a6:55:3f:b1:68:43:8e:0b:22:3b:0e:76:05:aa:04:b6:75:
         33:99:3e:9b:71:b6:34:11:c1:81:d2:ab:33:d8:90:3e:9c:0e:
         76:37:dd:69:cb:4b:a8:03:b9:88:3d:d6:a6:f2:dd:dc:43:28:
         d2:e4:01:a9:9d:9c:47:0b:2c:45:08:b9:2e:51:2f:c2:02:5f:
         45:69:f8:cf:14:ad:d6:82:c2:2a:42:cf:75:f5:3d:18:49:ad:
         12:3d:7f:2d:f3:50:1e:40:e8:f1:1d:c6:ea:36:73:11:8a:f4:
         fb:fb:88:33:88:1f:7f:0b:37:cf:57:ea:aa:5b:b3:49:92:43:
         35:00:b1:62:af:92:04:67:bb:94:51:a7:c9:96:29:03:18:11:
         dc:a4:cf:1b:a0:d4:99:f5:4b:7f:f3:be:90:95:72:53:f2:aa:
         29:c0:8d:16:eb:80:4a:3c:a3:68:78:18:20:7a:ba:e3:17:27:
         12:1f:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:42:39 2024 by rpki-client on console-fra.rpki-client.org