Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File:                     FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier:          mYboxsEVw28hOeP0pOU713aF2harOh/FTka2/utfsyA=
Subject key identifier:   9A:74:C1:E5:70:6D:03:4F:C8:62:AB:D6:29:5C:D7:78:EB:5B:F6:9F
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer:       /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial:       019063A74861ED2B4125E2A13D9E4598EC67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number:          050F
Signing time:             Sat 29 Jun 2024 11:00:25 +0000
Manifest this update:     Sat 29 Jun 2024 11:00:25 +0000
Manifest next update:     Sun 30 Jun 2024 11:00:25 +0000
Files and hashes:         1: AcVLC3GozpsTUfyXQJpqhkK4D_U.roa (hash: 64B8lSmssg2tYB7e9ecAhITook4ByR6zVVJWH9HXmCY=)
                          2: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: dT/dO7YrzqYSTRa+LQRaReD2Y1x6P0mNTui6PjcsVHM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:a7:48:61:ed:2b:41:25:e2:a1:3d:9e:45:98:ec:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
        Validity
            Not Before: Jun 29 11:00:25 2024 GMT
            Not After : Jun 30 11:00:25 2024 GMT
        Subject: CN=9a74c1e5706d034fc862abd6295cd778eb5bf69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:ce:28:79:5f:77:27:42:8f:bf:81:b2:2b:
                    46:49:dd:ec:4b:3e:b2:91:d9:e8:7c:3c:d1:62:2f:
                    3a:cd:80:79:e1:b6:eb:ff:43:32:72:1e:3d:9c:82:
                    fe:92:be:4b:75:3b:08:1a:01:60:06:46:17:bd:48:
                    a6:6e:5b:6b:b9:a2:73:0b:2f:d1:30:44:21:e2:f6:
                    ee:27:75:63:21:a2:1d:3d:00:37:99:1e:bc:5f:12:
                    2d:26:ea:44:c2:51:75:6f:d0:63:0e:bd:41:05:1c:
                    d7:2d:a4:c6:fa:d9:7c:c0:bb:f5:9a:b8:e0:bf:56:
                    ff:7d:81:9e:a0:98:13:55:ee:c1:8b:41:3b:0c:8c:
                    0e:9e:12:71:40:91:c6:b1:77:85:e4:77:31:94:60:
                    5f:60:71:4a:0e:9b:89:68:1d:53:71:2b:e8:4a:7b:
                    31:3f:02:cc:1c:35:1c:ee:cd:18:dd:5a:0e:66:19:
                    8a:a9:48:7b:a9:2b:f4:e9:56:b9:fb:31:eb:a2:4f:
                    c7:96:a8:d6:0e:e9:a3:7c:9c:ad:93:c9:e0:b4:90:
                    3d:df:06:c5:14:71:68:87:40:b6:7a:92:f8:95:46:
                    db:a3:e5:46:76:5f:33:d1:c1:5a:f3:c7:83:27:95:
                    82:68:cc:26:13:72:9f:88:cc:55:95:2b:bd:b6:ac:
                    42:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:74:C1:E5:70:6D:03:4F:C8:62:AB:D6:29:5C:D7:78:EB:5B:F6:9F
            X509v3 Authority Key Identifier:
                keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cb:ab:18:5d:4e:b2:dc:0d:ab:24:ba:88:24:d3:53:dd:f8:
         24:c4:24:9a:e8:42:8c:c9:fb:23:b9:d4:2c:5b:81:df:67:7a:
         80:70:a4:ce:78:9c:fa:b4:25:b7:f6:86:4d:96:0c:5e:c4:98:
         fb:b7:b0:10:ae:47:dc:a2:6d:7e:f0:23:2a:39:33:c0:80:95:
         79:ae:33:43:65:c2:b9:02:77:94:5e:ea:3d:7b:51:b0:06:76:
         51:d5:4c:40:12:b2:aa:6a:bc:7a:dd:55:d3:be:2e:db:44:5e:
         fb:8c:3d:d6:61:63:10:8a:1f:2e:1c:f0:84:62:6f:68:58:70:
         3d:58:a6:3a:36:03:10:19:60:a9:5e:df:22:71:7a:bd:fe:f5:
         6a:71:6f:a7:c9:d7:07:bf:9b:19:44:c1:9b:99:02:2d:84:d6:
         18:2f:0d:56:d4:89:77:7c:c1:51:69:08:88:ad:ce:81:a3:bd:
         f0:af:1b:89:f7:32:e0:aa:66:25:ec:a6:21:76:bb:84:b6:8c:
         c0:c7:9d:8a:93:cf:58:78:64:28:01:7e:7d:e3:42:7b:a6:d4:
         1f:e3:39:c7:51:01:77:45:3b:0d:5a:2a:f9:fb:08:23:46:d8:
         ee:5a:32:14:0e:34:1b:cc:f1:d7:69:e5:7f:37:c1:9c:d0:31:
         5f:ed:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:48:51 2024 by rpki-client on console-ams.rpki-client.org