Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File:                     ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier:          0+kjMqWx7332L7nVEMfRfMwyLwSWXtHE8+h4KdhTw5U=
Subject key identifier:   89:90:9D:AE:B6:EB:43:FE:43:0A:00:20:A4:E1:6A:3D:B5:05:AD:99
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer:       /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial:       018F866CE0A4CEA3E4184744E11F8E68F616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 12:00:33 +0000
Manifest this update:     Fri 17 May 2024 12:00:33 +0000
Manifest next update:     Sat 18 May 2024 12:00:33 +0000
Files and hashes:         1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: acyBKBwLW7HIoEfsaw9YGiAh8oHRh4HlUlXFP6vaMto=)
                          2: h_nz58u08FizJT6QqMmzgvHXa30.roa (hash: a7inPd4S5JOxbx1D7dpV8xXLL/kK45ovN9hEF9GzpLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:e0:a4:ce:a3:e4:18:47:44:e1:1f:8e:68:f6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
        Validity
            Not Before: May 17 12:00:33 2024 GMT
            Not After : May 18 12:00:33 2024 GMT
        Subject: CN=89909daeb6eb43fe430a0020a4e16a3db505ad99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:af:fc:79:d8:ba:49:41:10:27:38:f9:4f:
                    06:3d:23:36:4d:f4:5d:f5:73:55:70:0c:22:eb:94:
                    4d:3d:f2:f5:19:4e:10:ac:46:e6:bd:a9:69:93:ac:
                    f4:5a:c5:94:28:59:42:b5:1c:7c:17:98:fb:f7:9b:
                    42:02:40:4a:d9:7e:67:97:bc:eb:a8:e0:9d:38:d8:
                    7b:cb:82:aa:45:7c:f9:da:e4:71:e5:fe:44:be:a4:
                    34:1a:ca:a5:d1:f4:f8:0d:a1:e7:26:62:96:b7:39:
                    5b:05:2f:a7:9a:75:5b:8f:e7:aa:51:45:14:33:f7:
                    b9:a9:71:05:d4:25:81:e7:19:c2:78:af:ed:e7:9c:
                    f7:ed:42:46:1e:f0:1a:2b:16:4a:7e:71:56:d6:8b:
                    03:0b:57:ca:12:a3:8f:2f:c1:e3:15:ca:cd:5c:b6:
                    20:b7:6f:ba:af:3d:02:b7:d6:1f:12:c4:23:97:59:
                    b5:40:90:ad:9d:cb:4f:04:9f:25:ad:2b:d9:6a:47:
                    ba:cf:5d:62:88:1d:ce:e0:0d:50:c1:29:e2:4a:08:
                    a5:e5:78:75:0d:65:3d:1b:6e:32:e3:47:7b:ec:59:
                    13:03:1b:00:9d:26:28:0d:38:f1:1f:b4:26:38:ca:
                    91:73:1a:c8:fd:75:59:04:4b:df:1c:6f:24:6d:0b:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:9D:AE:B6:EB:43:FE:43:0A:00:20:A4:E1:6A:3D:B5:05:AD:99
            X509v3 Authority Key Identifier:
                keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:25:a5:9e:38:7d:61:ef:ff:c8:84:fd:3e:ca:a3:8e:9f:b2:
         0a:aa:26:c7:26:9b:11:ea:70:cb:91:69:e7:de:4d:c6:dc:d5:
         59:15:b7:8b:55:55:95:42:c3:5a:a8:a0:1e:2f:fd:00:5b:d3:
         e8:1f:b4:17:64:96:8f:a3:09:2d:9d:3e:e4:1c:c3:46:4a:c2:
         68:d3:5d:69:94:7d:ad:f9:ff:67:14:64:d1:3b:6b:7f:2f:3b:
         70:c9:6d:b0:8e:ce:75:78:19:de:36:97:4f:6b:cd:28:20:fb:
         c9:7a:33:e2:c4:cf:5d:79:d0:dc:19:c9:a0:cb:eb:7d:e4:29:
         7e:bf:98:d3:04:49:85:6f:ae:13:8a:d7:47:25:af:2d:15:09:
         2e:ed:7b:95:2d:91:bb:8e:6f:f5:5f:ac:6b:a2:19:2b:4d:78:
         e2:46:ce:e5:bd:00:73:36:be:55:56:3e:14:68:4c:3c:b7:78:
         27:92:8f:c5:c5:11:2b:0b:d0:bb:4a:88:d7:d6:c7:0e:ed:7c:
         00:34:7e:18:01:72:6e:c1:5c:a3:38:bf:12:b5:30:55:e4:3d:
         54:d6:1e:78:d9:a5:4f:15:e9:66:d9:22:bf:fd:87:5e:73:28:
         16:f2:f2:6a:01:73:71:f8:4a:05:85:a2:b8:76:e2:53:7b:23:
         a0:ea:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:49 2024 by rpki-client on console-fra.rpki-client.org