Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File:                     ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier:          eV+Hh6fWw30zt3rS0q5oYRFYPgRoCyLUq9d9kQuXPW0=
Subject key identifier:   F3:12:7A:B1:E1:00:A3:74:31:44:62:A0:C1:AE:50:7F:61:2B:5D:55
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer:       /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial:       018F87B6423BE1029BDA99E454788E049915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number:          085C
Signing time:             Fri 17 May 2024 18:00:19 +0000
Manifest this update:     Fri 17 May 2024 18:00:19 +0000
Manifest next update:     Sat 18 May 2024 18:00:19 +0000
Files and hashes:         1: 2-ENE8qCVRNGZ3Gg_9ecsLZTeHw.roa (hash: DgHOebdTTX85KX1AT/TLLstDp6ASkQmWh/lQhUNBM6k=)
                          2: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: 0FTNl3+kSv9cjcz2v2rzNduTvnhbFe/kjYFYA1hdF0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:42:3b:e1:02:9b:da:99:e4:54:78:8e:04:99:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
        Validity
            Not Before: May 17 18:00:19 2024 GMT
            Not After : May 18 18:00:19 2024 GMT
        Subject: CN=f3127ab1e100a374314462a0c1ae507f612b5d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:23:0a:56:87:6f:87:1d:06:71:44:47:c2:
                    b2:4d:47:3f:df:84:7a:58:7a:dc:23:1e:2e:8c:05:
                    f3:f8:d9:26:2b:58:2d:ce:1b:75:e1:74:b3:a3:b3:
                    43:f1:3a:f1:89:43:42:ee:67:69:6c:ae:68:e2:5d:
                    13:cc:74:20:77:8e:6a:5f:a9:91:92:c5:fa:89:24:
                    d6:07:24:01:2c:2e:e6:75:61:12:1e:5c:6b:cd:0e:
                    29:2e:b3:6b:ee:68:a3:76:a3:88:5d:4f:55:7e:a4:
                    d3:5e:2e:65:7c:89:11:ff:3c:0d:3e:26:60:1e:a3:
                    d3:48:dc:2f:1d:e5:86:4b:8f:7a:45:62:75:1b:eb:
                    ad:b7:18:5c:4e:df:01:2d:6b:61:a3:bf:58:ba:38:
                    a5:16:65:9c:80:36:94:13:16:7c:db:97:3f:9d:48:
                    20:c7:20:1f:1f:29:f3:18:f1:20:88:ab:39:87:73:
                    70:1c:4a:02:1c:07:dd:43:3c:9b:98:69:00:e3:86:
                    ff:d3:02:74:f9:e1:a0:ad:72:a9:50:05:a1:4b:4f:
                    ef:84:f4:db:e0:13:13:ea:f3:8b:fd:da:50:dd:4d:
                    bf:59:60:ed:ea:5c:12:ba:92:6c:4e:d9:65:49:23:
                    60:e7:37:6f:c8:d0:0b:e5:a8:a1:29:cb:3e:03:90:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:12:7A:B1:E1:00:A3:74:31:44:62:A0:C1:AE:50:7F:61:2B:5D:55
            X509v3 Authority Key Identifier:
                keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:f3:9f:73:b2:25:0b:0a:71:10:7f:07:6e:c8:e1:90:26:
         73:ff:b4:75:78:1b:28:c2:9a:a0:83:3b:fc:16:af:f0:f8:a2:
         af:f3:7a:ab:f9:cc:93:a3:3a:e9:e8:82:28:62:05:ec:ce:3d:
         12:b2:36:27:73:5e:8b:bd:75:20:c8:fd:9d:4b:0b:cf:cc:76:
         ad:0d:68:ff:c8:90:f5:37:70:2f:e6:30:f7:e1:44:fd:c3:f3:
         4c:e3:b0:19:98:e7:7b:6f:55:75:3a:af:8f:37:a3:3a:af:ad:
         0d:d5:02:5e:58:8b:e9:29:c0:d6:b3:d8:4c:90:b7:e3:23:c6:
         07:b8:c1:13:fd:28:4a:e6:32:e7:b5:86:5f:f4:ea:72:4f:e2:
         cf:38:2c:48:a7:cc:26:7c:9d:84:86:4e:2e:45:51:59:03:40:
         02:9b:2b:0b:61:d8:50:e2:8e:a2:ba:fd:19:fc:a4:04:d7:fc:
         f7:22:31:3f:c0:74:09:88:52:a9:aa:02:34:ef:77:52:1e:4d:
         00:ad:18:ec:18:0a:d6:72:4e:56:5e:e6:94:2f:da:d8:ae:81:
         41:db:98:26:ab:9b:72:9f:1b:0d:76:81:6c:9e:c0:f8:98:de:
         ed:94:e3:45:d7:67:f4:00:ff:5c:4a:16:9f:d6:b1:a0:95:24:
         13:4b:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:04 2024 by rpki-client on console-ams.rpki-client.org