Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File:                     ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier:          +5FDrak8qb+d1GiTlbejZ9/4/5PDFVLEnJM2YISKyeU=
Subject key identifier:   A7:86:80:93:8B:0C:7E:A1:A4:84:B7:DA:F0:EC:CA:44:3E:97:E0:49
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer:       /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial:       018F87485BF943290C5DB490EBDB814D48EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:17 +0000
Manifest this update:     Fri 17 May 2024 16:00:17 +0000
Manifest next update:     Sat 18 May 2024 16:00:17 +0000
Files and hashes:         1: N_qFpU4sKqwrkJaJGotNl69oTqs.roa (hash: PQe7NfCF858l5Og0YY7M/dkOFXzWOJzC378yATiaJq4=)
                          2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: 8rgiHIXVkkym85na10zFwH/wOWVqjddLVs8dLDmSAgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:5b:f9:43:29:0c:5d:b4:90:eb:db:81:4d:48:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
        Validity
            Not Before: May 17 16:00:17 2024 GMT
            Not After : May 18 16:00:17 2024 GMT
        Subject: CN=a78680938b0c7ea1a484b7daf0ecca443e97e049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:07:e7:ec:6e:1e:8c:8b:ea:9f:97:d6:b1:
                    63:52:fe:de:f7:41:96:60:8d:ad:48:bb:f9:16:9c:
                    7c:e9:2e:19:b0:24:4d:fe:61:02:14:13:42:81:80:
                    a9:47:b9:2d:6f:92:0f:bf:de:f9:c3:b8:e6:cd:2e:
                    8d:34:2e:b5:02:d3:be:04:72:02:d4:82:fb:3b:17:
                    72:d3:1c:e4:89:75:fb:0a:7d:08:69:36:26:f4:a6:
                    54:b6:dc:90:25:e8:97:32:bf:82:ac:b1:0c:51:47:
                    24:b0:7d:60:37:be:50:48:7f:1d:7b:4a:6f:d5:5c:
                    f6:fa:e1:12:d9:78:3d:8b:41:c2:2c:97:01:cd:19:
                    f2:f4:f8:88:89:a4:20:10:5c:b1:50:c5:bd:48:95:
                    f7:f4:bb:ec:20:d5:6a:0b:df:50:f3:c3:cd:eb:75:
                    36:31:d5:12:da:88:05:15:c8:d1:de:40:e3:4b:29:
                    fe:13:2d:c8:41:c4:3d:03:83:43:71:0b:b0:ef:77:
                    c0:99:65:74:4d:d7:a5:1a:88:2c:71:93:48:30:b0:
                    4e:de:08:b6:88:cf:59:47:92:ec:3b:ce:27:bd:89:
                    7f:fe:d8:2b:ad:cd:10:3b:f0:1a:e5:27:a2:fa:d2:
                    3f:32:77:41:84:66:e8:82:05:f0:c4:f6:36:50:a7:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:86:80:93:8B:0C:7E:A1:A4:84:B7:DA:F0:EC:CA:44:3E:97:E0:49
            X509v3 Authority Key Identifier:
                keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bd:89:2c:bd:05:bc:26:7e:ff:31:9c:14:d0:3a:a0:38:4b:
         55:ab:ff:65:ab:68:30:82:12:d6:e6:c6:39:cf:c6:0e:44:21:
         ab:9a:70:26:77:06:65:29:7a:1c:84:60:50:25:47:ba:2d:3d:
         02:33:e6:02:42:25:4f:11:f5:90:53:e8:47:6a:a3:3c:d0:4a:
         0e:58:12:08:0d:ee:4d:f7:ca:3b:95:b6:c0:9e:43:32:6a:c3:
         29:33:2e:b1:2a:32:25:78:58:7c:3b:38:27:25:6f:ba:fd:81:
         ac:e5:e2:80:1e:38:c6:fa:9d:fd:fe:13:b0:08:2c:3f:29:95:
         5f:b4:0d:5a:06:3a:39:ea:c8:77:7a:ce:bf:b7:8a:99:70:8f:
         cb:0f:98:79:20:7e:de:75:4a:8c:54:be:b2:84:a1:3a:e5:e5:
         f2:5a:5b:11:a5:8f:ad:ed:52:d1:c8:fc:6a:3a:93:57:d6:80:
         30:e5:fd:95:b2:f9:e0:cf:fc:91:f0:a4:a4:d4:3a:54:1f:84:
         6d:f9:b6:a7:05:7f:10:fb:bf:2c:e3:00:44:86:b5:4d:7a:05:
         2b:54:c4:a2:c4:bb:78:a0:ac:5f:d1:65:bf:d7:fd:7b:ff:f2:
         f3:2a:7c:a6:7e:ae:92:6b:9a:df:3d:b9:df:f8:4d:cf:95:35:
         1c:4b:c2:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSFv5QykMXbSQ69uBTUjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh
Yjc4NzYwHhcNMjQwNTE3MTYwMDE3WhcNMjQwNTE4MTYwMDE3WjAzMTEwLwYDVQQD
EyhhNzg2ODA5MzhiMGM3ZWExYTQ4NGI3ZGFmMGVjY2E0NDNlOTdlMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KQH5+xuHoyL6p+X1rFjUv7e90GW
YI2tSLv5Fpx86S4ZsCRN/mECFBNCgYCpR7ktb5IPv975w7jmzS6NNC61AtO+BHIC
1IL7Oxdy0xzkiXX7Cn0IaTYm9KZUttyQJeiXMr+CrLEMUUcksH1gN75QSH8de0pv
1Vz2+uES2Xg9i0HCLJcBzRny9PiIiaQgEFyxUMW9SJX39LvsINVqC99Q88PN63U2
MdUS2ogFFcjR3kDjSyn+Ey3IQcQ9A4NDcQuw73fAmWV0TdelGogscZNIMLBO3gi2
iM9ZR5LsO84nvYl//tgrrc0QO/Aa5Sei+tI/MndBhGboggXwxPY2UKcs7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeGgJOLDH6hpIS32vDsykQ+l+BJMB8GA1UdIwQY
MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt
MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx
LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL2JLL0F
vCZ+/zGcFNA6oDhLVav/ZatoMIIS1ubGOc/GDkQhq5pwJncGZSl6HIRgUCVHui09
AjPmAkIlTxH1kFPoR2qjPNBKDlgSCA3uTffKO5W2wJ5DMmrDKTMusSoyJXhYfDs4
JyVvuv2BrOXigB44xvqd/f4TsAgsPymVX7QNWgY6OerId3rOv7eKmXCPyw+YeSB+
3nVKjFS+soShOuXl8lpbEaWPre1S0cj8ajqTV9aAMOX9lbL54M/8kfCkpNQ6VB+E
bfm2pwV/EPu/LOMARIa1TXoFK1TEosS7eKCsX9Flv9f9e//y8yp8pn6ukmua3z25
3/hNz5U1HEvCEw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:05:43 2024 by rpki-client on console-ams.rpki-client.org