Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File:                     Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier:          wo4WwVbKTgzSuRGyZsh+cnrTj13a7fFsVmEJfy7XLgM=
Subject key identifier:   98:9E:82:A0:98:B4:2C:BA:E4:59:32:00:AB:AB:E7:12:67:9D:A0:E4
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer:       /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial:       019359C102186F8FBDBFA2B2E3AE9A6F569C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number:          0B34
Signing time:             Sat 23 Nov 2024 16:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:41 +0000
Files and hashes:         1: FGHIWVFtVGLTh-KjcSOyycOicVg.roa (hash: bwOUBb0oPMicMwyUXV8PgF9Cquwed8vI24zN7lRnUHQ=)
                          2: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: H4If2tPaouobo9Slu81E/ZoarVP57ZjnGgiks4mm6vM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:02:18:6f:8f:bd:bf:a2:b2:e3:ae:9a:6f:56:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
        Validity
            Not Before: Nov 23 16:00:41 2024 GMT
            Not After : Nov 24 16:00:41 2024 GMT
        Subject: CN=989e82a098b42cbae4593200ababe712679da0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:2d:fc:84:c8:1f:1a:6f:97:bd:8e:44:14:
                    0c:4d:8a:ec:f7:21:cf:6a:2a:70:c2:a6:d3:f0:3a:
                    15:64:24:f0:cb:62:82:86:be:bd:ea:ea:22:e9:ef:
                    9c:73:79:2b:ec:6d:c7:7d:3b:e3:e5:50:e4:ed:40:
                    08:cc:0a:fa:19:dd:02:68:c4:6d:b2:43:ab:8c:7e:
                    e0:5d:8c:07:5a:50:dd:39:a0:6a:c0:6f:87:af:ac:
                    7e:d4:c1:14:46:97:a6:57:3b:09:45:e9:a4:42:52:
                    a8:d2:52:f5:c4:08:1a:fe:e1:66:57:cf:27:b5:e6:
                    10:fe:f5:8b:fd:3e:c4:7d:cc:9b:e0:81:3a:e7:e1:
                    39:24:4b:99:39:96:cf:ea:1c:46:df:c2:0d:8e:f1:
                    29:55:33:20:29:b1:13:c4:db:19:19:b8:76:cf:fa:
                    c0:ca:28:04:13:62:41:ab:2f:86:44:f0:47:d3:f1:
                    b4:d0:ec:c9:db:7d:38:83:cb:44:b3:9e:7e:f1:6b:
                    a9:da:86:df:74:0c:58:92:26:25:59:7d:77:0e:d2:
                    b0:78:e5:66:0a:60:84:4a:d4:77:33:42:89:7e:1f:
                    44:a3:7c:24:7c:61:4e:ca:a7:64:c3:6e:71:1e:45:
                    23:0b:13:bf:0e:32:bb:62:6a:ca:3a:b9:e9:60:11:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9E:82:A0:98:B4:2C:BA:E4:59:32:00:AB:AB:E7:12:67:9D:A0:E4
            X509v3 Authority Key Identifier:
                keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:30:c6:88:1e:ee:91:e4:9f:e7:d6:96:0d:72:14:f9:ff:e3:
         cc:ea:d0:af:e4:c9:59:c6:c0:48:c7:30:25:9a:fa:cb:b1:85:
         27:5d:c2:49:f5:4a:e6:2b:dc:ac:60:07:c0:1b:e0:55:87:bc:
         4f:f1:81:54:ae:f2:3b:f1:aa:53:9b:d1:41:aa:fc:8c:d4:e1:
         db:5e:45:92:86:51:00:a8:4c:08:2c:ca:1e:cd:5e:4a:70:c8:
         0e:0a:cb:6f:c3:aa:71:a7:52:fd:50:5a:d4:1d:3b:b9:a9:15:
         6f:94:dd:73:15:29:74:84:b8:e9:e9:04:6f:82:d4:5a:65:0e:
         e7:1b:07:8f:6c:9d:32:43:5e:15:24:02:fd:b9:48:10:c4:47:
         8e:5e:53:d6:a7:7c:7d:de:40:39:c0:6f:b1:60:f1:97:bb:87:
         87:1d:9b:ae:9e:a5:2c:b1:b6:fb:cd:c3:3a:17:ce:48:47:05:
         04:ca:6b:39:ce:25:84:60:1b:b0:1a:cb:f5:ce:4f:81:9b:71:
         ba:1d:86:a8:5c:e3:57:2b:bd:e5:e8:38:b2:32:78:69:7a:c2:
         23:79:50:86:58:06:db:69:35:4e:a7:44:c4:30:59:b4:40:d7:
         57:58:e2:92:63:63:bd:32:29:96:6d:dd:c6:c5:95:22:53:80:
         05:c8:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:44:53 2024 by rpki-client on console-ams.rpki-client.org