Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File:                     z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier:          yB4XVWMnNX5UB6xgemeWEIp53Pqqa0X5Mc2DIumKsO4=
Subject key identifier:   F9:33:CF:7C:81:55:8D:EF:DE:A3:AB:CD:23:9C:27:9B:A4:EC:35:55
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer:       /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial:       019355E4092F2D029B00D1F6E2D71E9C4461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number:          1380
Signing time:             Fri 22 Nov 2024 22:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:28 +0000
Files and hashes:         1: 1JaAiN2yFjhB4HufpXnnCTsAYmk.roa (hash: EATZ0RMzoroT15YM5/MNE7mg1yFQb9M5Gg0t7ZgpVwo=)
                          2: 7QHfy7XVBLqwKz3bkLbmbw5VIB4.roa (hash: O+6FpMeQA8fA1QEykaCVbfJ04T2BRfpUijM6sSYmCO0=)
                          3: 9TZkzOZaZwDdOBmw6YgK1sqmgIQ.roa (hash: ec3EvITaQbCd5ljOcugR/l6Y5frX+nwHjFy3NW8Uf0c=)
                          4: ETxn0TXg_Hk67b3_ndKMuLUMfpc.roa (hash: gIhauKHMzoyRBDIaxHdMhsIstSurv2aA3D1l8RSTmnI=)
                          5: Fu5YRa7ooMCtN05-zrg72RhB7XU.roa (hash: aZ3/MAYHLrv2vmex+u6JIyNKJLazuK9g6vNN/fANojY=)
                          6: JUEnLjfjrEA56UJnxizkUX3ZPJI.roa (hash: OLt01NDl0ileR61NdBtiLN/fhoYoAv8bbIsAXnjWf1g=)
                          7: JwvlPYx-jHmmU5EBKt7lo1ZAVsE.roa (hash: d2wbHeSxfQUPnAKBRQ2VCY/zGKVhhgrxURRpvQGwrvM=)
                          8: K5Aaceetx_IB3W4HNPwDyd86Cio.roa (hash: FTuTVsHpdFdzI+unUH2NhMQGatunRvOYnThCjkf9TnA=)
                          9: gjhsVKEIv9al7V5mbcCPNtMlQ4g.roa (hash: piabN72zugUAJMZYOTEGjgO/41arSNpXegP//ICf92s=)
                          10: oufjHOKl_LbwcWNoE9yRU_bzf9M.roa (hash: 8nwzBUOgGUm+w3uT8s0Fagt++CXWTGrFZ/8HRhAVueg=)
                          11: s1OxjYX2hxCWYb7WtuF7tceXHHs.roa (hash: iyUD7UCH9BWjpGKyFgk/jfT1keSpzwyvjNrwr7u0Zlo=)
                          12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: IjVvo8pwl2C3HgEWQJdmNZ+4Gmb6zBqx/h1359fGrGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:09:2f:2d:02:9b:00:d1:f6:e2:d7:1e:9c:44:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
        Validity
            Not Before: Nov 22 22:00:28 2024 GMT
            Not After : Nov 23 22:00:28 2024 GMT
        Subject: CN=f933cf7c81558defdea3abcd239c279ba4ec3555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:a8:fb:6b:08:30:79:38:09:80:10:89:03:
                    2e:49:b6:64:bb:e6:40:8b:ad:35:29:51:e3:ca:90:
                    2a:dd:ed:47:d4:1f:2d:ae:7b:32:c6:9e:db:7a:0d:
                    d8:af:86:2c:44:5d:fe:50:53:c9:eb:63:78:b4:af:
                    fd:be:50:e9:bf:19:5d:93:8d:d0:d9:92:ba:7c:8e:
                    0d:f1:04:07:9c:07:bd:fb:4f:75:0b:18:df:b8:be:
                    03:c9:18:bd:e0:af:32:df:41:55:42:7c:16:ed:3e:
                    01:ed:5c:df:c9:af:eb:6a:c6:d6:fb:19:52:4f:d1:
                    28:8d:e8:ca:97:43:eb:f7:d8:a6:4b:f8:b9:a4:a2:
                    8f:46:d6:42:7b:c7:71:30:a4:80:73:12:91:f9:1c:
                    dd:96:15:f6:82:89:bc:79:45:e1:3d:d6:b5:bb:d2:
                    24:8a:7c:49:1b:6d:f6:ea:fa:fe:3e:b9:75:9a:0c:
                    64:3e:51:8a:fa:c1:90:2d:c7:4d:f8:5c:42:62:0a:
                    36:42:ea:c3:36:ab:74:50:38:a0:41:e5:80:c6:4a:
                    98:6c:88:7e:85:cc:37:28:75:0a:87:21:93:35:f0:
                    cf:70:49:9d:cd:c2:fc:e8:cd:60:4c:b6:af:72:2e:
                    ba:31:b2:16:72:08:63:7e:57:34:03:0e:7c:0f:b3:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:33:CF:7C:81:55:8D:EF:DE:A3:AB:CD:23:9C:27:9B:A4:EC:35:55
            X509v3 Authority Key Identifier:
                keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:7d:79:16:b3:da:ed:83:d2:2a:60:e3:ee:7d:78:13:43:
         cd:bd:c3:3e:9f:b7:b2:9c:46:e8:8a:5c:e7:19:ae:67:9e:27:
         2b:d9:23:05:3b:77:b4:e7:65:b5:09:d8:61:d2:d8:38:16:66:
         8c:9c:3a:2b:3f:e6:2d:85:4b:6d:f8:2e:72:38:69:03:55:bb:
         62:0e:34:c0:e4:fb:bf:ef:8d:44:55:87:cf:7d:eb:d5:39:78:
         72:6c:dc:a6:bf:c4:b6:e8:42:20:9c:0b:42:db:97:bc:59:0c:
         7d:85:d0:d2:9a:c4:42:2a:21:65:a6:94:f2:f6:0b:6f:2c:f7:
         71:07:a4:71:8b:a1:14:ca:e5:63:8d:51:e9:4f:6e:8b:19:b6:
         8a:8b:3e:ad:e4:c4:81:14:af:78:a4:fb:c5:38:13:be:49:23:
         74:65:e2:7e:60:b4:e1:06:99:58:0d:66:f7:1a:f4:83:7e:5e:
         f5:0b:a6:d8:78:ae:94:16:c6:d4:fc:00:fa:d1:44:95:7b:f9:
         a8:1a:c2:b7:58:f7:0a:f9:be:80:28:40:0b:06:7c:30:de:6b:
         41:51:68:5e:50:a3:be:1f:37:c5:34:4b:b1:0e:32:c4:9a:16:
         d1:48:94:09:c6:64:fe:c9:73:03:8f:6c:8b:a5:4f:a7:87:f1:
         18:f7:1b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:35 2024 by rpki-client on console-ams.rpki-client.org