Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File:                     ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier:          2+PxX/Dw0av/retYZ838q3MNS5t//jdtyS9U/f1D1x4=
Subject key identifier:   B5:50:C2:5D:BB:56:A9:BF:B8:08:24:3E:C1:88:DA:5F:BB:56:D7:5F
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer:       /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial:       01936B2243EC33C51537453CB1A713387D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number:          0777
Signing time:             Wed 27 Nov 2024 01:00:27 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:27 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:27 +0000
Files and hashes:         1: 2s8Pbl5Zt2P4pi61ykgNzCEUg7Y.roa (hash: qlrXwArZmvn9oy2pA19cOo+14UzQ5qEBjBPfMt28srQ=)
                          2: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: llYCg4oMzcocBlBylCVaFVsxm/WvwydPSNr6UqKMfoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:43:ec:33:c5:15:37:45:3c:b1:a7:13:38:7d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
        Validity
            Not Before: Nov 27 01:00:27 2024 GMT
            Not After : Nov 28 01:00:27 2024 GMT
        Subject: CN=b550c25dbb56a9bfb808243ec188da5fbb56d75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:6d:eb:dd:03:80:19:44:29:5b:8e:56:20:
                    56:9e:10:d0:15:17:b0:84:0a:0a:fc:b7:9e:35:51:
                    44:1e:dd:d5:31:eb:c5:6f:f4:91:0e:14:2b:71:c6:
                    39:ac:75:0c:3d:ce:6e:d4:bb:5b:79:aa:82:5f:17:
                    86:fc:88:15:80:39:cd:d1:45:dd:5c:f9:57:7c:70:
                    b6:bf:df:22:90:5d:cf:fc:a5:d8:67:8a:31:16:0f:
                    c3:46:d4:e6:90:04:64:e5:f2:a2:37:bd:be:e4:a9:
                    a7:40:f9:ea:20:88:02:e7:a0:a8:f6:d1:f1:7e:6a:
                    6d:e9:f4:ec:ca:7c:08:3f:ee:70:e7:79:85:e6:ee:
                    ff:35:47:4f:cd:6f:fe:e4:3b:50:a1:d5:99:19:b9:
                    b7:31:9a:d1:38:b7:c7:bc:68:cf:a1:60:34:9a:06:
                    df:f4:f3:32:1d:73:b5:67:86:39:d3:ff:d5:a3:02:
                    84:67:41:fe:83:d8:16:d8:a7:11:85:7f:f0:20:96:
                    a5:23:d7:f8:5a:27:53:20:cf:6d:29:a5:92:7c:c0:
                    6e:57:f5:87:ca:b0:21:70:6c:c7:5f:5e:3b:86:cf:
                    50:59:d5:59:c8:18:f6:ce:c3:43:0f:9a:58:2d:bd:
                    db:c5:3b:3a:fe:19:80:47:39:69:1c:c4:19:7e:dc:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:50:C2:5D:BB:56:A9:BF:B8:08:24:3E:C1:88:DA:5F:BB:56:D7:5F
            X509v3 Authority Key Identifier:
                keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:4c:9c:6a:f7:4a:a4:0a:f3:89:78:8d:87:50:88:62:40:
         40:7b:ea:91:e3:24:0a:11:bd:65:b1:f5:83:07:14:54:69:56:
         29:66:d1:3d:cb:03:5c:1b:63:17:bd:6b:3e:fc:85:fe:23:27:
         1b:f5:eb:80:4d:77:16:1a:b6:71:0c:b2:d8:18:cf:1b:a1:b9:
         ae:7f:08:28:d7:85:66:8f:00:b2:6d:b1:52:b2:4b:b0:ee:75:
         02:fc:e6:83:98:93:bf:ce:c7:ce:82:c3:18:eb:e4:ca:9a:20:
         94:a0:b1:4e:ec:17:53:8f:9b:9c:a9:39:c9:1e:a7:92:21:cc:
         75:21:df:c3:90:0e:cb:84:36:8d:8c:20:16:e8:df:f7:68:0d:
         88:aa:65:23:71:2f:2d:fa:2c:00:04:6b:90:f5:92:0c:42:a1:
         12:1c:34:e4:95:6b:86:98:24:5a:e2:b4:34:fd:35:d6:21:24:
         78:9b:81:9b:a2:04:ef:05:fa:b9:b1:f2:60:8a:8b:ef:6a:c9:
         69:ef:11:f4:87:4e:6a:36:f0:f6:d1:e9:51:85:af:56:6b:9d:
         b7:11:6e:c0:0d:7a:f0:83:a5:16:37:b6:0f:0c:97:aa:94:46:
         0d:a1:cd:c6:89:fc:d9:4b:a0:a2:a5:a1:e8:18:b4:4e:49:b0:
         79:cc:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:48 2024 by rpki-client on console-ams.rpki-client.org