Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File:                     Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier:          tNV7DEVhe0fU1kLNTt4+wI0l4kWSIrzIuWfd75GU6YM=
Subject key identifier:   64:02:49:50:80:05:57:A9:63:B5:EA:4D:AE:1D:21:42:06:AB:61:5D
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer:       /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial:       0193587937912DBF47361D3F623F04E9F99D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:02:39 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:39 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:39 +0000
Files and hashes:         1: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: kEshpv9Ikt9xRkwDhtIM+t0UMd9tfd0ZKVSU3sg9tG0=)
                          2: mknzsfXcnWvFn1V5gddZORyQFeo.roa (hash: IhiYrYObw43cmHgTW/2qehddv45ZvOR3AbTr8bWu11Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:37:91:2d:bf:47:36:1d:3f:62:3f:04:e9:f9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
        Validity
            Not Before: Nov 23 10:02:39 2024 GMT
            Not After : Nov 24 10:02:39 2024 GMT
        Subject: CN=64024950800557a963b5ea4dae1d214206ab615d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:4b:d5:d4:fd:ec:11:54:f2:4b:05:eb:2c:
                    ff:64:dd:54:dc:c0:3b:26:80:07:4c:3c:5d:d4:79:
                    06:d5:90:37:f6:e5:af:8a:5c:61:a8:56:ed:8f:ea:
                    3b:16:0d:15:4b:ae:8e:b3:99:dd:d5:97:00:d8:85:
                    46:48:0a:ce:55:22:1b:ce:dd:bc:8e:17:e4:ef:65:
                    97:77:cd:d9:4c:c4:2e:5a:45:d1:36:01:4f:4f:81:
                    ef:9c:e8:0c:86:4a:88:09:be:b7:e9:56:a6:e9:82:
                    36:aa:60:ad:0d:91:48:8e:91:fd:6b:3d:34:ad:18:
                    d3:87:8c:d8:14:4e:26:cd:fa:54:98:49:90:86:6f:
                    1d:e1:d0:25:2a:10:82:04:13:43:56:49:30:f7:93:
                    2a:eb:0d:55:df:89:cc:a8:fb:33:e6:bb:15:4b:d4:
                    58:32:53:06:fc:4b:2d:40:4e:a0:a4:81:64:e7:70:
                    be:66:9f:2b:1c:05:7c:9b:13:8d:bf:0f:6c:15:d5:
                    e6:42:52:4f:d8:ac:7b:9d:ae:f7:72:91:cc:24:3b:
                    30:7b:08:63:e4:6d:6b:81:d6:ed:4c:9c:b5:78:f8:
                    b7:a2:e5:60:1e:f3:52:d7:da:7c:15:f5:29:61:3d:
                    5d:88:b8:9c:01:81:16:93:6e:69:be:6c:fe:83:e5:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:02:49:50:80:05:57:A9:63:B5:EA:4D:AE:1D:21:42:06:AB:61:5D
            X509v3 Authority Key Identifier:
                keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:fa:29:94:40:12:c0:db:8e:3e:19:72:41:6f:93:c2:1c:
         ad:5e:6f:53:5c:9b:d0:4f:3d:c1:be:c5:77:eb:d7:6b:6f:b5:
         9f:b6:d7:f9:35:0e:cb:8a:f3:f7:56:0f:ea:9d:02:29:eb:46:
         ef:36:0f:e4:e1:5b:98:0a:68:1c:86:86:f2:c5:25:93:e4:bb:
         ad:f9:0e:69:25:c9:a5:45:91:3e:32:d1:6a:44:1a:d0:12:05:
         aa:b2:9c:dd:e6:80:df:13:72:e3:00:10:50:d5:39:08:98:76:
         0b:12:f9:54:99:ef:03:8f:8d:0b:a1:c8:5e:bb:ca:c4:5d:22:
         09:ae:41:87:f4:5f:f2:36:f3:d5:47:e5:30:ff:68:c9:6b:90:
         f0:eb:cd:76:bd:35:17:ad:f7:9e:bc:ab:8e:82:f7:e0:d5:f6:
         f8:1b:27:45:73:fa:eb:9b:3b:42:63:48:45:1d:07:ae:f7:a0:
         a3:da:94:f0:d0:07:16:71:67:08:be:73:61:32:9f:10:cb:c6:
         39:e4:e9:77:00:cb:ed:b6:b2:a0:bf:03:b2:d8:da:8c:04:50:
         e0:55:b4:1a:60:e6:12:aa:41:a6:83:b7:d5:0b:39:a9:bd:0f:
         cf:32:60:b0:91:a4:5a:bf:73:bb:61:f4:a9:76:e8:a8:5f:cd:
         f5:ef:4a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:41 2024 by rpki-client on console-fra.rpki-client.org