Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File:                     ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier:          O8Xd/4BRCJXcdkJkgi1uoo70Jt59w1JX4Qu62/b0XwA=
Subject key identifier:   5D:19:FA:76:04:66:65:10:60:EA:39:DC:11:90:E1:88:86:5A:5E:B0
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer:       /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial:       018F87B65DA58D70ACBE92C867B00D209643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number:          01F5
Signing time:             Fri 17 May 2024 18:00:26 +0000
Manifest this update:     Fri 17 May 2024 18:00:26 +0000
Manifest next update:     Sat 18 May 2024 18:00:26 +0000
Files and hashes:         1: FHe9rpCRTWJDYSpdYwNzlO9cp9M.roa (hash: 1iTgN/CBjuvhhAw/Zae5augb1xDKVpaSvynLbYaZMmg=)
                          2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: cCcRliN/6ewgqb1dej2PElLZjZCmq9FfH0IgeI4/t1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5d:a5:8d:70:ac:be:92:c8:67:b0:0d:20:96:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
        Validity
            Not Before: May 17 18:00:26 2024 GMT
            Not After : May 18 18:00:26 2024 GMT
        Subject: CN=5d19fa760466651060ea39dc1190e188865a5eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:c6:0a:6b:ce:73:23:e3:88:64:ed:0e:6f:
                    b7:fc:88:e6:d2:c3:07:af:84:e7:97:10:23:25:93:
                    84:6a:a9:9d:5c:75:de:83:b1:63:c7:75:e0:17:ba:
                    12:63:8c:c5:c0:da:84:43:4e:c5:50:6c:97:90:7e:
                    40:7d:7c:b2:ff:49:94:8b:bf:0e:30:e1:0d:3c:1d:
                    43:0d:aa:03:b7:4b:3c:05:d2:0f:f9:b8:59:09:09:
                    ab:3a:3c:9b:dd:78:fb:97:cd:2d:d0:de:d9:72:30:
                    e0:6d:26:c0:9f:da:21:2a:51:19:8d:20:c8:ad:b6:
                    7c:50:f9:7a:b9:00:dc:7e:fc:43:09:ef:17:83:f2:
                    7f:24:55:6d:fe:d7:b3:89:99:f8:53:ae:c5:04:49:
                    0a:ac:8d:da:1e:09:67:34:c1:ac:05:9a:3e:14:1c:
                    4b:e8:dd:2d:b7:d4:12:32:80:f6:6a:e9:28:90:8a:
                    31:cf:44:08:5b:28:b3:bb:3e:10:80:2f:5a:7e:da:
                    7f:2b:b7:b1:79:c6:18:04:96:0a:e2:54:3c:55:86:
                    03:d5:49:ec:40:e4:46:26:ec:13:ce:9e:39:28:45:
                    39:66:c0:d7:05:06:75:e2:e3:fc:00:55:71:b8:4b:
                    b0:98:1e:05:7c:eb:01:f6:69:25:86:8b:96:d9:b5:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:19:FA:76:04:66:65:10:60:EA:39:DC:11:90:E1:88:86:5A:5E:B0
            X509v3 Authority Key Identifier:
                keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:55:85:51:8e:1c:83:e8:7a:80:e6:a9:61:e5:88:7c:0f:89:
         52:10:88:94:11:59:80:fd:0b:c0:f1:6c:dd:fc:24:d2:e6:36:
         13:6c:4e:7c:56:48:82:c5:d8:8f:6f:4a:3a:eb:27:bb:f0:b9:
         a1:f7:7e:0e:52:80:11:15:7f:c4:1e:a1:a9:e8:1d:ba:cc:fb:
         9b:6d:17:24:46:89:6d:1e:32:7b:de:15:03:c0:38:d6:5a:de:
         28:ce:f0:ea:94:90:99:14:d3:e3:17:a9:80:74:60:05:72:31:
         0c:39:5f:4e:11:48:0b:b5:04:f0:5f:fd:6b:80:ec:ee:da:b8:
         96:99:2b:b5:17:eb:26:41:6a:40:06:9a:95:1f:25:4e:99:41:
         b9:91:3a:77:0b:f3:56:dd:30:16:f8:e9:08:04:ff:0b:10:9a:
         fd:7c:df:4b:cf:3b:01:91:bd:27:91:87:d6:5e:39:4e:f6:50:
         d3:24:ca:b9:81:ab:06:8a:4d:58:d4:9b:c9:75:1b:c1:5b:9d:
         76:da:83:82:62:3c:45:63:e7:c2:b9:bc:df:ca:3f:49:f8:d2:
         f0:6b:d5:88:06:23:ae:66:4e:22:c6:78:4c:52:22:06:55:92:
         3d:2d:ac:5d:da:34:f5:9e:5d:37:9f:3f:59:89:b1:8e:ce:d7:
         ca:16:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:21 2024 by rpki-client on console-fra.rpki-client.org