Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File:                     MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier:          GC9M3/QtjpCTIj/Mf3pTr3bWfFEID3L4SwVripwoy8w=
Subject key identifier:   AD:0E:AB:EB:57:CD:90:57:26:3D:06:AE:4E:A9:4C:F1:9B:D2:92:C8
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer:       /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial:       018F8748D1FD19A534107D8375C4C5205571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number:          04DE
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: 1zevTH5DkNW3Z18DcnPxWGoVL2E.roa (hash: PvTcwAMckIW2+t2kivPcPjBTplgq5N7Am4+oMiCVV6U=)
                          2: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: qhd2T90jagzmdaVYYFPj6j3hlyIQ47KlqS7wDMs9UGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d1:fd:19:a5:34:10:7d:83:75:c4:c5:20:55:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=ad0eabeb57cd9057263d06ae4ea94cf19bd292c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:cf:5a:b5:cd:03:1c:33:d5:df:8f:17:01:
                    10:f9:74:a9:97:87:02:3f:12:06:40:fc:1a:bd:fb:
                    39:6e:d6:c8:23:6e:08:90:82:22:23:c0:55:53:4d:
                    a3:8b:75:65:00:c1:d7:69:3b:19:1c:56:dd:f3:d0:
                    71:88:cc:47:d8:71:e0:b0:4b:c2:2e:95:7d:e0:84:
                    49:34:61:05:fa:e4:56:8d:8a:29:1a:fa:c1:53:f9:
                    a4:3a:7e:54:5e:e3:49:54:a3:7b:be:9a:00:aa:e4:
                    61:63:05:be:f8:74:eb:56:38:7b:6c:95:82:17:01:
                    73:a7:31:9e:d8:cb:8a:4b:0d:51:ac:8e:57:46:44:
                    76:8e:5a:d1:e0:e4:b1:d3:54:15:31:f0:78:3f:18:
                    be:f1:db:6e:e1:96:3a:d6:33:3e:38:34:1b:05:61:
                    17:a2:cd:9c:65:15:9e:57:ad:eb:21:41:ad:01:27:
                    0b:91:45:b3:2f:83:7c:b1:72:70:37:dd:65:89:fa:
                    97:77:21:fb:f1:fd:0f:33:48:29:2d:35:c8:7d:fc:
                    36:51:2b:ea:38:7e:bb:f9:6b:bb:7d:60:bf:59:42:
                    9d:46:43:ab:2c:a0:c5:64:73:0c:e6:cc:98:b7:d4:
                    85:68:6f:55:3c:51:c3:7a:97:b0:6d:5d:82:cf:1f:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0E:AB:EB:57:CD:90:57:26:3D:06:AE:4E:A9:4C:F1:9B:D2:92:C8
            X509v3 Authority Key Identifier:
                keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:01:74:3a:75:c8:1b:0e:55:4d:5f:54:9c:89:13:aa:73:2b:
         44:28:07:dd:c9:88:87:e8:37:3f:c3:45:d9:56:16:c7:79:58:
         35:b4:29:b7:1b:4b:2e:92:f4:0f:d2:ac:b9:2d:c9:f1:c2:32:
         db:27:ae:11:ba:1f:42:74:c4:ca:48:14:ca:4a:20:57:b7:25:
         4f:b7:a7:60:c2:dd:03:2b:b0:5f:df:8c:39:d7:03:52:86:97:
         86:1f:65:03:ea:36:57:8d:3c:90:6e:7d:96:4b:b4:98:fa:21:
         d1:1e:17:9c:8a:ed:0e:69:b1:16:ec:65:0b:c7:2b:97:f7:3a:
         2f:a6:06:4c:ee:ce:b1:7e:ff:7a:ab:f0:da:6e:5e:b6:f0:63:
         c1:e7:c0:07:4d:29:25:ff:e9:14:56:8c:e8:4d:9a:16:a0:77:
         1e:42:3f:9e:43:b7:6d:a7:72:1b:d9:c2:78:15:58:62:db:62:
         ff:2c:f7:7f:49:5a:fd:e0:96:ec:9b:e8:05:ab:ae:36:6b:1a:
         dc:8d:29:31:26:85:53:4b:e7:70:57:77:34:68:b2:04:41:47:
         3a:19:30:02:a9:66:4d:c8:88:69:23:7e:68:4c:8f:5e:16:4a:
         59:70:6f:b9:7a:4e:7d:82:88:d9:b9:2b:c4:f1:45:79:21:30:
         af:9e:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:12 2024 by rpki-client on console-ams.rpki-client.org