Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft
File:                     Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft (raw, json)
Hash identifier:          3rBWmJwzTbCaq7kqlXnKwBMcj1dnL4jWuO30elLpnUQ=
Subject key identifier:   C3:81:B1:1A:29:78:EF:B7:27:D5:41:45:C7:FC:4B:1F:4C:DE:DC:08
Authority key identifier: 66:1C:B5:D3:F8:FC:87:C1:6B:2D:F9:27:D7:C3:96:62:6F:12:45:54
Certificate issuer:       /CN=661cb5d3f8fc87c16b2df927d7c396626f124554
Certificate serial:       018F67196E16C9E6A697131A2EBA652AF7DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zhy10_j8h8FrLfkn18OWYm8SRVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft
Manifest number:          CD
Signing time:             Sat 11 May 2024 10:01:10 +0000
Manifest this update:     Sat 11 May 2024 10:01:10 +0000
Manifest next update:     Sun 12 May 2024 10:01:10 +0000
Files and hashes:         1: A3_1DFxWhISGR3qRrk0cqzQ_oJU.roa (hash: BBytHZLgmBi1+Gs7BC3AjtpIs+dsTxilXDE0/DUcWSY=)
                          2: Zhy10_j8h8FrLfkn18OWYm8SRVQ.crl (hash: r3BW3YIVa5CoFVU4a5t6If6iZTEc3ghE0yPXn40Rmfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zhy10_j8h8FrLfkn18OWYm8SRVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:67:19:6e:16:c9:e6:a6:97:13:1a:2e:ba:65:2a:f7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661cb5d3f8fc87c16b2df927d7c396626f124554
        Validity
            Not Before: May 11 10:01:10 2024 GMT
            Not After : May 12 10:01:10 2024 GMT
        Subject: CN=c381b11a2978efb727d54145c7fc4b1f4cdedc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:47:ef:48:fa:bd:59:be:8f:79:2d:84:4c:
                    44:37:2c:3c:3e:1e:45:82:6f:d8:10:86:9d:50:b9:
                    a7:1d:0d:db:34:79:0d:ab:d8:ed:cf:3b:6e:20:6e:
                    7c:42:1d:0e:ee:4f:45:d2:6c:da:70:da:f6:77:3c:
                    d9:32:12:51:4a:3e:50:76:62:d3:50:f3:26:fe:56:
                    ea:3c:6d:5f:f1:b2:7a:2b:51:62:17:ce:16:c1:e1:
                    7f:6b:43:c2:17:5d:d7:b3:69:60:b1:1d:e3:1b:81:
                    da:1d:d5:f1:78:03:51:b2:58:5e:cd:18:eb:18:03:
                    2c:d7:2b:cf:c5:bc:3a:7a:65:62:1b:fa:71:86:c7:
                    e5:f7:72:ed:1b:3f:c1:50:6e:cf:0a:ad:ce:ab:1d:
                    15:94:78:98:d7:71:2f:9b:12:ce:52:c3:0a:6a:e7:
                    bb:71:8a:49:dc:ae:bc:a5:a9:53:9a:e1:75:b5:49:
                    4c:49:55:da:2d:48:63:29:9c:6c:c1:72:e9:87:5b:
                    93:04:2e:e2:c2:4f:2a:a8:25:44:a0:18:a7:6b:3c:
                    27:dd:96:63:e8:17:bf:44:3a:31:98:b8:d9:17:c6:
                    97:87:64:d8:9e:a1:20:5b:11:7c:27:71:17:83:6c:
                    b2:38:8a:47:2b:64:b8:f5:7f:a5:29:81:ee:20:49:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:B1:1A:29:78:EF:B7:27:D5:41:45:C7:FC:4B:1F:4C:DE:DC:08
            X509v3 Authority Key Identifier:
                keyid:66:1C:B5:D3:F8:FC:87:C1:6B:2D:F9:27:D7:C3:96:62:6F:12:45:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhy10_j8h8FrLfkn18OWYm8SRVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:55:7d:8f:20:9f:1c:9d:ea:08:f4:90:be:28:85:0c:0a:7a:
         69:56:33:17:15:c1:82:36:f7:30:e1:5b:73:8e:21:ce:0b:89:
         fc:74:54:0a:db:74:85:07:59:2f:88:dc:27:69:3e:a5:a2:43:
         72:e7:eb:60:32:b8:47:c3:8f:66:35:04:cb:d3:d8:dc:70:00:
         06:64:2d:bb:37:20:af:42:73:02:0d:0c:f8:df:6e:da:c1:d9:
         f1:e8:4b:a3:aa:7a:a6:78:b3:39:df:8f:eb:ef:0f:dc:cb:a4:
         1a:ca:b3:d8:62:8f:bf:4c:86:58:f4:15:61:09:43:46:0b:d5:
         36:27:ad:c4:03:41:ed:c5:33:56:d4:49:7e:e9:96:27:61:d5:
         3a:87:1b:19:29:a1:54:e1:56:2a:db:4e:46:7d:fd:58:85:96:
         67:11:2b:0d:55:1f:59:70:28:2f:2b:01:c2:18:d1:01:89:e6:
         12:da:d5:06:ef:95:03:ed:fc:8b:bb:00:af:73:95:e7:65:7f:
         92:dd:d3:8c:1c:a4:26:17:88:81:80:5c:0b:96:5c:9d:87:f3:
         f5:bc:6d:c5:bb:93:a8:30:b9:6a:d3:2f:a5:ce:61:10:63:a0:
         38:9a:a4:e7:b8:38:a0:32:1e:cb:3a:89:9e:3d:06:9d:24:4b:
         c6:12:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 13:14:15 2024 by rpki-client on console-ams.rpki-client.org