Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          F+jjjxA/fX1Kg88KsHJXFhMd8TU1r80WG1EqHPIIPII=
Subject key identifier:   C3:4E:5E:46:C0:D3:4D:D0:AE:69:5F:F0:5B:7B:BF:53:12:5A:83:57
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       019356BF907749710F28B5DB7F26C6629B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          0662
Signing time:             Sat 23 Nov 2024 02:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:15 +0000
Files and hashes:         1: VQxizZ_dkvJ79Chr0TFzFQJF2wc.roa (hash: LLXCRTFNQ3Wwn4hTvtCaYozMFivLcmNjSOAK0FFtLUg=)
                          2: aN8UljDEm_o4M7UpCKHXqtl4tC8.roa (hash: c/++N5dSkVvG6l1KY47hs3LQEim1sNgBP02+4pU5EpQ=)
                          3: nJ0bWKVrXxw5nUMWLmYiB1K-vxU.roa (hash: z65/wMbb8QII0TkFCp2W0v/0qxprK0mocJ7aL+QpjB4=)
                          4: sff4pldm9_pyjCMQQETQOnqr1vk.roa (hash: p8HNLa7iOb3JAUNpuFRvF89gK5+3xXLKEWJ6kQ6wWTE=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: ehGe2Vbb81bkgVuT/rsfuVF3eECQ/BB2LtZlY0fSCTY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:90:77:49:71:0f:28:b5:db:7f:26:c6:62:9b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: Nov 23 02:00:15 2024 GMT
            Not After : Nov 24 02:00:15 2024 GMT
        Subject: CN=c34e5e46c0d34dd0ae695ff05b7bbf53125a8357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:c5:07:a6:3a:a6:25:1c:8d:3f:3e:57:7b:
                    42:c3:89:0c:df:9c:1a:86:a4:49:a1:53:5e:9e:72:
                    32:57:a0:5f:30:44:56:07:6b:4c:a8:09:c6:1f:43:
                    02:e2:54:4a:70:50:fc:59:e3:bb:c5:68:14:db:e8:
                    16:74:cc:da:a8:aa:02:a9:ab:32:83:83:e4:f8:42:
                    b4:46:8d:91:37:f9:85:e3:b0:40:4c:f1:32:15:79:
                    cc:44:c6:4b:08:0f:43:ca:e5:33:24:30:cf:87:32:
                    b4:7f:2b:ed:5f:05:ec:a9:48:de:a7:7b:8d:96:89:
                    7e:dd:f7:3d:9e:52:f7:7f:fb:88:a3:32:5d:15:30:
                    19:72:23:34:fe:f4:69:90:91:68:56:ef:52:30:78:
                    a5:40:8e:9b:2d:c0:df:83:9f:98:b6:6e:2c:d8:65:
                    5b:79:af:de:18:35:5d:2b:49:d9:f5:2b:7c:e1:a3:
                    18:9e:6e:d6:ba:90:a8:fb:6f:83:30:11:d8:c4:4d:
                    e9:d1:b5:27:b5:3c:66:cb:aa:98:31:24:d4:35:37:
                    10:c7:85:99:33:c7:63:89:d0:b2:3c:e3:46:3f:4d:
                    2d:35:04:18:29:aa:68:56:6c:3e:66:a6:19:a7:df:
                    ef:45:f5:71:1d:67:2d:b3:00:10:02:1b:e8:80:fd:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4E:5E:46:C0:D3:4D:D0:AE:69:5F:F0:5B:7B:BF:53:12:5A:83:57
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:98:01:21:64:e7:f2:f4:68:83:88:ba:e2:99:dd:30:cc:
         f0:c1:a0:f0:ed:5d:82:98:25:91:3c:36:21:b1:90:8d:62:2a:
         40:fc:ff:2e:99:a2:da:cc:b3:7f:7d:0e:96:19:e2:66:68:c9:
         98:69:68:a2:6c:68:3b:9e:bb:0c:dd:01:0b:7c:80:6b:0c:55:
         fb:bb:e3:df:4e:cf:da:fe:40:20:97:85:a3:6f:59:c6:f5:fa:
         38:cc:0c:d4:a7:1c:be:21:f0:9c:b9:d6:fe:7f:91:c6:46:92:
         fe:f7:59:54:5a:94:fe:5d:b8:b6:c6:39:45:c4:9a:c8:a2:5f:
         fa:1a:d4:97:62:20:e9:b5:49:0f:19:23:d4:a5:8b:db:8d:ff:
         91:7b:66:3d:b1:83:38:39:df:47:8e:36:cc:80:fc:11:40:bc:
         74:a4:b7:80:5b:1b:f0:7c:2a:e6:ff:16:f5:81:25:55:85:6a:
         23:68:3a:52:77:7d:e4:9a:83:42:98:af:e0:88:dc:80:59:f9:
         2a:29:97:37:4a:50:53:f1:69:bc:e5:2e:3d:95:3c:5b:97:7f:
         52:99:78:95:e4:37:2f:cb:ba:39:1e:77:8d:46:eb:e6:6d:82:
         90:61:21:fd:ee:2e:fd:9b:2e:0c:3b:9b:f8:09:15:b1:0f:55:
         e8:78:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:25 2024 by rpki-client on console-ams.rpki-client.org