Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File:                     ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier:          hiHE6bXTm4TNcHpI4O1svETQ1FYWwEEyHWfR0UrYQlY=
Subject key identifier:   5C:C4:83:99:D1:4E:B5:06:5D:24:BA:D9:B0:91:4C:2C:EF:2C:71:0D
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer:       /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial:       018F88249245B2D0C2B5F2478DDB4EC0821C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number:          0DAA
Signing time:             Fri 17 May 2024 20:00:49 +0000
Manifest this update:     Fri 17 May 2024 20:00:49 +0000
Manifest next update:     Sat 18 May 2024 20:00:49 +0000
Files and hashes:         1: QLKfK0P8R7LqM9CK4kJ_SY5x1yY.roa (hash: WXa6ltHcBIyuvSom5sMG0IGe+/4CLpOE/7HiZqVYobQ=)
                          2: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: Ljlj2KtFjyK10Fvan9qZjWz2Yx+1XOhpDRm2EdtLNSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:92:45:b2:d0:c2:b5:f2:47:8d:db:4e:c0:82:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
        Validity
            Not Before: May 17 20:00:49 2024 GMT
            Not After : May 18 20:00:49 2024 GMT
        Subject: CN=5cc48399d14eb5065d24bad9b0914c2cef2c710d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:d4:87:b2:9d:f1:63:37:1a:51:e7:17:bb:
                    62:67:e3:27:75:7c:7a:9c:fc:55:5b:2b:98:bc:b7:
                    25:f8:ad:0c:81:3f:00:24:d9:c2:72:b0:25:13:f8:
                    25:47:b2:f6:a1:2c:d6:02:da:be:42:af:d9:4a:06:
                    c4:d6:16:7b:39:f4:27:29:98:05:ef:2f:aa:67:44:
                    31:f3:ab:85:c4:33:0d:53:92:27:09:d5:e1:e5:c8:
                    22:00:b5:2e:e4:70:f4:19:68:89:58:97:9d:a4:e1:
                    e1:8f:0c:fa:ee:39:74:c2:a6:9b:ce:0b:61:fd:5b:
                    be:5b:20:96:ae:ea:a3:32:3f:65:64:10:42:f0:2d:
                    f6:39:30:b2:c1:a7:44:1b:0c:e8:b3:04:ab:44:ae:
                    c7:ef:b7:57:85:43:e2:3b:e4:65:73:af:04:52:10:
                    01:19:3c:e9:4a:26:99:e4:64:c8:ca:0c:62:fd:3f:
                    a7:b9:5c:b4:31:0d:8d:55:1d:ca:fe:1e:e8:24:f2:
                    5f:8c:34:8b:c1:51:fc:b9:26:8c:6b:5e:3d:b1:44:
                    0e:f6:02:03:c7:b1:de:0c:90:e8:c6:1d:17:90:bc:
                    27:d7:3b:dd:6b:95:7b:ed:5d:80:24:21:f1:8f:f1:
                    b2:9c:9a:30:2e:a9:0e:aa:30:09:8a:3a:59:26:30:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C4:83:99:D1:4E:B5:06:5D:24:BA:D9:B0:91:4C:2C:EF:2C:71:0D
            X509v3 Authority Key Identifier:
                keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:30:9c:6f:0e:be:2f:e5:93:2a:20:95:ce:69:48:d3:2b:
         1e:12:e7:29:6a:d3:3c:25:34:8b:37:5c:84:8f:16:40:9c:c9:
         df:72:66:f5:81:58:49:ef:1a:35:ba:6b:03:c5:80:f2:b1:f4:
         70:4d:c5:d4:90:99:e4:79:ae:02:e3:ca:0f:95:24:eb:e3:ef:
         35:fb:7c:92:4e:ec:3f:40:d4:14:8a:d3:6d:d9:58:e7:1a:ef:
         7d:99:b4:f1:91:6e:4f:6e:95:03:0f:fd:2e:6b:53:df:65:0f:
         8a:e4:24:62:4b:9e:c8:7c:26:69:cf:28:11:ac:3a:bf:1c:dc:
         47:c1:9b:4d:e4:ef:5c:92:80:8d:d3:ef:87:9c:bc:8d:5e:37:
         a9:6b:f4:4e:b7:61:bb:4b:91:66:2e:4d:8f:28:0b:a2:bc:e3:
         c3:00:fa:0b:dd:06:f8:46:72:e0:2a:f1:90:cb:a3:21:3b:9d:
         97:29:85:a7:b2:0d:de:78:9b:54:6a:bc:ee:b5:a3:fa:ba:30:
         ff:42:67:e8:ed:d9:81:7a:22:af:94:1e:c7:ad:db:bd:96:bf:
         8e:30:c8:e5:c0:bf:2c:05:ca:8c:d7:ad:73:a8:90:e5:54:76:
         cf:e5:38:22:9e:39:64:8b:e3:c2:7a:f1:21:db:a4:cf:2f:69:
         95:09:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:44 2024 by rpki-client on console-ams.rpki-client.org