Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File:                     z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier:          inkh3EjR7mSrgvu9nSdUiFJtIvXCOpv5p6ZI/fdUsxw=
Subject key identifier:   18:51:01:76:03:12:A3:A1:47:03:1E:8D:05:96:67:51:D4:89:8E:BE
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer:       /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial:       018F8748DF664A8AFA323A2A87DE7152CE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number:          0927
Signing time:             Fri 17 May 2024 16:00:50 +0000
Manifest this update:     Fri 17 May 2024 16:00:50 +0000
Manifest next update:     Sat 18 May 2024 16:00:50 +0000
Files and hashes:         1: C-nUdNwj2tk44oXG0HnlL84BUow.roa (hash: /8DkYI83MeWX+uVUnpcdCdW7iEHSL/JDZvDpDZzxNec=)
                          2: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: sJZm18Xxzc5kt9p6FHyT2sQkslhXjDKBsRMwOBLRfNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:df:66:4a:8a:fa:32:3a:2a:87:de:71:52:ce:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
        Validity
            Not Before: May 17 16:00:50 2024 GMT
            Not After : May 18 16:00:50 2024 GMT
        Subject: CN=185101760312a3a147031e8d05966751d4898ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:1c:3f:69:13:3e:04:6f:5e:4c:48:9e:4d:
                    f6:c9:29:6f:0e:ff:3f:bc:94:ba:e8:29:6a:10:73:
                    a9:5c:d1:9e:4b:2b:b8:4e:86:06:fc:fc:dd:34:16:
                    b3:e8:eb:65:49:12:7f:f7:b1:e4:48:d4:5d:15:e6:
                    fb:11:18:32:c9:5a:05:37:be:40:c7:90:aa:61:d9:
                    0d:d8:64:6a:e7:dc:0f:c5:c7:1b:1c:bc:dd:c5:3c:
                    62:43:cf:2b:1c:aa:95:fa:95:eb:bf:7c:a4:16:10:
                    78:32:55:f4:1c:fe:f0:aa:41:9b:11:0a:91:58:00:
                    26:f7:8a:b4:61:bc:e8:5f:22:43:cf:a3:91:5c:b2:
                    15:f2:42:12:53:7f:94:a8:33:0c:4a:54:16:cf:eb:
                    af:99:76:8c:91:bb:cb:ec:b0:19:f4:70:27:7a:37:
                    31:4a:11:31:4d:d2:e6:1a:86:ba:92:dc:8a:0c:78:
                    62:69:03:13:42:00:36:f1:8a:f1:92:9c:83:82:03:
                    d1:92:14:38:ec:82:77:ce:21:13:40:a5:52:61:b0:
                    5b:d4:6f:08:d2:93:b6:54:3b:8c:04:1c:a2:bc:63:
                    0c:00:64:24:fb:c0:e3:01:1f:14:db:74:83:20:82:
                    0c:84:41:b1:c8:02:d3:17:5a:95:a4:46:ec:9c:22:
                    fd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:01:76:03:12:A3:A1:47:03:1E:8D:05:96:67:51:D4:89:8E:BE
            X509v3 Authority Key Identifier:
                keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:e4:66:4f:7e:ad:97:fb:5c:ac:0b:ef:1f:fe:14:cd:09:
         d7:de:b8:4d:99:7d:d1:0e:f7:f2:bd:5b:06:68:80:22:90:84:
         1a:95:65:eb:56:40:d8:99:18:b7:c6:a5:77:4a:78:1c:24:a9:
         48:d4:66:a7:dc:8b:68:38:d1:e3:28:aa:31:4e:ae:ab:b9:80:
         ef:a7:b8:42:fc:3a:2b:48:e7:af:8a:90:78:56:d3:12:b8:07:
         0a:5b:e4:af:e1:f8:9e:4e:3f:b6:cd:09:e1:d6:84:bf:9a:cd:
         ff:e6:78:9f:eb:d9:75:06:62:3c:ab:e6:50:fc:82:bf:3b:44:
         48:f0:5e:8a:b0:2e:71:a1:af:2c:0c:1b:57:e0:20:c2:e2:3a:
         b9:39:7b:dc:da:8f:52:52:69:d4:88:17:fa:7b:b5:69:0c:4c:
         5b:ca:e6:98:c7:ba:d3:e4:48:47:4d:e6:42:98:8e:c2:95:fe:
         91:03:eb:3d:17:10:0b:d8:08:4f:bc:bb:47:4c:78:7c:d0:86:
         9b:d6:c7:49:3c:91:9a:4c:54:db:00:65:aa:f2:6d:08:de:98:
         48:af:6f:14:54:ee:09:f1:90:e7:10:f6:5c:31:7f:1b:fa:68:
         89:78:d3:f4:61:ef:11:9b:99:5b:ac:a0:34:4c:0a:33:6a:17:
         2b:b5:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:43 2024 by rpki-client on console-fra.rpki-client.org