Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File:                     zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier:          zhtZJJPrXkPWxVVdWv6oXhY0AvvQ1bhFo959ctMLyLU=
Subject key identifier:   C1:5D:DE:FA:38:BD:4F:14:B8:15:44:49:D1:F0:83:A6:98:C5:D3:0D
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer:       /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial:       018F8749718BA5B0B554809C75BF95CC1DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number:          1112
Signing time:             Fri 17 May 2024 16:01:28 +0000
Manifest this update:     Fri 17 May 2024 16:01:28 +0000
Manifest next update:     Sat 18 May 2024 16:01:28 +0000
Files and hashes:         1: h6wzQpJhqqRXLVSSNX76iJRFaAI.roa (hash: M+fHF4o4k7Ua88UXJSXnPG24mCESu8q7y7YeuYHBRGI=)
                          2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: 9yfZlGZVmrLGaoQapJPCrg16JHZyZr63c1uS6/uFLeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:71:8b:a5:b0:b5:54:80:9c:75:bf:95:cc:1d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
        Validity
            Not Before: May 17 16:01:28 2024 GMT
            Not After : May 18 16:01:28 2024 GMT
        Subject: CN=c15ddefa38bd4f14b8154449d1f083a698c5d30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:53:fa:8d:05:f7:a5:eb:dd:f9:8c:52:14:
                    32:d4:69:32:7b:83:17:03:73:f9:80:33:22:ad:e3:
                    92:0d:81:c6:2f:10:58:19:8a:c0:af:c4:f7:c7:b4:
                    04:dc:06:78:64:b7:02:d4:2b:bd:dc:fd:da:1e:05:
                    c0:65:7f:2e:aa:85:3c:ce:07:44:9d:69:53:0a:af:
                    62:a8:5b:31:5d:4e:9d:4f:17:e8:35:57:ba:96:89:
                    d0:de:3a:f5:dd:23:d7:05:43:be:d7:ed:72:7b:f2:
                    aa:38:0e:bd:a9:ca:c7:e6:e0:ee:96:ac:c2:62:35:
                    f3:eb:e5:cc:42:f0:78:00:cf:1a:f6:df:4e:27:d0:
                    47:1a:57:6b:5d:ba:8a:b7:39:05:0b:79:40:5b:66:
                    60:2d:66:a3:26:32:dd:e1:70:34:58:4d:e3:07:4c:
                    43:4e:27:28:aa:3a:9a:56:a0:94:94:75:63:ef:2f:
                    a6:10:94:f2:2d:e4:51:be:89:1c:c4:e6:82:22:70:
                    c6:eb:eb:2c:a8:8c:c6:8b:bd:01:d4:8b:72:0b:8c:
                    0e:1f:c4:69:3d:7e:cf:69:62:d8:1c:75:ba:33:03:
                    7f:ac:de:94:48:ac:75:85:7b:83:0e:9c:9c:55:49:
                    67:cb:16:ff:b7:39:7d:4a:3e:14:50:ae:00:76:96:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5D:DE:FA:38:BD:4F:14:B8:15:44:49:D1:F0:83:A6:98:C5:D3:0D
            X509v3 Authority Key Identifier:
                keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:de:b4:54:ca:69:d9:e1:23:40:26:e9:ad:8a:c8:cb:2b:
         09:b8:80:35:cf:3e:6b:de:88:3e:a3:12:c0:9e:f7:7f:41:ab:
         63:05:46:77:e4:bc:a9:21:4e:83:b0:16:08:61:8d:0c:1b:6c:
         2a:1e:b1:3f:2c:47:73:e6:80:77:e6:7b:30:28:e2:3c:29:78:
         c6:ed:c0:a6:3b:b1:07:7a:cd:47:19:a3:ae:5e:12:84:9f:68:
         23:99:64:40:56:aa:cb:2f:d4:35:f1:cb:5f:33:ef:8c:64:9b:
         2b:2f:f5:af:1e:da:e0:03:40:a0:a3:68:83:f0:68:7f:2c:fc:
         84:6f:58:8c:97:f4:f7:03:9d:5b:c8:ed:10:50:69:70:0a:8a:
         52:fc:05:c2:54:d5:24:6a:c2:92:6b:9b:6d:22:82:75:bb:fc:
         96:80:46:26:e5:10:3a:d3:b3:f0:03:32:b0:c2:06:51:87:3c:
         58:6b:6b:b2:d5:5e:51:28:29:fb:9f:ca:a4:b9:73:7f:db:a0:
         bc:96:69:26:03:cf:43:86:ff:8c:07:98:aa:8b:90:b3:82:c7:
         dc:26:04:c4:4a:7d:a6:19:cb:f2:c7:2e:bc:7e:54:ff:99:40:
         77:93:a2:22:5a:4c:23:ed:f7:fd:58:3e:a0:c5:32:b8:20:4b:
         d1:18:38:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSXGLpbC1VICcdb+VzB25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh
ZWQyMzgwHhcNMjQwNTE3MTYwMTI4WhcNMjQwNTE4MTYwMTI4WjAzMTEwLwYDVQQD
EyhjMTVkZGVmYTM4YmQ0ZjE0YjgxNTQ0NDlkMWYwODNhNjk4YzVkMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8dT+o0F96Xr3fmMUhQy1Gkye4MX
A3P5gDMireOSDYHGLxBYGYrAr8T3x7QE3AZ4ZLcC1Cu93P3aHgXAZX8uqoU8zgdE
nWlTCq9iqFsxXU6dTxfoNVe6lonQ3jr13SPXBUO+1+1ye/KqOA69qcrH5uDulqzC
YjXz6+XMQvB4AM8a9t9OJ9BHGldrXbqKtzkFC3lAW2ZgLWajJjLd4XA0WE3jB0xD
TicoqjqaVqCUlHVj7y+mEJTyLeRRvokcxOaCInDG6+ssqIzGi70B1ItyC4wOH8Rp
PX7PaWLYHHW6MwN/rN6USKx1hXuDDpycVUlnyxb/tzl9Sj4UUK4AdpZC1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFd3vo4vU8UuBVESdHwg6aYxdMNMB8GA1UdIwQY
MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt
YjFmYzU0N2I3MzIyLzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy
LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXfetFTK
adnhI0Am6a2KyMsrCbiANc8+a96IPqMSwJ73f0GrYwVGd+S8qSFOg7AWCGGNDBts
Kh6xPyxHc+aAd+Z7MCjiPCl4xu3ApjuxB3rNRxmjrl4ShJ9oI5lkQFaqyy/UNfHL
XzPvjGSbKy/1rx7a4ANAoKNog/Bofyz8hG9YjJf09wOdW8jtEFBpcAqKUvwFwlTV
JGrCkmubbSKCdbv8loBGJuUQOtOz8AMysMIGUYc8WGtrstVeUSgp+5/KpLlzf9ug
vJZpJgPPQ4b/jAeYqouQs4LH3CYExEp9phnL8scuvH5U/5lAd5OiIlpMI+33/Vg+
oMUyuCBL0Rg4LQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:13:17 2024 by rpki-client on console-ams.rpki-client.org