Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File:                     ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier:          SeDsRkfftLc6WXwZXHwsR7jojRiZH5IzK4vHeHRpZcA=
Subject key identifier:   E4:BD:6B:13:2E:6D:C0:97:75:F5:98:E8:05:E4:E3:AC:0E:B7:65:B5
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer:       /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial:       019351D08E30A7E45AEA1602869BEAC2A519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number:          0658
Signing time:             Fri 22 Nov 2024 03:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:42 +0000
Files and hashes:         1: 4Eb9KGKZY9NxVOKsrjX-2cNJj3E.roa (hash: 3FgfUFgiflChb/gLDZfC3/BDd8K74Rfgrp/92kztf0k=)
                          2: K1e-UIsa18VTRAdTLxx6aQpnLlw.roa (hash: OvUtmE3q4LOnTyLOy3c+ITczxqv6dd4unY32JsmC1Hk=)
                          3: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: uBoO8amNUIGlJrDX0X7m/2uGzrxLoVwqRm2zjXSRDIs=)
                          4: hd6PJV56rpUsD-C7hZvztdDrBrw.roa (hash: XDDYiJDYIBzoov4I3hBMR9OGQY13JDMXzqkmmj+yYyg=)
                          5: s3lxIQikf-kvFBfFLVcBR_LmENs.roa (hash: bpglwFRWvAdaN/CZmd+F2PC7F9XjYGBk2cB4UyzudhA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:8e:30:a7:e4:5a:ea:16:02:86:9b:ea:c2:a5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
        Validity
            Not Before: Nov 22 03:00:42 2024 GMT
            Not After : Nov 23 03:00:42 2024 GMT
        Subject: CN=e4bd6b132e6dc09775f598e805e4e3ac0eb765b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:11:44:31:5d:b6:0f:e7:e4:e0:bf:28:1a:
                    5e:f5:f4:b5:c3:ae:aa:4e:0b:bf:75:46:2a:db:a6:
                    98:05:87:59:1b:bd:da:1d:0d:de:22:7e:be:55:2a:
                    c8:39:2c:85:6d:df:c6:c4:f8:14:ea:f5:3a:79:f2:
                    a7:7c:7f:54:a2:5c:71:19:cf:5a:08:9b:12:7b:07:
                    8c:ec:c7:99:e5:6f:ce:e9:e5:ee:f9:7d:59:a3:aa:
                    0e:62:d1:ee:a9:08:94:5a:17:49:83:2e:ba:b2:61:
                    93:02:6a:18:35:d2:5c:f1:04:d5:dc:b5:1c:5f:49:
                    4a:ad:0d:f6:f5:2e:a9:27:e0:55:dc:57:57:72:66:
                    86:11:b0:5d:69:8b:2c:60:1a:db:cf:ca:1d:10:80:
                    1c:e7:b6:7e:ab:fb:9e:7f:48:6c:02:15:eb:58:26:
                    d9:95:52:33:5e:da:f2:bb:17:8c:b1:2a:74:f7:c6:
                    e3:32:cf:80:04:71:b0:0d:77:aa:66:6d:db:50:bc:
                    b5:e2:cc:b4:21:66:d2:08:6a:f9:0a:42:1a:74:ab:
                    1b:7b:03:b7:63:2a:53:3a:c8:76:5e:4b:9b:4b:01:
                    14:2f:80:b3:12:e8:8c:9c:a5:47:c1:b6:b1:07:19:
                    38:e0:bb:9e:3e:0a:7c:da:1b:b9:fe:00:45:7e:d9:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BD:6B:13:2E:6D:C0:97:75:F5:98:E8:05:E4:E3:AC:0E:B7:65:B5
            X509v3 Authority Key Identifier:
                keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:32:bc:9e:cf:17:56:8f:35:9b:4f:92:41:77:9f:56:1f:
         e3:be:71:5c:69:68:45:85:4e:e0:36:1f:68:f4:75:70:77:bf:
         e9:e2:92:c1:92:76:0b:6a:39:2d:1c:cb:1d:76:39:6a:40:7c:
         e2:96:51:1a:c0:10:b8:a8:b8:14:5b:e8:54:34:e2:55:90:23:
         7f:b7:69:66:8a:97:e7:9f:7a:b7:fd:9f:e6:73:a0:87:78:44:
         f8:14:dd:f1:b1:c4:d0:8f:59:eb:40:83:31:12:35:ed:07:9d:
         5c:4f:c9:db:b0:f6:da:7b:a2:fc:0b:5e:11:15:b2:fa:a4:64:
         4b:90:f2:02:3e:9d:bc:14:b5:5a:93:d9:16:ee:7b:e4:77:f7:
         78:77:cb:e8:7d:e7:8d:63:77:cf:32:36:51:dd:d2:b1:94:ad:
         dd:91:e2:fb:ea:b0:0d:90:f4:39:a7:cc:cd:b6:e4:ff:38:7f:
         1d:8d:77:9f:e7:be:51:8b:3d:c6:2a:64:de:15:1a:39:3a:64:
         73:93:e2:e7:f8:fc:69:b2:e2:bd:bf:73:f3:ed:1f:90:25:ca:
         da:6d:f2:f8:ca:dd:31:a8:86:57:15:03:97:cd:6d:92:0a:b2:
         39:d4:ca:4a:92:b3:97:33:28:12:be:36:38:5e:f1:07:2a:e0:
         5c:83:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:50 2024 by rpki-client on console-ams.rpki-client.org