Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
File:                     Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft (raw, json)
Hash identifier:          Ied/YF5vdXe4Oy/qeaRFk6dThkNZQUvzB6jK4YYKMnU=
Subject key identifier:   0B:C5:46:14:25:92:45:9F:82:53:6D:BD:19:CD:E9:98:39:D8:9B:1E
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       0194C4D177CDBCE4332473487E3045DE1E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
Manifest number:          0AC4
Signing time:             Sun 02 Feb 2025 04:00:49 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:49 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:49 +0000
Files and hashes:         1: JwPrp9zPI8mSIbB_O0eMHGoYapY.roa (hash: IwCg2TuOsRRHQCPAN/Mgxb8cdQtIJjR9uHKISiCsG7Q=)
                          2: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl (hash: 5tibxBuB8kqBRTrOgpLKX7Krdr6tvzNtg09NUtMK/Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:77:cd:bc:e4:33:24:73:48:7e:30:45:de:1e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: Feb  2 04:00:49 2025 GMT
            Not After : Feb  3 04:00:49 2025 GMT
        Subject: CN=0bc546142592459f82536dbd19cde99839d89b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:ad:ec:1b:18:06:1b:b6:b9:80:08:9b:e3:
                    cc:e2:a2:93:a1:59:0f:e7:8d:c3:a3:bf:1b:3f:cf:
                    8b:a7:57:04:61:49:0b:92:23:57:66:0f:14:31:36:
                    6b:c1:f3:e4:98:53:98:69:ed:50:b2:94:da:8b:34:
                    8e:2e:2c:84:22:dc:53:2c:68:e8:9e:b8:6e:08:af:
                    24:3d:91:fb:5a:69:81:20:e5:d6:ec:41:ac:dc:0d:
                    7d:23:a8:84:e5:c7:e9:f0:82:f5:a2:d5:64:0d:79:
                    76:c2:62:35:12:d8:8a:b6:83:16:af:e8:de:2e:fd:
                    c0:5d:83:9d:c9:49:f0:d3:bd:f8:f8:d7:ef:c2:85:
                    78:9e:de:bc:f3:75:4a:e3:af:e2:50:97:4e:8c:be:
                    e2:a9:48:40:b7:77:2e:1c:e7:14:53:cf:d2:39:13:
                    31:49:6d:39:9c:34:ba:0c:14:a0:68:1a:2d:26:6f:
                    50:30:73:a1:5f:3d:cf:67:59:a6:f9:b1:0f:13:b2:
                    f7:ab:57:d5:85:70:d3:d4:be:e7:69:d0:12:10:91:
                    02:a0:00:dc:98:c6:07:1a:cd:b6:12:d7:18:fa:a2:
                    78:d3:fb:43:68:82:e0:3f:3a:b4:17:7f:21:cd:3e:
                    36:79:90:d1:5a:d6:87:bf:27:a8:d3:8e:1c:d7:8c:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C5:46:14:25:92:45:9F:82:53:6D:BD:19:CD:E9:98:39:D8:9B:1E
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:f3:2b:6d:98:1e:b6:d7:14:9a:40:5a:fb:67:b1:60:35:
         9b:ad:af:f1:66:03:78:bd:6e:79:a3:27:78:f3:70:4c:b6:89:
         34:e6:16:d4:af:5b:36:e9:23:9f:28:45:09:9b:85:c2:54:4e:
         bf:0b:c7:07:5d:47:6f:c3:45:f7:f8:96:5b:ed:5c:dc:2b:9c:
         c2:89:b4:63:fc:7e:44:50:11:4c:e8:65:c0:9e:18:f1:e2:be:
         73:10:a5:8e:9c:ce:ad:92:85:59:20:79:81:e4:e8:b8:3a:e1:
         34:ce:9e:f3:1f:ad:28:84:c3:76:b2:1e:64:fb:62:04:62:02:
         6c:de:54:05:79:df:62:25:06:ec:61:59:b6:b6:e1:a6:e7:cb:
         2d:6f:ae:ab:57:dd:e3:45:d0:91:0f:a0:ed:e1:91:1b:c0:5b:
         fe:6d:2b:f9:61:f4:4a:e0:7c:c5:b7:94:98:a8:47:4e:ab:3a:
         4b:34:04:ab:24:41:02:e7:34:50:59:63:f3:22:bf:97:83:a6:
         38:04:65:94:22:41:88:a7:7d:55:b3:10:63:ce:6d:0a:f7:74:
         fe:bb:c8:79:6d:a9:d5:14:78:9b:76:28:3f:40:6d:77:bc:6a:
         01:f7:00:9a:a4:29:f4:11:76:30:7b:d5:9b:61:b5:12:c7:f4:
         ef:b4:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:24 2025 by rpki-client