Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
File:                     pZDvI7RWydsg0wdCkysBf8VyTlY.mft (raw, json)
Hash identifier:          xwDqDLTwQiFftQ+lDUCuT6cgJg8J0a8sWXB1bPBqBtk=
Subject key identifier:   E5:9E:DF:FD:70:B3:B7:22:8C:D9:EB:F6:65:3A:62:F8:FD:9D:AE:CC
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Certificate issuer:       /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial:       0192343739DADFA089D6603BCF8F3D0622CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
Manifest number:          0A8F
Signing time:             Fri 27 Sep 2024 16:01:27 +0000
Manifest this update:     Fri 27 Sep 2024 16:01:27 +0000
Manifest next update:     Sat 28 Sep 2024 16:01:27 +0000
Files and hashes:         1: lFC-_S7LLjYTac5xLO2UPcTIncI.roa (hash: 6B97FrpUZf5Qr4qCJUNasTMM7nOMh4VHE+ZjJgBrD1A=)
                          2: pZDvI7RWydsg0wdCkysBf8VyTlY.crl (hash: zVmZW0UMzZReGhp7zAXlPF57yzd/+gK/A10lyyWXSDg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:37:39:da:df:a0:89:d6:60:3b:cf:8f:3d:06:22:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
        Validity
            Not Before: Sep 27 16:01:27 2024 GMT
            Not After : Sep 28 16:01:27 2024 GMT
        Subject: CN=e59edffd70b3b7228cd9ebf6653a62f8fd9daecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:aa:cb:a9:2f:98:b3:3e:62:f5:99:b2:c8:
                    68:76:1c:26:88:a8:98:6b:e7:9f:2c:85:8f:f5:fc:
                    0c:87:a3:8d:3a:c0:c4:cb:11:54:3d:b7:c7:bc:69:
                    85:43:22:02:e8:6c:d0:ea:5a:42:b0:89:8d:40:4a:
                    cd:1a:51:c5:7c:77:5e:49:80:9f:79:44:27:4e:01:
                    44:ff:67:d4:3a:21:31:3b:f1:8c:65:bb:11:9b:67:
                    18:18:f3:97:8c:81:d6:6e:f1:de:c9:f4:a8:a2:72:
                    b6:d5:88:64:99:e7:7d:f4:4c:a1:3b:b6:be:a7:b9:
                    47:85:c7:1d:6b:a8:08:2e:3e:63:bb:80:e8:4f:9d:
                    c1:8a:d0:e9:d4:97:14:dd:63:fc:c2:35:af:40:d0:
                    b7:83:17:fc:b9:a6:79:95:c0:a7:8e:e0:02:6f:7f:
                    32:c9:fe:09:d1:44:db:5b:e8:b9:05:8d:02:21:3f:
                    12:1c:1e:f7:bc:68:db:a0:bb:35:22:e7:ba:b8:c9:
                    c0:2d:72:db:df:de:b3:3c:83:ab:8d:7f:26:94:61:
                    d2:c4:c8:bf:8d:13:a0:49:3c:f4:e1:09:db:61:66:
                    7b:d7:55:2d:bc:8f:87:7f:f4:11:a2:12:7f:25:96:
                    b4:3a:e3:3b:6e:a5:28:8b:5c:44:d7:c3:ea:f7:72:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9E:DF:FD:70:B3:B7:22:8C:D9:EB:F6:65:3A:62:F8:FD:9D:AE:CC
            X509v3 Authority Key Identifier:
                keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cf:b7:d4:9c:c1:e5:72:1e:f8:23:f4:1c:34:a2:76:a9:3c:
         8c:63:23:a1:6b:d1:c3:9b:89:0c:94:21:5b:d6:21:a3:05:8c:
         81:e4:5d:52:62:78:3a:fc:8d:86:ef:84:6f:81:7a:20:67:07:
         17:e8:1c:5c:ab:0d:65:70:53:96:bb:68:35:dd:aa:b3:b2:11:
         64:55:4c:af:77:63:1c:d7:d7:30:0f:54:e2:f2:b2:d7:d7:4e:
         00:bd:ee:aa:31:e5:65:f7:74:d1:cf:22:d0:58:e0:b1:d6:9f:
         01:1b:06:11:74:5f:4c:23:a4:a9:04:64:d8:f3:26:fe:89:52:
         f7:42:81:cc:5d:fb:45:86:d1:a6:cc:87:7c:49:e0:18:72:8e:
         4b:8d:7f:ac:7f:e6:d2:03:ca:f4:5a:2a:7b:81:d2:c1:92:3d:
         c9:b3:89:7c:ca:12:5c:01:ab:8d:ff:94:e5:ec:50:37:c3:78:
         4d:34:4c:81:b1:62:d2:f0:03:8a:1b:b3:5d:dc:63:5e:7e:e1:
         d1:27:93:97:68:be:4f:ad:29:7d:14:e5:f6:2b:43:a5:53:26:
         a9:6a:5c:57:ad:9b:7c:32:ae:3a:15:8a:eb:a0:1b:a8:98:91:
         50:1f:4b:92:83:89:14:ad:32:ad:ec:aa:d9:81:d9:c2:66:07:
         81:f6:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:01:04 2024 by rpki-client on console-ams.rpki-client.org