Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File:                     zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier:          wowtXV8z8yACX2FqeH/OTuP3WqqkMogC0oe7Gi0PWZs=
Subject key identifier:   DE:0F:6C:3C:97:ED:03:2B:79:9A:8D:55:6C:B5:04:93:91:BF:C4:18
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer:       /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial:       018F866CDF7D4E1A732BDD7BE5F06B658DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 12:00:33 +0000
Manifest this update:     Fri 17 May 2024 12:00:33 +0000
Manifest next update:     Sat 18 May 2024 12:00:33 +0000
Files and hashes:         1: DLn7puMB9c1QF952DSDa_BucbHw.roa (hash: +/CrC9j4bEl57mhlbYgGgF2tqHBnCmVYfme1XlmXPCs=)
                          2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: iDoxBc/2OdnNkzc/APGV9GBV5MW3qRsjUWyitpEObpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:df:7d:4e:1a:73:2b:dd:7b:e5:f0:6b:65:8d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
        Validity
            Not Before: May 17 12:00:33 2024 GMT
            Not After : May 18 12:00:33 2024 GMT
        Subject: CN=de0f6c3c97ed032b799a8d556cb5049391bfc418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:f6:75:a2:e9:6e:7d:8d:07:df:da:bb:ab:
                    b0:85:7e:9f:6f:80:d8:35:e1:01:b4:46:f6:36:07:
                    94:e6:7f:b6:85:29:5a:7f:89:14:ef:dc:c0:56:99:
                    81:2d:dd:7a:26:fd:35:ac:34:2d:e5:7d:0c:23:2d:
                    56:e8:0b:63:21:a2:88:70:d7:56:0c:e0:40:c8:4a:
                    49:5d:76:ce:73:28:27:2d:7f:6c:f7:4e:2f:dc:07:
                    69:56:77:2e:89:b3:b2:2a:5e:21:6c:01:5e:cd:39:
                    67:25:8f:16:1e:03:ee:2e:b9:b0:2a:71:e5:f8:00:
                    bb:1f:f5:2a:d0:73:81:8e:6c:20:3b:d9:14:c3:24:
                    45:85:fc:74:ea:ca:8f:99:42:d6:d3:04:e7:94:4c:
                    89:32:1a:da:54:94:12:4e:dc:6c:e8:4b:34:2e:e5:
                    6e:ef:9f:f1:14:8c:e5:bc:a3:43:33:7e:96:2f:99:
                    1e:10:9a:f1:51:0a:02:b0:c5:cd:09:e2:43:ff:61:
                    42:6a:df:15:a8:94:68:62:6d:8f:8d:ea:99:26:56:
                    d8:eb:f8:62:d5:3f:a1:8d:93:cf:d3:9d:7c:be:43:
                    a2:1f:0d:7d:c4:9e:a5:d5:fd:3a:b0:1b:30:a8:ae:
                    1f:eb:1c:7b:b6:ad:4a:12:4d:d0:c1:d2:2e:f3:fb:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:6C:3C:97:ED:03:2B:79:9A:8D:55:6C:B5:04:93:91:BF:C4:18
            X509v3 Authority Key Identifier:
                keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7a:68:91:d6:83:cc:23:70:0f:b5:6a:85:c4:ca:f7:d4:17:
         ee:42:09:a3:60:6d:5c:1e:71:4b:ea:10:97:9c:c2:67:65:a0:
         6d:a5:bd:ca:a6:d0:40:b8:6c:39:c1:bc:0c:ad:c6:8e:f9:80:
         0a:07:05:8e:17:f9:a6:10:fd:1a:90:14:ff:f6:34:91:e2:2b:
         c1:7b:67:9f:bd:74:6b:c4:23:88:e9:3e:b9:e0:7a:3d:a5:7d:
         46:55:b3:5c:9e:a8:05:e5:10:57:57:7a:0f:55:63:8f:39:d3:
         6c:ba:d7:d1:5a:cf:5a:0f:78:8e:16:40:d8:33:c9:9e:5e:6a:
         b3:05:14:1a:e9:ac:71:16:25:08:bc:a8:57:15:19:5c:f9:24:
         cb:92:cf:08:0f:23:f2:05:4b:b0:fc:d1:10:13:e2:19:35:9e:
         5b:ef:3e:85:9e:f1:f1:03:0c:f4:0d:39:25:e5:46:4f:32:76:
         cb:93:d6:73:8d:53:d6:7b:1b:03:f4:98:a4:a5:c2:d2:34:1a:
         19:46:e1:bf:96:e3:7d:90:52:13:82:b1:b7:5b:28:a8:09:31:
         22:85:8d:3e:36:8a:62:b2:eb:5f:fe:2b:cd:6f:5b:d5:d6:35:
         97:67:07:e3:15:98:06:a0:cc:82:f7:a8:fa:6f:df:03:a9:1b:
         dd:2f:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:15 2024 by rpki-client on console-fra.rpki-client.org