Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
File:                     zPKS2CwKIlLdMoWihzMfRFDtNZo.mft (raw, json)
Hash identifier:          mn2R4Igua+lPEsixfw3NdV8lZz3aDwydgcsfF9nDz/g=
Subject key identifier:   24:82:23:1A:F2:5F:4B:E7:C6:57:DF:0D:64:52:C8:38:C8:4B:D0:8A
Authority key identifier: CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
Certificate issuer:       /CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Certificate serial:       018F866C908C6A69AE71AA6CA23EA68FC080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
Manifest number:          0551
Signing time:             Fri 17 May 2024 12:00:12 +0000
Manifest this update:     Fri 17 May 2024 12:00:12 +0000
Manifest next update:     Sat 18 May 2024 12:00:12 +0000
Files and hashes:         1: ZxZmylmgr70ikLsaLCL-y5se2ko.roa (hash: BjYX1zdgsHxyvYn2GWvSLuGpF1uaMvdoto+Hpgj4AXI=)
                          2: zPKS2CwKIlLdMoWihzMfRFDtNZo.crl (hash: 3OLZIGUFUIc+IrTkkaAtfZWh8MCf8MU82fNgD58he20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:90:8c:6a:69:ae:71:aa:6c:a2:3e:a6:8f:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf292d82c0a2252dd3285a287331f4450ed359a
        Validity
            Not Before: May 17 12:00:12 2024 GMT
            Not After : May 18 12:00:12 2024 GMT
        Subject: CN=2482231af25f4be7c657df0d6452c838c84bd08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:63:19:11:ea:5e:8d:41:ca:11:57:50:26:
                    47:d6:78:25:7f:1b:d1:4c:db:ec:f3:c6:96:42:4a:
                    6f:e1:bd:66:9d:d7:be:ab:0b:ca:b7:9d:48:8e:9a:
                    16:45:49:38:2d:96:a7:ba:45:35:79:b5:92:e2:7e:
                    be:42:9d:a4:17:df:eb:72:b3:f6:9e:25:82:48:86:
                    e3:9b:f3:c1:7f:bd:4a:26:bb:d3:1f:6b:f4:a4:23:
                    24:c7:0f:72:3d:5c:00:d7:38:05:05:ea:a4:6b:c7:
                    ff:ed:3a:39:e2:8e:fe:e8:61:ff:3d:62:1d:9e:4d:
                    37:fe:3b:36:c7:6c:a6:60:96:bf:05:ba:32:25:38:
                    ac:b8:c9:48:29:f0:64:71:39:9d:2e:54:b4:19:6c:
                    62:8f:e0:9a:2d:0a:37:80:07:84:e6:fc:cf:52:da:
                    16:02:62:58:fe:e1:37:66:bd:d7:73:bb:4b:a2:72:
                    24:55:43:16:6e:91:fa:80:b4:de:1c:08:95:92:fd:
                    bb:8d:14:88:a3:45:33:8f:02:64:19:91:2f:d0:5f:
                    aa:63:89:ce:a4:a4:3d:32:e6:90:56:34:75:46:50:
                    e8:8f:52:b7:9a:51:b7:87:1d:f2:4b:d7:07:c2:a2:
                    b9:b3:ff:61:1c:51:5b:1a:dc:5d:04:2e:f3:9d:08:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:82:23:1A:F2:5F:4B:E7:C6:57:DF:0D:64:52:C8:38:C8:4B:D0:8A
            X509v3 Authority Key Identifier:
                keyid:CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:68:39:4b:02:9a:a2:4e:31:2a:4e:df:9b:db:b0:96:14:e8:
         48:fb:77:ba:a0:8a:42:2d:d0:9a:ae:73:8d:9f:ca:2b:04:f5:
         b0:6f:f9:e1:29:85:de:06:d2:39:ae:4c:ec:05:96:76:5a:d0:
         ed:29:e0:01:25:5d:05:60:67:d8:95:02:21:fa:e5:d8:9b:1a:
         43:8d:2f:7a:dd:6f:70:46:a3:1f:bf:b5:6b:dd:f9:33:77:25:
         1c:d2:a1:38:70:6a:05:da:be:b1:1a:95:b5:8a:27:a8:2e:f2:
         e1:4b:6e:df:b9:33:8d:3f:28:dd:17:50:c5:ee:8a:a2:64:6f:
         40:9f:9f:12:7c:f3:8d:70:28:3a:a0:7a:ed:0a:4b:b2:c6:96:
         93:2b:b8:3a:bb:a0:eb:cd:6a:98:63:7f:d1:85:de:e1:3e:58:
         b6:c0:c7:e5:9e:45:a8:5c:73:8b:ea:71:cc:06:74:01:de:0a:
         68:4a:a1:2e:a0:42:bc:8f:4e:50:92:8f:56:28:45:70:21:dc:
         a7:7f:44:08:e5:10:96:eb:b9:14:29:7f:b6:9a:91:2e:8b:34:
         df:cb:45:97:c0:6c:85:92:6e:6c:39:92:35:13:cf:53:6c:4b:
         06:f4:9e:64:d4:d5:ac:41:0d:ac:dc:78:e8:ac:2e:3c:3e:7b:
         81:30:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:34 2024 by rpki-client on console-fra.rpki-client.org