Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
File:                     ZnGexRbxFUDaTE5-S39bN32f0ls.mft (raw, json)
Hash identifier:          1S3GF5mCROaOkLapakLxCYU7x0sHCiCASlxw4f61q2c=
Subject key identifier:   D9:71:53:43:84:3D:5F:ED:75:81:A1:C8:D5:2D:E4:F4:AA:12:17:F9
Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
Certificate issuer:       /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Certificate serial:       018F8DB85D2CBCF5F320BA0D49C3A5346813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
Manifest number:          04DB
Signing time:             Sat 18 May 2024 22:00:20 +0000
Manifest this update:     Sat 18 May 2024 22:00:20 +0000
Manifest next update:     Sun 19 May 2024 22:00:20 +0000
Files and hashes:         1: Y4hQBvDOA-iSkZOvfqIEr6tmuSY.roa (hash: ipKrO0HPfwLdfQaighvL4TjTRRUNpllW0bFuf1+LKWQ=)
                          2: ZnGexRbxFUDaTE5-S39bN32f0ls.crl (hash: XKsqBdaegRNZCSKvd33hq6n2nH4bGG54p2mBB6kGHMY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:5d:2c:bc:f5:f3:20:ba:0d:49:c3:a5:34:68:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
        Validity
            Not Before: May 18 22:00:20 2024 GMT
            Not After : May 19 22:00:20 2024 GMT
        Subject: CN=d9715343843d5fed7581a1c8d52de4f4aa1217f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:d9:ec:71:e5:ea:c9:6a:0a:43:d5:79:7c:
                    60:92:5d:7d:e6:1b:60:19:6a:e3:10:e1:b8:5b:ae:
                    74:b8:0a:f7:08:5c:a8:b5:98:40:20:58:ea:58:91:
                    8e:33:21:a8:42:af:4a:e8:6e:42:96:5d:00:84:a6:
                    71:3d:b3:67:83:5f:92:2c:77:c5:2d:a0:5d:50:56:
                    1c:66:09:9a:f8:ed:85:98:c7:c4:6c:d2:6f:df:50:
                    1f:2e:ec:2b:f6:d0:4b:7e:0e:e1:f2:7b:2f:64:c7:
                    90:db:7b:a2:6f:fb:00:eb:32:b1:b0:27:87:01:a4:
                    7f:43:df:0c:ab:08:39:04:49:06:18:00:41:11:2d:
                    8b:c4:5a:8a:91:dd:d3:4d:37:d5:f3:b1:79:ae:b5:
                    09:ac:e3:e4:fa:9b:ef:fb:da:55:5f:65:86:66:49:
                    54:3a:8e:ce:61:ba:64:e4:2e:05:71:e5:d5:c2:40:
                    08:12:a8:5e:27:94:2f:0a:75:16:81:cf:a9:85:c7:
                    e7:5a:67:4c:bd:ca:b6:64:ba:66:88:e0:eb:6a:fc:
                    04:e2:a2:30:f5:e5:d7:76:eb:7f:32:3c:c1:cf:a2:
                    a7:2f:c3:ff:54:35:6c:de:07:53:b0:76:4c:3e:bf:
                    87:42:4d:4b:9e:f8:6d:89:5d:74:7f:8f:9a:6b:5c:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:71:53:43:84:3D:5F:ED:75:81:A1:C8:D5:2D:E4:F4:AA:12:17:F9
            X509v3 Authority Key Identifier:
                keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:ed:4c:9d:94:a8:48:1d:c3:0b:1c:2a:5e:fb:97:f8:b9:
         7a:00:c2:3e:a8:4c:51:a3:1d:ae:83:1f:71:19:fc:df:52:90:
         a5:66:e1:0d:0c:e3:5d:22:26:7e:0b:c1:35:41:89:15:dc:77:
         25:68:e9:3c:92:10:89:c8:b5:cc:4b:00:f6:6c:2d:9c:4e:00:
         80:4b:f4:ef:f6:15:86:5c:c6:27:ca:07:d9:6c:84:9e:e7:92:
         56:ba:b6:4f:c0:01:38:a9:c5:05:58:de:37:79:97:94:9c:da:
         87:da:eb:13:33:6f:b8:9a:27:ad:d9:26:34:27:06:c7:6b:e6:
         22:d8:ec:f5:db:23:38:17:26:62:f0:8b:ad:61:e3:ee:7b:fe:
         51:1a:9b:22:91:de:33:4c:55:0a:4d:88:ad:12:7c:1f:fb:fb:
         d9:d8:53:87:b5:15:04:5e:1f:ad:a2:ed:d8:ef:49:dc:81:6b:
         6d:54:7b:6c:71:0d:1f:04:c3:17:be:2d:64:98:bd:6a:99:be:
         e3:5e:bc:10:cf:0b:5f:97:22:bd:37:04:a0:9e:86:3a:90:41:
         01:e0:4c:cc:7e:8c:5d:91:4e:68:7d:d4:78:38:2d:74:06:df:
         40:06:f3:98:e4:d9:36:f0:67:bd:15:1f:2c:2d:ca:74:b3:be:
         56:e1:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:20:54 2024 by rpki-client on console-fra.rpki-client.org