Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
File:                     ZnGexRbxFUDaTE5-S39bN32f0ls.mft (raw, json)
Hash identifier:          +8DiLcL35+iPJ9WqTwalJPs8o/NR2PU1Cx49vHj6U4Q=
Subject key identifier:   9C:45:D9:4B:AA:C0:EA:1A:48:3F:0D:20:7A:EA:7F:D0:DA:28:76:49
Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
Certificate issuer:       /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Certificate serial:       019648FC8F8D3CD5DB9DE34D12485393891B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
Manifest number:          0858
Signing time:             Fri 18 Apr 2025 13:00:33 +0000
Manifest this update:     Fri 18 Apr 2025 13:00:33 +0000
Manifest next update:     Sat 19 Apr 2025 13:00:33 +0000
Files and hashes:         1: ZnGexRbxFUDaTE5-S39bN32f0ls.crl (hash: wX1/2iZLiHp7EfTIooPIwMEPKgoAEFuZ3kTlDrA8XrY=)
                          2: m2QATzNu0SRSUTMmrV_23UYzqCU.roa (hash: iD9hVdOJHc5GBYHSyd+djF2Re6JSu/DsX978dRZjYtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:fc:8f:8d:3c:d5:db:9d:e3:4d:12:48:53:93:89:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
        Validity
            Not Before: Apr 18 13:00:33 2025 GMT
            Not After : Apr 19 13:00:33 2025 GMT
        Subject: CN=9c45d94baac0ea1a483f0d207aea7fd0da287649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:5d:65:cc:49:46:f8:95:21:c8:f8:b2:ed:
                    47:a5:e0:e6:4f:34:12:08:aa:53:05:9b:3d:5f:d9:
                    ca:1d:ae:e0:76:c0:42:99:ee:0a:cd:fd:4d:3b:d4:
                    8a:a9:d0:61:82:23:55:05:4b:1c:7b:e0:ac:4c:6d:
                    76:45:4c:f3:c1:89:4f:80:00:0c:8f:08:11:ba:ea:
                    a3:3d:81:45:e7:0d:4a:25:41:c4:db:df:30:4c:6e:
                    8c:31:55:ad:22:37:4e:57:2f:39:1c:db:e1:9d:24:
                    32:1a:b2:7c:49:ee:10:5e:9f:3b:1f:b1:06:bc:1c:
                    7b:06:3e:c8:c4:be:ab:d0:49:66:dd:c6:f7:b6:ad:
                    4c:f6:03:47:44:af:7f:84:3c:99:ba:d0:d7:27:a0:
                    e4:86:86:2e:b7:11:9a:e8:c8:2b:21:61:b4:ce:6d:
                    ef:6d:36:48:0a:52:80:7e:03:fd:b7:82:c8:e0:a9:
                    d6:eb:4d:d6:aa:aa:38:8b:16:f3:b6:ac:86:b5:2f:
                    90:77:fb:c8:d2:62:28:f0:34:cd:05:d9:d4:61:9f:
                    71:9a:2f:92:3c:7d:5c:4a:97:8a:17:69:18:68:1b:
                    54:2e:36:32:67:cd:52:ca:2b:93:66:14:77:4f:53:
                    28:90:42:10:2e:7e:cf:b9:32:5f:14:bd:2a:09:4c:
                    b6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:45:D9:4B:AA:C0:EA:1A:48:3F:0D:20:7A:EA:7F:D0:DA:28:76:49
            X509v3 Authority Key Identifier:
                keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3c:a4:a5:5e:54:a2:8e:24:b9:2e:8f:77:97:92:59:02:af:
         83:c5:a9:df:fc:e9:99:ef:d7:b8:97:2e:c0:95:e1:34:b1:75:
         a7:d2:f0:6c:42:39:68:46:e3:a8:34:84:8a:a4:40:2f:0c:92:
         b9:8e:ec:93:83:d8:b7:60:35:b7:63:93:bc:24:35:48:5a:d8:
         43:ab:84:ea:22:38:08:ab:5f:6d:b8:1d:38:48:9e:7d:4f:c2:
         cb:88:e2:5a:22:40:cf:0a:7d:d7:61:96:67:86:0d:bb:b4:be:
         68:2d:ef:21:9d:ee:cb:4b:a1:8a:b7:08:81:99:76:32:67:6a:
         0a:6c:14:de:ff:8b:74:28:71:70:5c:82:6d:db:69:e9:66:c3:
         33:e7:21:61:ab:9a:d7:ef:04:04:4b:ee:2f:9f:bc:e3:90:27:
         f8:d7:cb:8e:a5:c1:bc:9a:31:f1:ba:6a:2f:32:f3:25:37:14:
         ca:8b:aa:51:9e:b6:38:4d:ee:90:b8:4b:4c:60:9c:0a:1e:a6:
         6b:3a:bc:0e:7b:72:ac:c1:20:ca:b7:21:4b:cf:b5:ce:7f:00:
         2f:3a:cd:0c:9c:33:44:b9:cd:33:40:f0:a6:07:62:c5:9e:f0:
         64:12:62:4e:e5:1b:01:61:c1:18:dd:02:01:ad:d5:d2:a0:b9:
         2f:43:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:34 2025 by rpki-client