Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
File:                     K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json)
Hash identifier:          Q6APcid98nbUhUDR186y/8jjkSR2RNavJGYKY2GZhok=
Subject key identifier:   AB:5B:BC:6C:B0:6A:DA:DA:FC:BB:D5:E6:3C:45:A5:AC:6E:88:90:DA
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Certificate issuer:       /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial:       01964A0EF2A2867B8B66C3CCC663767173ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
Manifest number:          0DDE
Signing time:             Fri 18 Apr 2025 18:00:15 +0000
Manifest this update:     Fri 18 Apr 2025 18:00:15 +0000
Manifest next update:     Sat 19 Apr 2025 18:00:15 +0000
Files and hashes:         1: JMuA_SE4InzW1qKeTVpx_3oL0q8.roa (hash: R6FzokXTO51RahiuJEIKsH+gffyhCqg/DyumMrYKwlc=)
                          2: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: pKyImh08Zkgmee5tM9nMPyU2CRtOI86b1slRtMDf7ic=)
                          3: mIULbw_VsYjjAm8nAGiad1FVRCA.roa (hash: RZC9YnUkAnJgl+1L4ykyICx092CEcPZwqJ0fdIhJKfk=)
                          4: tV4zflXI9fSIgwxFKkPQRhAyRyk.roa (hash: Z1f74NH3kzNP7yaoZvmLnAHN/rFjIJBtqJkrZ6Pd0is=)
                          5: xsMX4xnBtAkWlhocItT5wdfVH3k.roa (hash: z7ATRuzsizy0J/zWBm/YAirUNrjy9iWYQrOG/F0bSwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0e:f2:a2:86:7b:8b:66:c3:cc:c6:63:76:71:73:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Validity
            Not Before: Apr 18 18:00:15 2025 GMT
            Not After : Apr 19 18:00:15 2025 GMT
        Subject: CN=ab5bbc6cb06adadafcbbd5e63c45a5ac6e8890da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:12:77:c8:44:a2:d9:8a:a6:fe:85:97:70:
                    dd:be:2a:23:27:5d:98:11:71:60:4e:c3:5e:88:4e:
                    c7:aa:ba:ad:8f:c2:4c:62:4b:eb:74:2c:c7:bf:67:
                    00:bd:71:38:81:5d:0a:b4:f8:7f:28:06:c4:b9:c6:
                    78:78:28:93:63:3d:25:d6:b4:09:14:fb:16:8a:2e:
                    e1:69:b2:9c:fd:33:17:f2:8a:ec:9d:ed:77:30:23:
                    38:12:7b:6e:ed:cf:d3:6d:17:48:1e:4d:5a:c7:71:
                    f0:29:75:19:8a:db:45:98:ae:71:2d:ba:19:9b:6c:
                    52:70:9e:e0:35:2b:89:9b:43:df:78:90:7f:25:51:
                    1e:9e:c0:e9:6a:15:96:a9:09:31:54:b2:46:60:9c:
                    b1:6d:38:37:80:fb:48:8d:ec:05:d9:af:a1:38:bb:
                    61:32:55:e7:89:4e:63:4a:66:1b:24:9c:2a:a8:e4:
                    d5:f8:06:44:5f:5c:5a:87:69:b6:8e:c2:25:4f:22:
                    95:ff:c2:2f:8c:f0:d0:a3:4c:23:c8:cf:3b:9d:09:
                    7f:1d:0d:1b:90:f8:5e:a8:7a:2e:9e:96:2c:39:5c:
                    6f:6e:81:57:43:11:8d:5d:88:bf:56:9f:23:97:f6:
                    6c:d3:ac:16:05:b6:0d:6f:b7:94:38:59:8d:38:e6:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5B:BC:6C:B0:6A:DA:DA:FC:BB:D5:E6:3C:45:A5:AC:6E:88:90:DA
            X509v3 Authority Key Identifier:
                keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6b:40:c5:46:85:0c:a9:a5:ee:23:5b:1e:14:0a:8c:f6:30:
         5c:71:8e:da:d5:ec:4a:d6:f2:f8:d7:18:62:87:4d:55:5c:db:
         04:95:4c:b2:e1:66:92:f1:4b:04:30:e2:56:33:52:d6:e7:2a:
         40:87:3a:da:b4:2b:3e:11:50:91:f7:af:76:b5:b1:87:7d:08:
         41:b3:8b:8b:0c:f6:86:13:d7:fd:ec:ab:18:ad:91:c8:e7:14:
         38:81:2d:88:f7:17:ac:dd:c7:2d:1e:98:aa:59:eb:f8:cc:53:
         bb:98:fa:17:ea:cc:28:d3:31:20:74:3a:fe:b6:da:2b:f1:a5:
         21:91:dd:ca:ae:50:c1:22:9f:fd:d8:00:40:b9:a7:08:c8:0a:
         2f:7c:39:27:55:f9:d0:25:38:8e:b0:8b:37:71:1f:f7:a4:38:
         44:e6:44:34:fa:77:25:c7:0c:84:9a:e4:d2:82:b2:69:c2:14:
         bc:c0:24:37:72:49:3d:1c:b6:da:fa:cb:d7:b8:03:30:5a:48:
         53:37:1f:d0:2f:30:f9:78:56:5e:c5:b8:5b:c4:38:2e:ec:7c:
         2b:bb:b7:f6:db:35:a7:88:de:4f:ca:d5:1f:60:2a:19:17:34:
         a8:56:cd:65:a8:d8:d8:fb:7a:54:73:66:02:d8:bc:85:3f:c8:
         92:07:a3:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKDvKihnuLZsPMxmN2cXPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw
ZWEzYTAwHhcNMjUwNDE4MTgwMDE1WhcNMjUwNDE5MTgwMDE1WjAzMTEwLwYDVQQD
EyhhYjViYmM2Y2IwNmFkYWRhZmNiYmQ1ZTYzYzQ1YTVhYzZlODg5MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRISd8hEotmKpv6Fl3DdviojJ12Y
EXFgTsNeiE7Hqrqtj8JMYkvrdCzHv2cAvXE4gV0KtPh/KAbEucZ4eCiTYz0l1rQJ
FPsWii7habKc/TMX8orsne13MCM4Entu7c/TbRdIHk1ax3HwKXUZittFmK5xLboZ
m2xScJ7gNSuJm0PfeJB/JVEensDpahWWqQkxVLJGYJyxbTg3gPtIjewF2a+hOLth
MlXniU5jSmYbJJwqqOTV+AZEX1xah2m2jsIlTyKV/8IvjPDQo0wjyM87nQl/HQ0b
kPheqHounpYsOVxvboFXQxGNXYi/Vp8jl/Zs06wWBbYNb7eUOFmNOOZ9wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtbvGywatra/LvV5jxFpaxuiJDaMB8GA1UdIwQY
MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt
MDBjYTMxMjZiM2ZlLzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl
LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWtAxUaF
DKml7iNbHhQKjPYwXHGO2tXsStby+NcYYodNVVzbBJVMsuFmkvFLBDDiVjNS1ucq
QIc62rQrPhFQkfevdrWxh30IQbOLiwz2hhPX/eyrGK2RyOcUOIEtiPcXrN3HLR6Y
qlnr+MxTu5j6F+rMKNMxIHQ6/rbaK/GlIZHdyq5QwSKf/dgAQLmnCMgKL3w5J1X5
0CU4jrCLN3Ef96Q4ROZENPp3JccMhJrk0oKyacIUvMAkN3JJPRy22vrL17gDMFpI
Uzcf0C8w+XhWXsW4W8Q4Lux8K7u39ts1p4jeT8rVH2AqGRc0qFbNZajY2Pt6VHNm
Ati8hT/IkgejvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:30 2025 by rpki-client