Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
File:                     K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json)
Hash identifier:          59ncKykvEuNcZ6b67vNULPH5oW0Ty2WcCNtrX7aaqlU=
Subject key identifier:   A1:26:F2:D8:61:24:7C:D2:82:E0:CA:59:F0:7C:A9:A1:FC:29:DB:C8
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Certificate issuer:       /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial:       01935689A78979A2F2A1662EA3547DCCF084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
Manifest number:          0C50
Signing time:             Sat 23 Nov 2024 01:01:22 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:22 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:22 +0000
Files and hashes:         1: 1-33G7DJmOz-Ii4rhY5VlXqQ_Guc.roa (hash: 7nKpOPT9usV07iPDpjmDEBr8elDnMmppAgSWI1bg1Cg=)
                          2: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: gRNA3QGY2jwoO1l+i/OugGboOTUZUxdRYfDyJNCdzkI=)
                          3: QmXN46-Hyc8UZilqfO_910Sr1JQ.roa (hash: pmNF1AQ/4XP1VHxNl4h7eUSHW3I+v/v6M/Q5S6SPnpc=)
                          4: h0wYIk4jMJ6xxoRJApjYNlq8HQI.roa (hash: 6wqPeJn12neL++n1RHKCur0qOWEaXMp1v26M0t1l4jA=)
                          5: vTYNJoTcnTJqP0iw1rGNixm2bZg.roa (hash: U8Oo3iIh/rFa8f6xJeNo5TkneUv4eMXMFP0y2KJUshg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a7:89:79:a2:f2:a1:66:2e:a3:54:7d:cc:f0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Validity
            Not Before: Nov 23 01:01:22 2024 GMT
            Not After : Nov 24 01:01:22 2024 GMT
        Subject: CN=a126f2d861247cd282e0ca59f07ca9a1fc29dbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:62:7b:04:67:08:9c:e7:6c:1d:79:4e:c1:
                    7d:e5:6d:ba:d7:f2:65:a5:63:ee:26:da:08:ac:76:
                    58:9d:3d:fa:80:3f:d6:d4:8b:5a:fb:5b:bf:f9:a5:
                    bb:42:ea:e5:7d:05:9a:c0:38:61:c5:f5:2d:a3:d2:
                    88:0b:eb:48:c8:98:fb:85:af:ba:ed:b6:ad:60:0a:
                    10:20:46:73:31:9b:69:a2:4c:ed:62:70:e7:ea:77:
                    9e:22:f1:51:f6:21:a8:be:82:6c:27:d4:ef:ff:09:
                    ef:c6:a0:7f:72:85:8d:dd:3b:56:bf:0f:4c:eb:41:
                    47:ce:6d:f1:54:79:da:79:f4:69:91:6a:be:ef:dd:
                    7b:b0:27:79:da:e8:97:3b:89:68:3f:05:5a:b9:c6:
                    49:60:b4:22:80:a9:cb:5b:73:e1:71:f6:9c:bc:df:
                    8a:6f:c8:03:7b:5c:8c:4e:28:7f:cc:c2:aa:9d:d5:
                    d0:4d:43:0a:12:ab:1d:eb:86:81:eb:46:e2:87:78:
                    c8:90:2e:91:e4:11:10:31:74:60:c7:56:8f:49:33:
                    c4:91:e5:7a:d8:6f:82:da:3e:05:87:27:67:6b:bd:
                    60:9e:0b:af:00:63:79:02:9d:f5:43:bf:58:52:02:
                    2b:38:6b:e9:5d:77:ec:76:39:bc:04:01:cd:62:f4:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:F2:D8:61:24:7C:D2:82:E0:CA:59:F0:7C:A9:A1:FC:29:DB:C8
            X509v3 Authority Key Identifier:
                keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:35:ef:6d:da:df:60:8a:a1:7d:52:8c:06:e0:68:89:28:
         e0:dc:3c:2e:9b:1e:34:ad:af:95:39:e0:85:0d:a8:e8:93:ad:
         7e:6b:98:84:8d:c9:8a:eb:41:0b:62:06:16:98:ad:70:f0:d1:
         84:63:27:2c:f5:57:7d:05:c6:0e:05:49:51:6f:7f:52:5a:fb:
         e1:f4:03:71:dd:8e:73:24:8d:ab:d7:7b:b3:62:14:b1:54:9f:
         3f:9f:5f:ce:ca:73:94:d3:d6:0b:b5:92:56:7a:5e:be:6d:94:
         f1:4c:e0:9d:a0:dc:2c:ed:b1:4b:b9:04:1b:27:27:c1:15:3a:
         34:84:47:35:7e:98:de:93:2d:7c:3c:90:c7:9b:48:cf:82:cf:
         c2:62:9a:30:ad:dd:f0:57:ca:58:11:c1:da:f3:c6:7e:7e:48:
         9b:4c:ea:97:ed:6a:07:0e:d2:a4:63:d8:60:6f:14:f9:38:d6:
         f0:2e:11:96:b0:e9:b1:34:a6:10:ac:49:94:ad:cf:ed:8e:70:
         86:6b:38:13:7f:cd:fa:a0:fa:f2:60:72:86:0f:ec:71:4e:d1:
         ff:02:6e:2a:ce:8f:10:63:aa:1e:f6:d4:35:50:3f:35:06:1f:
         df:e1:b0:b7:53:a8:2d:db:a5:56:86:fa:25:37:30:94:9d:44:
         4d:33:c3:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiaeJeaLyoWYuo1R9zPCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw
ZWEzYTAwHhcNMjQxMTIzMDEwMTIyWhcNMjQxMTI0MDEwMTIyWjAzMTEwLwYDVQQD
EyhhMTI2ZjJkODYxMjQ3Y2QyODJlMGNhNTlmMDdjYTlhMWZjMjlkYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DdiewRnCJznbB15TsF95W261/Jl
pWPuJtoIrHZYnT36gD/W1Ita+1u/+aW7QurlfQWawDhhxfUto9KIC+tIyJj7ha+6
7batYAoQIEZzMZtpokztYnDn6neeIvFR9iGovoJsJ9Tv/wnvxqB/coWN3TtWvw9M
60FHzm3xVHnaefRpkWq+7917sCd52uiXO4loPwVaucZJYLQigKnLW3PhcfacvN+K
b8gDe1yMTih/zMKqndXQTUMKEqsd64aB60bih3jIkC6R5BEQMXRgx1aPSTPEkeV6
2G+C2j4Fhydna71gnguvAGN5Ap31Q79YUgIrOGvpXXfsdjm8BAHNYvQL6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEm8thhJHzSguDKWfB8qaH8KdvIMB8GA1UdIwQY
MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt
MDBjYTMxMjZiM2ZlLzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl
LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWg1723a
32CKoX1SjAbgaIko4Nw8LpseNK2vlTnghQ2o6JOtfmuYhI3JiutBC2IGFpitcPDR
hGMnLPVXfQXGDgVJUW9/Ulr74fQDcd2OcySNq9d7s2IUsVSfP59fzspzlNPWC7WS
Vnpevm2U8UzgnaDcLO2xS7kEGycnwRU6NIRHNX6Y3pMtfDyQx5tIz4LPwmKaMK3d
8FfKWBHB2vPGfn5Im0zql+1qBw7SpGPYYG8U+TjW8C4RlrDpsTSmEKxJlK3P7Y5w
hms4E3/N+qD68mByhg/scU7R/wJuKs6PEGOqHvbUNVA/NQYf3+Gwt1OoLdulVob6
JTcwlJ1ETTPDbw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:00 2024 by rpki-client on console-fra.rpki-client.org