Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File:                     zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier:          NaZ6Ia7JYcGMVVY7hcn77K9l+QVQfq4Qc8ezjzHmOYs=
Subject key identifier:   1C:E2:0B:57:01:E0:27:8F:0F:BD:0D:13:C3:1B:95:91:EF:13:E1:F6
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer:       /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial:       01935689686695FA7E9E0E19C17BAB8ED875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:05 +0000
Files and hashes:         1: jlBgFq1VMPd_NGLdP4JA3M7T6mU.roa (hash: 03j3k4wrgFI+I1RjipXjVRx4hIo9e3k7oZjZwt2+O9c=)
                          2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: 8zq8IIa3vLfSs5wtM/QOnh3Yl3W3PZ+EZLjJpH/9csc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:68:66:95:fa:7e:9e:0e:19:c1:7b:ab:8e:d8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
        Validity
            Not Before: Nov 23 01:01:05 2024 GMT
            Not After : Nov 24 01:01:05 2024 GMT
        Subject: CN=1ce20b5701e0278f0fbd0d13c31b9591ef13e1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:0a:3a:3c:89:48:9c:78:35:c0:50:13:05:
                    95:85:bd:91:de:68:5a:ba:fc:69:9a:a9:2e:73:11:
                    b1:2f:7d:5e:8f:6e:14:da:6a:2f:12:80:91:e7:9f:
                    b8:30:25:95:f6:73:1b:17:5a:52:7a:82:32:d5:c1:
                    75:fa:cf:9c:5b:5e:d3:f7:95:91:2e:7b:26:d1:e8:
                    f5:8e:ce:f0:a9:34:c2:2d:1e:9f:05:59:db:9f:20:
                    aa:3b:48:2e:16:6b:43:65:aa:45:8a:0e:22:c5:d8:
                    5b:35:a0:1a:67:12:3c:e5:32:05:ea:50:f5:61:9b:
                    6c:50:5f:46:51:84:2b:e5:8a:0a:5f:44:4e:58:73:
                    be:59:0a:93:e5:07:df:c4:a4:40:19:c5:57:b1:96:
                    72:14:1d:5f:c2:94:66:04:8e:fb:18:02:e1:63:e0:
                    43:f4:11:db:6d:72:38:ad:43:87:c9:79:d0:b2:51:
                    af:40:4d:7e:a1:c5:99:0d:13:19:70:00:9b:79:19:
                    65:58:da:50:e8:8c:04:ba:59:00:2f:2d:d5:69:0e:
                    45:1c:55:d5:7c:52:b3:69:cb:7e:ad:26:b5:07:ef:
                    b3:1b:5b:63:3d:44:db:c8:85:7d:78:15:61:fb:a6:
                    c2:6f:26:92:9b:c3:d3:53:77:ea:b8:0f:a9:bc:47:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E2:0B:57:01:E0:27:8F:0F:BD:0D:13:C3:1B:95:91:EF:13:E1:F6
            X509v3 Authority Key Identifier:
                keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:33:30:7c:3a:1a:d1:39:43:31:01:2d:64:e0:68:e4:74:d0:
         8f:8c:27:84:5c:fa:db:cd:12:c0:ed:a9:ac:2c:37:f2:a9:93:
         23:0d:c1:20:24:8d:66:8b:64:40:3c:af:31:6e:7e:94:ba:e2:
         7b:45:ac:ac:b0:99:b2:36:f8:3b:3a:fe:49:f2:e4:82:c4:54:
         f3:f3:c6:ea:92:de:dc:3e:5e:11:47:d2:8a:24:6e:60:d4:44:
         51:11:8f:44:f3:3b:f0:ee:d1:c0:a7:55:13:32:71:0d:d6:5f:
         da:f7:52:31:06:0b:d3:f0:7d:bb:df:07:c7:aa:92:6e:d1:7f:
         7e:ba:4f:cd:36:59:73:ed:8e:44:96:1a:14:5c:2d:ed:7f:1c:
         da:d4:da:6a:4b:5a:90:79:ac:27:5b:8b:0d:13:77:43:d7:24:
         e2:ef:f6:74:18:c0:4b:74:76:07:74:d5:4f:c0:cd:e8:51:e8:
         fb:90:9f:1d:65:3c:ee:43:89:72:41:53:e3:86:96:fa:7b:5d:
         28:9e:ab:14:12:9e:79:79:74:31:97:62:3b:64:bc:1d:78:a0:
         85:4f:8f:d2:52:c8:fa:95:41:3e:69:39:2f:ab:cb:bc:d3:1c:
         b1:56:d7:71:49:2a:a3:53:bd:79:80:49:3c:56:79:cb:27:18:
         50:0e:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:25 2024 by rpki-client on console-fra.rpki-client.org