Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
File:                     z_XcdutvgU7WAVaP3SyBEO3vjBc.mft (raw, json)
Hash identifier:          mbxFq1PSewZ3cL8XreQ/VMahw7ol2PKiX7YUBZQpm+E=
Subject key identifier:   A6:6C:78:86:05:9E:33:13:78:7F:0D:1C:21:B6:03:AC:53:1D:3F:D1
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Certificate issuer:       /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial:       019355E47CDE329488ED29A2383E4C70BA44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
Manifest number:          0598
Signing time:             Fri 22 Nov 2024 22:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:57 +0000
Files and hashes:         1: RCaErgrQ9kyeE_6EewwG82XLtXs.roa (hash: sUsO8UvO/7cpcYIWpa/xp0IGOXcwIhijsSjc2fHm5zU=)
                          2: YmgrHGDWSmABymrI-ZMvmG-Krjs.roa (hash: 6DsVVaXRlL58YuDIYKv/KpsCKZWGART9o/+I699LudY=)
                          3: mMbX9a7F3PDeET-jlq7mupmHLtc.roa (hash: K+cR4Ra7OKtyo/Zq8GfOGdmX7r2FSSdJN2yfoI1zb5s=)
                          4: z_XcdutvgU7WAVaP3SyBEO3vjBc.crl (hash: kO0JezhylmPGWIJcuWk2fxu8Ar8zV4pl92kWlW7Hjkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:7c:de:32:94:88:ed:29:a2:38:3e:4c:70:ba:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
        Validity
            Not Before: Nov 22 22:00:57 2024 GMT
            Not After : Nov 23 22:00:57 2024 GMT
        Subject: CN=a66c7886059e3313787f0d1c21b603ac531d3fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:51:50:c5:59:20:c1:d2:94:23:36:32:93:
                    89:8b:7c:84:d3:a8:1c:5a:3e:30:34:0a:10:52:85:
                    14:88:28:b8:61:0d:bf:9f:fb:75:6f:2c:5e:92:7d:
                    a9:cb:46:df:ee:4e:9d:27:55:27:87:23:8d:c1:71:
                    d7:6f:26:77:17:43:15:c3:d8:f6:15:34:ea:72:06:
                    69:18:e7:64:7a:de:f5:29:d6:fe:a7:c4:89:a0:5b:
                    90:37:99:66:ff:21:e1:16:4a:f9:4e:ef:bb:08:03:
                    8f:55:a7:79:4a:61:ba:7f:1f:d9:cb:aa:a6:20:dd:
                    78:ab:d6:5c:20:d3:33:00:d4:b3:dc:74:d8:7a:13:
                    35:88:ef:7d:a5:ea:e2:ed:ca:ff:e3:55:e0:5b:8e:
                    35:18:33:33:e1:ad:56:1d:95:4a:9d:30:1f:c3:f9:
                    eb:b4:38:29:6e:7b:ca:72:d9:38:0f:08:82:b0:5f:
                    1e:3a:64:9f:87:ba:39:70:ec:d5:58:08:b4:47:46:
                    7d:55:69:a4:0b:2c:d7:4a:95:60:31:d0:a5:08:1f:
                    cb:ee:5a:47:94:7e:77:35:2c:3e:8e:eb:28:9b:04:
                    d2:ad:13:bd:49:2e:07:f7:cb:40:c3:9b:7c:2c:1c:
                    1a:ce:79:21:50:22:03:67:97:ab:f0:ce:61:d2:6e:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6C:78:86:05:9E:33:13:78:7F:0D:1C:21:B6:03:AC:53:1D:3F:D1
            X509v3 Authority Key Identifier:
                keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:57:4b:2e:17:37:fd:b8:dd:96:1a:0a:b6:7e:0f:94:7c:9f:
         db:21:fd:94:27:38:de:ff:7e:31:6b:16:fa:8d:17:2d:91:fd:
         a1:3e:75:5f:02:73:b0:fe:6f:96:04:bc:b3:7f:e0:b7:ef:de:
         7d:e6:c4:6b:30:e6:34:52:4b:e9:d8:5f:a5:7c:d0:73:4f:bf:
         8a:20:56:ab:7a:75:4d:e2:de:25:ad:6e:d8:5a:2a:db:6e:bb:
         9d:2a:68:a6:b7:9a:01:e4:d2:53:95:87:56:40:94:e2:41:18:
         bc:e1:56:15:2a:0b:6e:bd:2d:63:c7:bb:db:d8:a1:c5:07:f1:
         8f:f2:ae:d0:36:96:c9:f2:46:56:8f:98:3b:9c:ef:c4:45:4e:
         3e:6a:17:a0:99:0d:6e:b2:68:46:4a:32:3a:e4:b8:4f:37:02:
         d6:af:68:45:a1:f4:66:cd:b4:58:f7:82:57:93:cd:c7:87:9d:
         89:09:cd:16:29:9e:1b:45:69:20:a8:b0:73:e4:1a:d4:22:77:
         13:54:04:8d:f5:7c:6c:f7:a9:d6:bd:86:35:6f:42:64:07:9a:
         66:df:d3:31:20:94:e0:e3:78:1f:4d:3a:72:b7:f4:09:5d:f0:
         0b:78:2f:2d:70:37:54:37:2e:2a:0c:db:29:0f:70:37:f0:83:
         4d:64:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:11:41 2024 by rpki-client on console-ams.rpki-client.org