Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
File:                     zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json)
Hash identifier:          yqKW/xlF8shTqkS/mBBgdK2LjP0TnqUipDTVlkDXIX4=
Subject key identifier:   40:7F:2E:E7:2B:1E:03:DB:77:49:4B:AC:A6:2F:DB:BC:C1:F0:FE:B8
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       018F2EE1270673FFB6602EF007083DE94948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
Manifest number:          0AAE
Signing time:             Tue 30 Apr 2024 12:00:58 +0000
Manifest this update:     Tue 30 Apr 2024 12:00:58 +0000
Manifest next update:     Wed 01 May 2024 12:00:58 +0000
Files and hashes:         1: 74FX8Fl9JgL39aArGMcYUARhfCo.roa (hash: FN/s539FOHrELZC9y9hRB8OLwA/st8XJjDUmpMSgLZk=)
                          2: P4NQULtv0LY_Upt-0B9ksNrboAc.roa (hash: p3n3uyKcjJWAqAoIifbbqL4VeYEeUKI2pXMA0yID2vE=)
                          3: U_Q2XeMZId_klz_qN0qCdaKdCYI.roa (hash: aS7sA2wMEEoB1+xVVxjtOd4SumUMNvJJd+Lm5ejRnvk=)
                          4: fWEPL0iWpFH5fakME4xpcTkVvRM.roa (hash: 2DVvKCGM6hTbUXjBSYhc8sXfr75s1CYTMA3IRrys+fg=)
                          5: fh1TH-drXKASPzi3LMTqLV35EjQ.roa (hash: aBsUUReRDHBgvPar3ejAXxRncZ5S9C0cjuyqpxQw/uE=)
                          6: gIm3wnvf3iiUE3bXwrbopFB6Fnc.roa (hash: L7yDsacUGB6FPm3Vzj5lNAcYFcKQ9vN9f92hzko1fxg=)
                          7: hKxRHcDzhC2IM07uB70p4o8hHn4.roa (hash: kq6FMj3mveUu3gSufYev+NdGDgK92RwcjMeQklH3IJ8=)
                          8: kBUG1c-jelFg11_fHeAYiX7jfJk.roa (hash: ZFTa8KBu2NuQfR07Msh5M/+J+XzUk5x9YmlroF25oVA=)
                          9: lXgSczTkFIkpNbaoQCqomje1kKA.roa (hash: 9HFHtys3sKzBpf1lwVdjNkTbGuyrk+lFHMW4TU1+v3E=)
                          10: njabFCfnMLcNiqyZK-a7FQTtfPk.roa (hash: 64Q7nwuUJAqwVXedx/LGBqwo5cLFEsY+kjgc14qWDjM=)
                          11: ogFkIOLVrp3wLJz0dYWZDAVVYjU.roa (hash: IXR8cK8nqfMCzAZytOe+2PQcxwDNEGhW9jqngnR07OY=)
                          12: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: Cad6XH/233tV6unzljhi4VhLypHqULaPkTz8eVXlUzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:e1:27:06:73:ff:b6:60:2e:f0:07:08:3d:e9:49:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Apr 30 12:00:58 2024 GMT
            Not After : May  1 12:00:58 2024 GMT
        Subject: CN=407f2ee72b1e03db77494baca62fdbbcc1f0feb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:f8:c6:36:ed:52:cb:3a:06:0d:ee:ec:8a:
                    68:1b:82:5b:08:ce:49:e4:f0:ad:87:ad:63:8a:49:
                    cc:69:c1:3e:77:76:71:62:ab:34:57:e7:32:5c:8f:
                    f4:ea:d9:dc:1d:ac:e3:3e:e6:f5:15:cd:91:e3:1c:
                    56:bc:da:09:59:6a:73:08:a2:4c:1b:57:40:c5:4d:
                    e6:88:1b:3f:f8:10:10:0f:c6:b1:0e:11:c1:69:b8:
                    ea:8c:e6:59:31:62:44:e6:bb:af:29:13:69:9d:8b:
                    25:bd:fa:83:e2:f0:c4:57:06:dc:10:6c:c4:b3:8d:
                    96:3b:dc:f7:7a:50:25:97:62:93:2a:fe:87:9b:4e:
                    05:d4:1a:8b:8f:fa:e2:88:46:6d:0d:38:c3:fb:cb:
                    a5:71:86:dd:d5:35:ae:51:a8:64:d5:cf:98:f3:98:
                    14:3c:65:d6:5b:a7:c8:a9:9d:3c:72:2e:63:8d:7b:
                    c9:12:47:d6:67:8a:58:c2:43:91:88:6d:34:b6:8d:
                    cd:45:38:62:3b:76:23:43:73:e8:57:54:52:4f:78:
                    46:fb:ee:82:1b:71:1b:07:3a:51:e6:9a:2e:75:fc:
                    65:90:e0:94:ae:c2:3b:fd:f3:8a:aa:d6:e5:73:61:
                    42:61:bf:21:5a:9a:dc:4b:ac:44:62:c3:7f:58:45:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7F:2E:E7:2B:1E:03:DB:77:49:4B:AC:A6:2F:DB:BC:C1:F0:FE:B8
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7c:3f:19:7d:c7:6a:76:e7:01:d9:4a:cc:6b:c8:c3:08:fb:
         96:9e:5b:e7:35:77:bc:fd:46:53:ad:9a:f4:40:28:39:a6:a1:
         57:76:76:7b:a7:33:97:99:51:88:a7:51:f0:03:c6:c2:7d:05:
         f9:df:0d:ef:7a:92:78:ef:cc:aa:9d:d2:10:40:ff:0f:61:32:
         ba:25:cb:f1:9c:3f:3c:97:57:2c:28:76:57:39:09:cb:9f:44:
         59:43:17:d4:ce:c8:d6:89:1c:51:d8:08:db:44:a9:7d:d9:68:
         ed:06:4f:d4:8d:92:7d:25:c8:76:e4:f1:b8:81:53:7b:49:0b:
         12:a7:d0:ab:9e:c9:b8:b7:72:e8:1f:1b:d5:97:f0:ff:72:32:
         3d:04:a0:8a:a7:b3:c0:8c:ed:46:09:e7:4b:23:1d:43:b5:ee:
         2b:a7:72:9e:32:f4:60:43:e1:34:c7:44:5f:a3:2a:34:00:19:
         78:d7:4e:00:c6:b7:88:3a:84:99:a7:e4:a6:d6:fa:00:ee:e8:
         17:77:e1:a3:ec:45:60:10:6b:10:d5:b9:1a:b3:79:47:86:a6:
         f6:12:e6:73:8f:94:54:1a:84:d0:3b:4e:dd:84:c0:29:22:f0:
         0e:ab:93:27:57:e6:b6:06:d6:d8:0f:aa:cf:d0:78:f6:e1:92:
         8a:48:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 16:58:54 2024 by rpki-client on console-fra.rpki-client.org