Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
File:                     zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json)
Hash identifier:          VIO8cL4aSyu3gxq364dm6tsVa/zbIpnbGaEYMYP2ebE=
Subject key identifier:   A4:D9:1F:F7:DF:D7:32:D5:F0:2E:4A:52:67:DF:C2:D3:22:7B:5F:99
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       01935162584028F9CA9C21175F890C83524F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
Manifest number:          0CD5
Signing time:             Fri 22 Nov 2024 01:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:19 +0000
Files and hashes:         1: 0qkU7lsNnj-qY3ISFuBWcTi5cGE.roa (hash: YCoGEb3aQH2HoqufBGb7k+4qKgpufccaCL/Oeqx4Hx8=)
                          2: KQBXWNalDks7hZuCmoKbany8_pU.roa (hash: PjN4oyQxMjJOCrhKBBKAaE5Gk0IrxeRkBjwATG3v5cs=)
                          3: P4NQULtv0LY_Upt-0B9ksNrboAc.roa (hash: p3n3uyKcjJWAqAoIifbbqL4VeYEeUKI2pXMA0yID2vE=)
                          4: RemN8SNgEwusQZPwDn3NWdFXlpE.roa (hash: 8UBuNeCLXeTtkte1N7/39tvhEVnJ22rKg5cEZNhphtw=)
                          5: U_Q2XeMZId_klz_qN0qCdaKdCYI.roa (hash: aS7sA2wMEEoB1+xVVxjtOd4SumUMNvJJd+Lm5ejRnvk=)
                          6: fh1TH-drXKASPzi3LMTqLV35EjQ.roa (hash: aBsUUReRDHBgvPar3ejAXxRncZ5S9C0cjuyqpxQw/uE=)
                          7: fh6jXd8l1PiE8ETtkSHQOUfLpoc.roa (hash: Uve8rH0tAlkUS/OJYT4o7MmbSeqiG649r/Wip7nzAdo=)
                          8: hKxRHcDzhC2IM07uB70p4o8hHn4.roa (hash: kq6FMj3mveUu3gSufYev+NdGDgK92RwcjMeQklH3IJ8=)
                          9: kBUG1c-jelFg11_fHeAYiX7jfJk.roa (hash: ZFTa8KBu2NuQfR07Msh5M/+J+XzUk5x9YmlroF25oVA=)
                          10: ksyRBvgYlK-jaQCzeVBPOoZTVBg.roa (hash: c7QpTl2e7n313528KQH+1qxxiF+kiu3ajPIfb39U9Fc=)
                          11: lXgSczTkFIkpNbaoQCqomje1kKA.roa (hash: 9HFHtys3sKzBpf1lwVdjNkTbGuyrk+lFHMW4TU1+v3E=)
                          12: mgJKZsu2cVYMbiC0A4KrDEe9nG8.roa (hash: 9PDrSNDIheH2EbPurJcYGI3Hkeu50CWG9XwGXq3vBM0=)
                          13: ogFkIOLVrp3wLJz0dYWZDAVVYjU.roa (hash: IXR8cK8nqfMCzAZytOe+2PQcxwDNEGhW9jqngnR07OY=)
                          14: pkjiST5zUzewV_2TmjMoh-1av1I.roa (hash: DiXzFmmk1DQOUHyiRTaAmxz7dyPLhin337qajIqXU3Q=)
                          15: ppSA-FcV9YYVOAwV9IRZNjmNaP8.roa (hash: lJyItbL4Ylb+P6nuDVlo9G3yCVmFVVQLaJ8mGKaRutk=)
                          16: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: OHJpnjeeL0nIN3c7aQ6mzph4z0huzq6iP/60N0/Aygk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:58:40:28:f9:ca:9c:21:17:5f:89:0c:83:52:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Nov 22 01:00:19 2024 GMT
            Not After : Nov 23 01:00:19 2024 GMT
        Subject: CN=a4d91ff7dfd732d5f02e4a5267dfc2d3227b5f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:34:22:63:ec:d2:35:40:c7:ed:94:9a:18:
                    52:11:ee:3d:1a:6b:64:37:66:9a:be:5c:c4:88:6b:
                    b8:62:7c:cf:26:02:70:92:cb:52:d6:d7:ef:c5:1b:
                    62:f2:e6:96:63:26:86:06:12:65:4c:de:9f:64:dc:
                    85:e6:cc:d1:89:33:e6:78:12:2e:c5:49:72:ab:f4:
                    21:c2:df:84:7b:fe:9e:c0:5b:02:4b:66:ad:a4:56:
                    af:0e:39:b9:6e:22:03:5a:86:e2:01:5c:c1:c4:cc:
                    fb:37:6f:08:de:6e:ae:3e:f9:d5:2a:97:ab:bc:f5:
                    9c:45:07:ae:5e:21:31:1f:e9:75:c6:e6:72:09:0f:
                    e8:c2:e5:0e:03:29:15:37:89:83:85:db:94:7d:9a:
                    9a:2a:17:b8:2e:23:66:6b:8e:e0:5a:32:4c:46:fe:
                    7b:2e:8e:df:d6:7c:56:45:1e:57:86:6f:d1:f5:8e:
                    79:cb:b3:0e:34:26:20:31:79:f2:5e:4a:aa:9f:d1:
                    9d:a8:8d:2e:6b:ad:43:7a:3c:96:a8:63:5b:10:a3:
                    1a:01:06:72:0a:b1:fb:7d:0c:ab:99:68:90:a6:e1:
                    a2:87:69:e1:d5:1d:aa:48:a6:65:dd:78:a0:e8:9b:
                    7d:2f:01:43:ed:ba:79:d9:3c:88:9f:8b:1b:fc:32:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D9:1F:F7:DF:D7:32:D5:F0:2E:4A:52:67:DF:C2:D3:22:7B:5F:99
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:77:25:49:84:60:44:8d:0a:c4:29:6c:5d:5f:f7:ac:5f:1f:
         99:c6:ac:99:72:17:4e:02:f5:c9:3c:e7:1a:dd:24:d2:5b:d3:
         35:74:5b:29:b0:df:eb:95:4f:4c:7b:12:f1:23:30:ca:1e:27:
         33:c6:13:14:99:e7:a8:5a:fb:f8:ba:81:33:75:c6:79:27:b9:
         79:04:5c:8f:de:0a:9b:99:ad:ad:0e:6d:08:1e:dd:79:09:24:
         87:8b:98:01:70:3d:1c:59:9c:8e:df:28:69:37:6a:fc:48:b4:
         28:4f:19:5d:4e:b8:39:8d:33:37:ed:98:03:db:0e:0f:c1:bb:
         07:0f:b1:f1:19:0a:84:b9:f8:2c:3b:71:63:c6:b5:c8:fe:37:
         14:ce:23:76:fe:e6:3f:c6:87:c5:ba:c4:69:29:2e:a7:ea:a7:
         5e:c3:68:10:fb:0d:07:82:d6:71:81:6c:3b:f3:c5:ed:4b:fc:
         7e:5f:39:37:0d:63:d2:38:a8:c5:1b:5d:25:c2:8a:12:0b:52:
         8b:56:e8:51:e5:dc:dc:f9:07:b5:a0:00:88:68:b4:02:98:3f:
         74:ce:5c:a3:c4:b9:df:fb:8b:7f:b3:6e:ed:dd:29:07:d0:1c:
         fe:b7:ee:39:47:39:97:54:1f:39:86:5b:a2:99:b4:3b:e7:f2:
         4d:5c:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:35 2024 by rpki-client on console-fra.rpki-client.org