Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File:                     zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier:          6aveDwYg0Alh6g1sE5XCQXwK2zblfj+2Lb+qs3yRwWE=
Subject key identifier:   FF:56:B9:C8:C5:0E:7E:2C:08:CA:4C:D4:28:5E:C8:66:16:47:A3:97
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer:       /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial:       018F874AB2B8A5CC04D1C7C0D3F87E8EFDBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number:          07E0
Signing time:             Fri 17 May 2024 16:02:50 +0000
Manifest this update:     Fri 17 May 2024 16:02:50 +0000
Manifest next update:     Sat 18 May 2024 16:02:50 +0000
Files and hashes:         1: 7v94aVuLChYVQNyyx-DT7cbdlps.roa (hash: aErmPHsYNway5tpGEtbR61iYO0j2Z4AEXAkajFXhcec=)
                          2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: vZnm7+By0q5kWG6gWOXk4Jh6zE5WPQzEPD/cJsu63j4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b2:b8:a5:cc:04:d1:c7:c0:d3:f8:7e:8e:fd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
        Validity
            Not Before: May 17 16:02:50 2024 GMT
            Not After : May 18 16:02:50 2024 GMT
        Subject: CN=ff56b9c8c50e7e2c08ca4cd4285ec8661647a397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:a3:09:e8:17:6a:0c:52:af:a2:3c:19:46:
                    ac:61:a1:f2:5e:49:94:a8:f5:42:66:1b:b6:f4:07:
                    56:29:b5:a5:eb:e7:c0:9c:1f:dc:ad:21:28:3b:4a:
                    5e:67:b4:e4:77:ba:f5:3c:82:58:b2:06:60:a1:a6:
                    ca:2c:6c:64:4c:93:96:94:c9:7f:78:03:be:8f:38:
                    4c:ec:52:28:bd:69:c0:9b:8b:1f:fd:fe:9a:0c:bd:
                    fe:3a:97:9b:43:ba:b9:19:36:f3:6e:28:d8:88:ec:
                    7e:2a:37:b9:ae:9a:4a:ae:87:a9:4a:c7:1b:01:46:
                    4f:07:b0:df:9e:df:92:73:42:cf:83:54:5b:05:45:
                    93:09:9c:e9:c5:0f:8f:9f:3f:a1:5d:8f:92:5d:73:
                    eb:af:68:3e:82:1d:71:9a:9a:bb:aa:26:f8:93:c9:
                    25:f9:65:85:46:3d:65:2d:73:35:b8:83:2e:6c:6d:
                    e0:d7:7d:33:54:b3:19:28:06:f4:70:c7:27:87:dc:
                    b3:bf:1c:c1:32:77:de:dc:ed:16:67:72:1d:ed:4b:
                    60:2d:f8:2f:8e:ec:85:9b:f2:2e:0a:9a:8a:28:60:
                    ac:c0:b4:5f:45:b4:4c:04:20:33:e7:ec:6e:32:22:
                    8b:38:40:ec:b7:99:db:60:76:ec:32:cc:6d:ba:af:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:56:B9:C8:C5:0E:7E:2C:08:CA:4C:D4:28:5E:C8:66:16:47:A3:97
            X509v3 Authority Key Identifier:
                keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f5:a5:a5:4c:85:6c:6e:eb:bb:8a:77:c0:f7:db:1c:96:e6:
         35:ce:2c:f8:f5:ef:a4:0f:32:d8:d4:8b:da:8f:79:23:31:1f:
         59:7f:f3:ed:ec:c1:3d:1e:75:e3:34:5c:3b:a5:e6:64:ca:d6:
         cc:4a:72:40:e3:cb:06:c3:ec:54:0f:50:19:22:64:07:30:90:
         cf:c1:e9:d2:be:27:27:a3:bc:39:03:0f:a2:d3:0b:e6:63:c3:
         a4:d2:41:00:11:6e:7e:da:75:f9:d0:fd:e3:11:6b:26:2e:70:
         ec:4b:e9:4e:a3:1a:c9:3b:7e:36:85:79:b8:61:41:ab:b1:7d:
         04:f9:b2:78:0e:66:70:7c:d2:8d:68:5d:8e:bb:3f:d9:07:64:
         a5:b6:df:af:e8:02:56:ea:af:c2:a6:57:d6:b6:91:51:64:49:
         a3:8d:c0:b7:c4:b3:fb:c8:78:5c:7a:29:68:0e:b5:ba:2c:8d:
         a5:39:d0:78:fc:a5:7a:e8:82:e7:e5:65:bd:fb:3c:3e:af:fb:
         5f:6e:18:64:29:93:b6:b2:48:37:12:77:d0:3c:f5:ec:f6:90:
         01:ab:da:03:7c:d6:0d:66:c7:07:1e:e1:48:46:31:1c:50:c8:
         2e:7b:7b:22:ab:32:01:fd:91:f0:a5:6e:1f:9f:9e:3f:6b:48:
         e4:09:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:19 2024 by rpki-client on console-fra.rpki-client.org