Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File:                     ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier:          0g3rGPJmX0vJ58Od4ppWXxBtsdWOxA2IStOpwtN0x3U=
Subject key identifier:   89:BF:6F:7C:38:93:4E:33:3F:AE:F9:FA:2A:62:B1:98:FA:88:11:87
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer:       /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial:       018F855C6DBF3A18683A1286C65BE030FE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number:          01DE
Signing time:             Fri 17 May 2024 07:02:58 +0000
Manifest this update:     Fri 17 May 2024 07:02:58 +0000
Manifest next update:     Sat 18 May 2024 07:02:58 +0000
Files and hashes:         1: 8akYZ6Bwmawm402BBT9dDQWwjuM.roa (hash: sd4cHZz+ykC4BkcX5erHTa1uLXy+P1cgLKgjh4huPgA=)
                          2: KzyKsEpiMfnMXZ7n_lOIE78t_zE.roa (hash: 35wHrypdt/aLDPxjsEKyi1F7nRjBvezYN1GoZcJa0Ew=)
                          3: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: Z3oruHjerlCj3kGEFV1behroTOfZFjV7VgPTxIm5ckw=)
                          4: fe7WdecBqJJzr6tXEH0va1gh-hA.roa (hash: nhESgR9Ej8xDhNm2ksFYUTXvXet3MWXowjKmGBSYH/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5c:6d:bf:3a:18:68:3a:12:86:c6:5b:e0:30:fe:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
        Validity
            Not Before: May 17 07:02:58 2024 GMT
            Not After : May 18 07:02:58 2024 GMT
        Subject: CN=89bf6f7c38934e333faef9fa2a62b198fa881187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:ff:3d:63:40:a8:b1:eb:1a:05:1c:a5:2c:
                    b0:c6:92:3c:1f:94:a6:1c:15:e6:b9:21:34:cb:f1:
                    43:fb:b1:94:c9:7d:69:73:38:b5:e2:38:70:84:74:
                    c9:98:eb:36:ae:fb:ab:af:e7:31:41:da:16:69:61:
                    24:ca:72:0c:14:53:40:3a:56:3c:b2:91:98:74:6a:
                    39:93:2a:b1:45:14:bd:84:3e:ca:76:62:18:2d:ad:
                    0f:87:69:a6:a1:50:75:f1:cc:ab:32:1f:6f:fc:7f:
                    4f:a2:2e:84:83:ea:75:d4:0a:5a:6f:dd:c1:6a:bc:
                    05:a2:3e:70:53:ad:15:9c:ab:03:f5:91:57:0b:eb:
                    e3:1a:ae:e5:03:9a:ba:98:a4:59:a6:e4:6b:d4:68:
                    a9:82:26:65:35:5a:17:25:ce:84:89:f8:51:d9:48:
                    ba:a3:59:a1:1e:db:da:59:d8:78:46:22:9c:6d:fc:
                    44:85:e8:72:81:ec:d7:80:b7:85:b2:c1:4b:61:85:
                    3e:d3:11:f2:98:e9:ce:0f:a1:3c:9e:bf:c6:b5:9b:
                    35:f8:d1:f1:86:33:5e:ff:75:ff:aa:c3:de:1f:06:
                    6f:df:1e:b3:21:2d:8a:d4:fd:f0:ae:cd:64:89:be:
                    44:a2:78:fe:56:73:9b:12:37:17:5a:38:f4:00:c9:
                    87:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BF:6F:7C:38:93:4E:33:3F:AE:F9:FA:2A:62:B1:98:FA:88:11:87
            X509v3 Authority Key Identifier:
                keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:a6:4d:eb:c0:4f:24:78:73:a8:c5:5a:a2:aa:5c:39:7f:
         4c:cb:a3:34:be:33:1a:48:6a:6f:e7:98:f5:fa:3d:37:7e:4e:
         8f:40:f5:ff:29:3f:77:ae:4a:ff:4f:7f:e9:3a:f1:dd:81:a6:
         d1:98:a4:fd:44:6a:12:02:d3:cf:94:e4:31:32:45:f3:f4:31:
         a7:f8:76:0d:b8:96:4d:74:82:31:bb:6c:ca:a0:53:e5:ed:57:
         74:1f:32:99:45:a4:21:ff:9e:09:58:5d:bb:0c:4d:21:d3:48:
         55:34:3e:21:c7:ba:03:3c:bf:ec:8a:7d:ca:6d:d4:95:0c:c7:
         51:0b:b3:32:4a:21:2b:11:8f:00:9d:8b:e6:cc:7d:44:19:4a:
         bd:50:51:f2:0f:b0:ee:9d:ec:cc:37:d3:46:c2:31:ad:1e:c9:
         ab:8b:05:02:2b:7e:77:d0:cc:7b:45:e9:ed:10:6f:99:b4:aa:
         c7:c7:ab:64:29:3e:7d:cf:01:63:b9:d8:35:c3:78:69:f5:ee:
         19:a2:49:be:52:da:57:28:ab:5a:fb:fa:38:56:78:c5:66:34:
         c6:a7:48:9a:1d:5b:aa:02:c2:aa:bb:4b:72:c6:8c:85:6a:bf:
         3d:25:85:76:1e:de:ed:4f:87:ae:cb:0e:6f:8f:71:4d:cf:0a:
         d5:13:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:42:59 2024 by rpki-client on console-fra.rpki-client.org