Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File:                     Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier:          SVuW0kh5n1Hn6UbIJnbs9EMaBwTh7Oc6HJKU2MS2l84=
Subject key identifier:   F1:1C:C9:9A:67:98:85:2C:A8:F1:1F:4C:45:C3:3D:B6:93:E9:EF:E1
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer:       /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial:       0191F96C241D5D246FB8A48D4CAE9BA111A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number:          0134
Signing time:             Mon 16 Sep 2024 06:01:39 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:39 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:39 +0000
Files and hashes:         1: WeE29Za3dmlq_LY5WDzyStxbQjA.roa (hash: vSfwmGoSN7JOYMpBmsRV2zfdDk3Nd0UMY8ia3f2X+GM=)
                          2: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: /hKcGT7xo0aE8ryFUIauDUC2eDvGCAIHESKxCFoipSE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6c:24:1d:5d:24:6f:b8:a4:8d:4c:ae:9b:a1:11:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
        Validity
            Not Before: Sep 16 06:01:39 2024 GMT
            Not After : Sep 17 06:01:39 2024 GMT
        Subject: CN=f11cc99a6798852ca8f11f4c45c33db693e9efe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:c4:41:6b:59:a9:91:be:93:50:0b:39:d3:
                    d8:22:e4:39:f0:f7:99:8c:02:a6:f3:78:89:b7:63:
                    9f:69:cd:02:12:de:f2:a5:c6:c7:6c:e6:d4:d3:65:
                    88:48:3e:b9:ef:98:ef:0d:98:cd:eb:30:62:29:d3:
                    75:cc:47:7c:15:56:17:81:96:d6:9c:f0:3b:6b:28:
                    36:2f:91:46:40:41:ae:0d:52:92:ac:4c:fb:63:db:
                    7d:54:b5:c8:d4:c4:dd:b5:62:64:2e:7d:e5:d9:c1:
                    3e:0e:ef:a0:03:6d:83:53:6f:e1:73:f0:0e:c4:2a:
                    66:95:3e:3a:27:87:f7:4f:0b:32:3a:8e:24:aa:cf:
                    66:50:4d:6a:29:47:16:1d:d2:ee:9e:9a:ea:3b:8c:
                    0c:67:bc:b0:52:74:4f:a0:a7:55:9e:97:2d:fa:32:
                    da:a6:d8:7e:08:40:99:7f:fa:8d:88:d6:c8:fb:43:
                    0e:13:b4:b9:e7:34:45:47:3a:ff:0a:a6:38:de:d2:
                    de:05:fd:de:39:d1:9d:d3:46:c7:30:8d:64:97:c9:
                    5e:20:5b:d9:4f:7b:5b:4c:b9:10:8f:3e:8e:d5:fa:
                    36:2c:7b:11:b5:42:57:76:a3:11:1c:2c:ff:77:22:
                    d3:db:33:62:9b:a3:40:ad:43:19:65:fd:e8:4b:68:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1C:C9:9A:67:98:85:2C:A8:F1:1F:4C:45:C3:3D:B6:93:E9:EF:E1
            X509v3 Authority Key Identifier:
                keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:49:97:84:34:b0:df:71:d3:3d:b2:1b:dc:9e:bc:93:87:8e:
         13:fe:9c:f1:66:5d:4c:b8:6b:54:14:d3:c0:c2:90:70:ce:c2:
         b2:a9:ae:26:0b:09:96:70:b0:47:a6:13:ea:c0:09:4a:a5:7f:
         23:1e:af:7f:a6:87:eb:d0:3c:d8:cf:23:c6:16:24:8c:85:3f:
         ff:4c:a6:3c:5c:bf:5a:d6:6d:0d:e4:54:f5:1a:6d:64:a7:0b:
         b8:9f:50:07:53:c5:4e:28:d3:cc:2e:9d:ea:e9:59:82:d0:99:
         c7:b2:be:78:cc:1e:6b:18:04:10:17:77:50:93:a0:c3:d9:7c:
         6f:10:ce:c2:f2:a5:3b:bd:e9:39:3b:99:6b:b7:7e:0d:cb:ff:
         20:99:29:89:d0:d6:c9:d0:bb:92:42:0f:02:71:32:6e:ef:31:
         77:6c:34:b0:10:23:65:0b:6f:f6:b2:f2:d5:4c:7d:98:d9:6e:
         1b:ca:82:4c:e8:01:9d:b0:31:14:5f:04:4b:19:79:c9:d9:54:
         e4:bd:84:c9:37:1e:fc:96:5a:f9:d2:f3:50:05:c8:dc:80:65:
         01:1f:f4:93:48:dc:fb:ff:9d:42:a3:bd:85:8f:64:dc:7b:17:
         3c:54:53:16:31:aa:ed:02:ae:b9:1c:65:9c:d2:25:b5:54:cd:
         ab:74:4c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:21:11 2024 by rpki-client on console-fra.rpki-client.org