Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File:                     zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier:          0/FivMdWP7uAwmnbm77wmCJSJ4np4mwc6RC/GvTShQY=
Subject key identifier:   6C:53:BE:9B:69:3F:7B:8E:3C:57:F9:06:B0:36:BD:57:9D:92:84:2C
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer:       /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial:       018F87B65E18CCA127A3D517B2A45FF7D9D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number:          117F
Signing time:             Fri 17 May 2024 18:00:26 +0000
Manifest this update:     Fri 17 May 2024 18:00:26 +0000
Manifest next update:     Sat 18 May 2024 18:00:26 +0000
Files and hashes:         1: s8Ak-d9oQvPE-L5srU4N-mifygk.roa (hash: KpiEmuGEu84m9OssqxjrgNqoPQN6bPJ/MILuHuA7r4A=)
                          2: yVvrh4pl0ynBVhIt0glMCY2KdHg.roa (hash: VeLMooeXnO5mYAvemTl5kXdHhLrNGLU1kCfWjox592U=)
                          3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: QZb5y/odHkqtLuX7I21u1J38bc28NDaojisSmCiTeTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5e:18:cc:a1:27:a3:d5:17:b2:a4:5f:f7:d9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
        Validity
            Not Before: May 17 18:00:26 2024 GMT
            Not After : May 18 18:00:26 2024 GMT
        Subject: CN=6c53be9b693f7b8e3c57f906b036bd579d92842c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:26:5b:b5:b1:36:3d:ae:b1:90:44:18:72:
                    5a:3e:92:37:18:5a:64:b1:29:85:25:91:de:a3:bc:
                    db:d4:f5:ef:b1:19:7b:90:f0:38:d8:3c:dd:c5:b3:
                    3e:99:d8:ee:c3:8e:fd:52:f5:15:91:92:a5:14:64:
                    78:3a:b6:80:97:d7:e3:f8:33:af:3b:0f:21:37:17:
                    f6:44:5d:35:0e:05:2f:0a:58:c8:a4:10:35:77:4e:
                    62:af:20:7e:1f:96:43:c0:e7:57:05:e8:93:5a:2f:
                    fd:e6:c4:e4:09:36:73:3b:26:56:8e:85:d8:9f:4a:
                    4c:54:43:9a:3c:81:f6:e5:44:46:a6:5f:8b:5d:56:
                    ff:4a:4a:91:e8:f1:cf:e2:65:0d:af:64:16:ff:63:
                    e8:cc:39:ce:f1:68:bf:88:a5:1b:27:35:44:e6:b3:
                    b4:f5:fe:df:70:e9:86:00:b5:96:3b:18:07:e1:b2:
                    ed:54:30:6b:cf:b1:fb:b8:97:70:88:aa:ad:e5:1f:
                    8c:af:d1:c1:5f:26:86:22:0e:e4:56:03:05:2f:c6:
                    86:63:91:0c:e6:e7:3d:96:25:69:f5:3f:50:fc:fd:
                    da:a0:57:44:bc:30:66:c9:86:30:4a:2d:ee:ec:43:
                    5e:d3:d9:9b:52:dc:51:01:f0:95:80:5e:16:24:bb:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:53:BE:9B:69:3F:7B:8E:3C:57:F9:06:B0:36:BD:57:9D:92:84:2C
            X509v3 Authority Key Identifier:
                keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:85:6e:2d:4d:4a:e6:fb:c6:9f:a2:2c:dc:bb:e7:95:19:
         4f:99:d1:61:ac:54:da:ba:34:b3:26:ed:01:20:a9:3a:fd:ee:
         94:b4:2e:da:22:5e:91:b4:3f:03:7c:b3:07:40:52:fb:88:0a:
         66:8d:55:9f:36:2c:c3:2d:25:56:b5:6d:59:57:80:cf:18:ca:
         a8:d5:9e:18:30:22:55:39:ae:30:50:f9:6e:fc:d7:e3:ea:52:
         db:fe:7c:c8:18:a7:a7:49:b1:90:39:34:f6:6f:9b:4f:5d:26:
         f6:16:7d:85:3c:dc:93:28:41:ef:1f:74:ea:26:65:c5:cf:b3:
         32:15:21:56:7a:10:17:f2:ee:b7:be:08:ab:15:ad:65:71:d9:
         78:9f:2f:0d:a9:cb:18:39:ad:36:57:ca:f4:be:4e:c7:59:57:
         d8:ef:64:b9:12:41:83:0e:ca:b5:89:73:d5:9f:bb:0b:cf:92:
         4f:9a:b3:4f:81:07:44:03:cc:a7:74:01:1b:ea:b3:01:f5:af:
         8a:da:8b:8e:9b:b5:06:49:a2:c7:93:9e:74:f0:1a:7d:4d:62:
         19:82:c3:7d:88:92:e4:c3:74:79:7f:6a:78:7b:73:79:54:45:
         69:3e:db:28:29:b6:da:43:c3:90:a0:9b:ed:3c:a8:9f:c2:b9:
         ee:3e:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----