Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File:                     Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier:          pU7/xoCXzbZnNiP18J/YoYRXEednOTlHmEghe9eiJQg=
Subject key identifier:   56:F7:72:2A:21:C2:03:BC:E9:7F:AE:DA:68:D8:D7:90:FE:17:00:E5
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer:       /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial:       018F8748A6C0AA9A991DCE772522DD3CA982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:36 +0000
Manifest this update:     Fri 17 May 2024 16:00:36 +0000
Manifest next update:     Sat 18 May 2024 16:00:36 +0000
Files and hashes:         1: AfKeN8Z4LsOO8hg6zBl5MwNY7xA.roa (hash: MDnFbZZ3NLNdBlB30xhpAi5VnJ3v6PlYxgA9qnjGeeE=)
                          2: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: J7Pffx9Oohs8iqoJz3Ro1TpWpBLeDhzm1AE6M5mNr5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a6:c0:aa:9a:99:1d:ce:77:25:22:dd:3c:a9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
        Validity
            Not Before: May 17 16:00:36 2024 GMT
            Not After : May 18 16:00:36 2024 GMT
        Subject: CN=56f7722a21c203bce97faeda68d8d790fe1700e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:38:2e:d9:03:8c:3b:87:f4:33:29:99:08:
                    76:9a:7f:d7:c1:26:94:7b:e1:3a:c2:20:f7:9a:36:
                    38:e2:90:fb:7a:ac:3f:7d:8e:cd:7f:93:5c:dc:6f:
                    03:68:69:0d:7d:de:a0:6e:a4:49:37:9c:2b:06:76:
                    20:bd:e5:a5:44:3c:78:de:a3:3b:ee:da:d6:00:95:
                    18:50:4d:09:57:51:ff:48:0f:a6:01:6c:8b:ca:43:
                    6b:27:d5:3e:0f:f3:23:43:7a:43:ff:4f:4f:6e:89:
                    c8:7a:c3:4b:51:28:08:e2:f1:8e:ea:0e:5b:da:d1:
                    d4:df:23:e9:86:f1:6b:e6:25:7f:5a:4e:60:43:6f:
                    28:c9:99:72:e2:f0:1e:35:6d:25:0c:a7:96:77:f5:
                    5e:64:55:26:94:16:00:89:e0:c8:1f:14:88:53:57:
                    56:d6:de:68:83:76:f4:20:c2:07:5a:cd:c1:d1:a7:
                    c5:eb:19:81:89:e1:94:39:6d:89:21:27:30:ae:20:
                    6b:f3:ce:51:55:83:20:51:d6:0b:f7:da:53:5b:40:
                    2e:e7:64:93:2a:83:4f:59:2f:05:d7:20:17:3c:d9:
                    a9:ca:bd:7f:04:b5:cf:e1:4e:2c:56:0b:57:27:8b:
                    a8:91:32:25:e6:8f:47:e6:fc:c2:9a:cb:23:b9:da:
                    90:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F7:72:2A:21:C2:03:BC:E9:7F:AE:DA:68:D8:D7:90:FE:17:00:E5
            X509v3 Authority Key Identifier:
                keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:43:eb:90:10:ce:93:74:36:8d:e7:e6:5d:05:69:bb:06:06:
         e0:e8:a9:76:07:4c:7c:5e:8b:10:08:2f:9e:0b:d0:91:b3:55:
         d9:62:d6:84:b3:e9:5a:25:54:06:f8:7d:a5:d9:d3:a3:f5:b8:
         40:aa:0b:74:93:da:32:89:17:ce:1e:e8:23:72:1f:3f:62:4f:
         c0:b7:de:ad:dc:a2:67:46:e3:0a:fa:6a:bd:a7:23:60:d0:a2:
         d9:5a:0b:9a:4e:32:f7:e7:ff:60:f2:d0:13:07:ae:9f:23:9b:
         b4:5f:ac:f4:92:22:8f:5a:cc:ce:cd:3e:ce:d9:bf:7b:79:09:
         37:a6:b6:7e:20:0e:b9:40:a1:6e:2d:33:d1:0c:ae:3c:dd:3d:
         9f:f5:53:5e:77:a6:b1:a1:9b:ac:63:e1:0a:a1:78:b2:82:34:
         3d:30:f2:07:f9:97:d2:af:48:36:0c:8a:89:e2:45:78:33:c0:
         7e:a4:22:8b:d1:d4:98:1f:99:5f:23:36:46:cb:29:4d:dd:13:
         59:64:4d:83:41:3d:8e:93:78:e8:d4:9b:2c:87:54:ba:42:7d:
         64:3d:2d:19:b4:89:b5:7f:a7:ee:fc:ed:8a:78:cb:95:1e:6b:
         a0:7d:59:26:55:7f:2a:7c:09:67:9b:b8:04:5c:8d:7c:26:e4:
         e4:f8:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:52 2024 by rpki-client on console-ams.rpki-client.org