Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File:                     zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier:          uvPFedAz6y0sGudO15q37jGPlzJeMkYTYCWzqsgIlxU=
Subject key identifier:   E7:9C:1D:E9:92:0A:AA:C5:80:F8:2D:B0:04:48:9B:91:EB:72:43:4D
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer:       /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial:       01902A261C4F6829DF0C16AD376C203BEB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number:          11CB
Signing time:             Tue 18 Jun 2024 07:00:58 +0000
Manifest this update:     Tue 18 Jun 2024 07:00:58 +0000
Manifest next update:     Wed 19 Jun 2024 07:00:58 +0000
Files and hashes:         1: X8TN8jK1_MQQujk-Z4mmB7J0Vic.roa (hash: AZChRQtBvCclBm+TbvRffJ2RtUa2nA3rQdJLP0aFZSY=)
                          2: yI6dLYvD6ScmS3ufiFIKpitslks.roa (hash: LypzGhC3807/gmkYul4W1VzfM94ppqFAUoTBSf5cZpc=)
                          3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: 2cqYr4tnrUu3N+PHdf0ta6Yy2L1b8KvBn/EY9tjnHoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:26:1c:4f:68:29:df:0c:16:ad:37:6c:20:3b:eb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
        Validity
            Not Before: Jun 18 07:00:58 2024 GMT
            Not After : Jun 19 07:00:58 2024 GMT
        Subject: CN=e79c1de9920aaac580f82db004489b91eb72434d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:51:fa:fe:60:20:27:d6:37:54:d2:a5:fc:
                    74:39:21:8f:3e:53:e4:19:e0:2a:4d:7f:ba:1c:ed:
                    b9:9b:90:59:aa:27:89:33:c5:f8:0c:30:da:3b:c4:
                    59:6e:58:c0:01:40:32:77:39:9a:24:99:54:0f:48:
                    dc:d8:41:c9:0a:09:cc:93:c4:7b:3b:18:8a:99:e0:
                    9b:53:20:52:bd:c3:1c:80:16:b3:98:b9:a3:39:58:
                    1c:25:75:78:d2:a7:c3:57:66:94:6b:fa:86:e0:4b:
                    1a:8c:1d:57:39:96:14:1a:54:7a:b8:b7:e2:41:67:
                    98:6f:8b:71:81:92:2e:ad:2f:2e:01:95:0f:c0:88:
                    20:cf:22:6c:8a:79:f4:d1:56:d0:c3:4f:39:21:5b:
                    50:3e:54:ea:96:af:e1:1b:0c:85:d5:2b:c9:8c:e2:
                    95:a3:e4:76:17:7f:75:0e:0b:b5:71:1a:af:ea:f5:
                    90:da:b0:29:23:6a:5d:2f:b0:28:49:ca:fa:c4:3b:
                    76:4c:1f:f9:8c:96:27:05:31:22:bf:5b:11:5a:cb:
                    e8:83:1c:aa:a2:74:c4:25:85:a5:ff:ab:f0:21:88:
                    0c:2d:7d:87:98:09:6a:3a:34:c6:45:76:fb:3b:0e:
                    c4:8a:dd:e7:49:98:4e:e3:d7:35:67:db:8b:04:58:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9C:1D:E9:92:0A:AA:C5:80:F8:2D:B0:04:48:9B:91:EB:72:43:4D
            X509v3 Authority Key Identifier:
                keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:29:00:44:29:cd:9e:e5:37:32:38:9e:29:1b:24:84:a1:62:
         61:a6:6f:fa:fe:c4:7c:25:85:74:a7:6d:18:5c:a5:45:cf:ee:
         84:f8:71:13:e6:ae:da:14:01:40:25:58:de:9a:3f:90:14:a1:
         bd:fd:b6:79:6b:9a:bb:7e:39:93:54:f3:a9:0d:72:9d:31:13:
         ed:0d:f5:bd:7c:82:b4:11:cb:03:f5:f8:8e:a2:d8:7b:16:c1:
         85:52:8d:55:cd:58:1f:72:74:91:1c:f2:9c:92:54:d9:99:ba:
         35:84:d1:b9:c9:bf:1f:1f:bd:aa:ce:9b:6b:5e:ac:7b:34:b9:
         85:75:b5:55:c4:bf:2b:9d:63:69:02:1c:c4:ee:85:98:bd:65:
         d8:fe:a2:11:0c:ae:fb:d7:ae:ce:71:a1:7a:50:19:e4:39:54:
         61:d2:ee:3a:21:f9:64:e3:1b:10:c4:24:db:8f:aa:84:20:b8:
         90:19:39:fd:96:19:f2:30:b7:8c:74:8e:39:68:a8:c7:a5:fc:
         04:8d:54:fe:7c:12:29:29:a8:f0:fc:73:8b:a1:57:34:ff:b8:
         4b:60:e2:fd:ce:ba:b3:c8:e5:aa:be:0e:aa:1d:5b:1e:ae:2c:
         5a:42:44:dd:67:6c:b3:e1:6f:16:a7:e6:86:08:ff:97:e1:e5:
         6d:75:b6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:43:55 2024 by rpki-client on console-ams.rpki-client.org