Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File:                     dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier:          c2kj+49M8DsFYHWsZRM3mi8OETehlQgN4urCy+0FF6Y=
Subject key identifier:   59:AE:51:8D:75:CD:CE:B3:78:D6:41:E8:1A:A2:DA:D9:DC:12:EE:F9
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer:       /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial:       018F84476F33F043C68A27A680915E720DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number:          029A
Signing time:             Fri 17 May 2024 02:00:25 +0000
Manifest this update:     Fri 17 May 2024 02:00:25 +0000
Manifest next update:     Sat 18 May 2024 02:00:25 +0000
Files and hashes:         1: 1-MXZ_45rZqW8fbOEu3pAjmwnybU.roa (hash: D5V72LUbLlKACmoXF1YZz0Xb4llwr5TLbmDCXFhcPkY=)
                          2: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: UQtoG+4R4bHrHZb+eu2kbb7h7ZoRdxCbqd/1jI/unAU=)
                          3: zqTbCR8XSG40tQD9X_vCC8OpRFw.roa (hash: 7nGfGNlVvXQd8XrB1CoaI8RSIawe6UmLoglhMQdgYl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:47:6f:33:f0:43:c6:8a:27:a6:80:91:5e:72:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
        Validity
            Not Before: May 17 02:00:25 2024 GMT
            Not After : May 18 02:00:25 2024 GMT
        Subject: CN=59ae518d75cdceb378d641e81aa2dad9dc12eef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:a6:b4:67:cf:94:9c:a1:43:54:fb:1b:0c:
                    5a:ec:68:8d:4f:5a:1b:45:03:a0:7a:bf:b8:66:e9:
                    a3:be:e5:3c:77:05:60:ac:33:d6:e0:a9:bf:31:a2:
                    e7:6d:07:40:b8:10:b4:83:a7:47:35:fd:39:f6:6c:
                    3c:ee:d0:1f:07:84:f6:ed:d0:b6:78:1d:59:bc:ee:
                    e9:60:6e:7f:46:6c:04:aa:0f:04:b3:b0:9e:e8:bd:
                    73:3b:92:5a:6f:5f:b9:47:c2:c8:d1:2a:93:82:63:
                    1e:5f:7d:8a:5b:d9:6b:d8:e7:54:c3:84:96:1e:f8:
                    e5:a1:d7:22:e2:78:e0:f3:10:1d:c0:4b:1e:e6:8b:
                    b2:20:6d:84:e2:95:dc:35:15:f9:22:1a:d0:8f:1a:
                    22:31:63:ec:b4:5b:64:32:97:86:48:f9:03:90:37:
                    41:4b:d6:1a:9d:1c:e6:5b:bd:75:e1:64:2b:13:09:
                    e6:e4:c7:c8:52:de:d4:3a:7a:9d:e5:46:11:47:d3:
                    3c:84:7d:e2:2b:ff:28:8f:2f:d7:14:2f:08:fe:8b:
                    72:a9:31:7a:d8:75:d1:c6:46:c4:9a:a8:93:87:d3:
                    39:a8:e1:ba:cf:3e:63:3b:53:30:92:e1:43:5b:f9:
                    bc:30:3d:ba:97:7b:a3:59:c5:42:e0:61:7c:95:f7:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AE:51:8D:75:CD:CE:B3:78:D6:41:E8:1A:A2:DA:D9:DC:12:EE:F9
            X509v3 Authority Key Identifier:
                keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7e:b4:ee:d6:52:7f:04:ce:c4:2f:dc:f2:00:cc:72:7c:32:
         08:91:ec:a1:a1:46:0a:4a:b5:45:0e:a6:41:e3:14:54:ab:b4:
         1f:cf:77:6a:0f:60:9d:fd:5b:7d:25:71:85:1b:6e:70:01:cf:
         6d:ca:08:2a:3e:1e:26:96:43:d7:ea:fe:01:9e:ce:c1:36:55:
         17:41:6a:ba:eb:a0:8b:8d:c3:aa:d0:c0:08:65:46:ef:97:87:
         f2:d8:3b:da:bc:fd:82:b0:45:db:b8:c1:02:27:a3:fe:a8:7e:
         ae:37:c6:dd:9a:b3:c7:34:f8:df:34:f7:f6:b5:bb:6f:e2:bf:
         48:bb:ad:8d:ef:29:74:e5:f0:93:8a:39:bf:6b:a0:35:62:89:
         e4:37:75:8e:f5:8b:59:bc:43:fa:ee:b8:39:a1:27:60:50:1e:
         c2:5d:54:0e:da:7a:dc:d1:2f:f6:f6:74:56:1d:ad:b5:fa:34:
         71:e1:45:fb:43:ae:85:14:38:20:1e:7a:0e:ef:49:ab:f6:dd:
         37:cf:92:31:a2:09:d4:0b:9d:d2:e6:42:da:81:f8:38:a9:57:
         00:78:e0:4d:f0:69:84:ea:0e:b3:02:bc:56:a8:d6:d3:bc:6a:
         45:5f:08:27:a4:df:de:19:25:24:e2:02:d2:16:3d:da:c0:df:
         44:39:a4:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ER28z8EPGiiemgJFecg3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy
Zjk2ODQwHhcNMjQwNTE3MDIwMDI1WhcNMjQwNTE4MDIwMDI1WjAzMTEwLwYDVQQD
Eyg1OWFlNTE4ZDc1Y2RjZWIzNzhkNjQxZTgxYWEyZGFkOWRjMTJlZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls6mtGfPlJyhQ1T7Gwxa7GiNT1ob
RQOger+4ZumjvuU8dwVgrDPW4Km/MaLnbQdAuBC0g6dHNf059mw87tAfB4T27dC2
eB1ZvO7pYG5/RmwEqg8Es7Ce6L1zO5Jab1+5R8LI0SqTgmMeX32KW9lr2OdUw4SW
Hvjlodci4njg8xAdwEse5ouyIG2E4pXcNRX5IhrQjxoiMWPstFtkMpeGSPkDkDdB
S9YanRzmW7114WQrEwnm5MfIUt7UOnqd5UYRR9M8hH3iK/8ojy/XFC8I/otyqTF6
2HXRxkbEmqiTh9M5qOG6zz5jO1MwkuFDW/m8MD26l3ujWcVC4GF8lffMAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmuUY11zc6zeNZB6Bqi2tncEu75MB8GA1UdIwQY
MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt
MWE4MzAxYjdlNmRlLzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl
LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFn607tZS
fwTOxC/c8gDMcnwyCJHsoaFGCkq1RQ6mQeMUVKu0H893ag9gnf1bfSVxhRtucAHP
bcoIKj4eJpZD1+r+AZ7OwTZVF0Fquuugi43DqtDACGVG75eH8tg72rz9grBF27jB
Aiej/qh+rjfG3ZqzxzT43zT39rW7b+K/SLutje8pdOXwk4o5v2ugNWKJ5Dd1jvWL
WbxD+u64OaEnYFAewl1UDtp63NEv9vZ0Vh2ttfo0ceFF+0OuhRQ4IB56Du9Jq/bd
N8+SMaIJ1Aud0uZC2oH4OKlXAHjgTfBphOoOswK8VqjW07xqRV8IJ6Tf3hklJOIC
0hY92sDfRDmkQQ==
-----END CERTIFICATE-----