Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File:                     Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier:          XcPbUCq/nb/enHc3NGeWF8rKNPcU3bfPhvSOfRs8ji4=
Subject key identifier:   D3:0B:B3:A3:C5:9A:86:3B:12:97:0A:0D:E4:79:5C:44:99:7A:89:70
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer:       /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial:       018F8892699CC487EA7617B850599E812B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number:          70
Signing time:             Fri 17 May 2024 22:00:47 +0000
Manifest this update:     Fri 17 May 2024 22:00:47 +0000
Manifest next update:     Sat 18 May 2024 22:00:47 +0000
Files and hashes:         1: 5Bt661qfR5rb9KKZqk97lUGYZAw.roa (hash: Gwecprg6ZviqbhmQ/rX9NFsll8ganQl3FvKt2m/ueWY=)
                          2: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: Eg6LHaWjtTL9iXDXnubxMZtpJZhdJT/XcJSbprz6ghk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:69:9c:c4:87:ea:76:17:b8:50:59:9e:81:2b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
        Validity
            Not Before: May 17 22:00:47 2024 GMT
            Not After : May 18 22:00:47 2024 GMT
        Subject: CN=d30bb3a3c59a863b12970a0de4795c44997a8970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:03:d1:8c:d5:98:4b:11:cf:cb:58:e6:3a:
                    d4:65:76:08:0c:e8:5a:4e:41:3d:3c:d5:68:87:b4:
                    72:67:51:31:3e:8d:42:d5:15:4b:f8:fd:11:57:dc:
                    73:04:f9:57:5b:bc:bf:56:9b:5b:ca:3e:bf:75:b7:
                    cc:6f:aa:f0:74:66:74:7d:65:2a:3e:b5:8a:07:23:
                    00:ac:a9:97:96:eb:80:b3:9b:61:26:18:23:38:9b:
                    43:a6:00:7f:7b:5e:b3:18:1f:fa:43:e2:1c:8c:58:
                    79:0b:77:a3:0b:62:df:7c:f9:03:3f:50:2b:0e:02:
                    c5:54:5b:26:74:41:e8:22:9e:af:dc:13:ec:00:1f:
                    54:c6:59:f8:5c:7a:e0:f5:f1:74:ca:63:c1:3a:4f:
                    f1:74:c3:5f:1c:db:45:c2:fe:79:b6:99:08:41:bc:
                    c5:48:3b:a6:1a:5f:df:a8:07:07:96:64:fe:cd:e3:
                    46:c7:da:c4:24:ce:6a:a0:06:c0:f1:0b:9c:81:fa:
                    2a:9f:cc:93:e9:50:65:72:d9:0f:40:ab:b7:00:0a:
                    5d:a2:c4:b1:6a:3d:c2:20:d0:02:f3:e9:ee:2d:8d:
                    aa:c8:9b:e6:f3:51:f4:89:0f:99:c8:b6:6f:a8:06:
                    fe:69:ce:e9:69:29:d0:38:00:fc:f6:82:ed:65:f1:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0B:B3:A3:C5:9A:86:3B:12:97:0A:0D:E4:79:5C:44:99:7A:89:70
            X509v3 Authority Key Identifier:
                keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:36:b4:ab:a0:ac:87:20:95:41:a7:b1:7f:67:ff:33:49:26:
         98:98:7b:7a:25:04:a4:e8:c1:65:e4:4f:f7:cb:d4:3e:fa:aa:
         0e:54:48:53:6d:01:ad:43:f6:23:ed:f1:11:e3:d9:3c:5e:24:
         46:1e:c6:6b:49:af:cf:66:5f:d8:c9:ae:42:89:35:69:73:bd:
         81:d2:5a:ec:3a:26:15:91:7d:95:a9:fa:94:d1:56:8f:03:9d:
         53:15:22:96:6e:b0:ca:18:e0:97:0e:90:32:9d:8c:cb:c2:a4:
         e4:db:37:0c:4b:0e:01:e6:16:6c:21:0f:0f:cd:c8:6b:ab:21:
         ca:f8:97:66:ae:c1:ef:2c:90:db:2f:3c:89:aa:7c:6f:6f:68:
         4e:f6:e1:35:7f:3c:ae:8a:5a:9d:ea:7f:dc:d1:a5:d3:29:e4:
         6d:bd:2d:b6:35:b4:9d:2a:2a:4b:ea:3a:1e:16:e1:32:1a:2a:
         71:b1:7a:45:23:cd:e1:a4:ae:e8:72:b5:42:ba:04:06:ed:cc:
         6f:7e:3e:38:02:66:4e:8c:43:60:1f:7b:29:52:47:78:cf:1e:
         16:54:6b:85:1c:13:23:31:4e:24:c3:14:58:b0:ec:2b:a0:0e:
         0e:33:70:45:ac:22:57:f5:87:57:74:1f:b9:62:2b:e5:b1:09:
         6f:5c:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:48:28 2024 by rpki-client on console-ams.rpki-client.org