Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File:                     1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier:          G3LPWcHTmH74UpFyPotYzAfskOT3EJUC0dfIEajUq7k=
Subject key identifier:   39:D6:B0:05:09:BB:05:03:BC:4D:B4:D1:BA:B2:F1:5A:8B:A4:BD:41
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer:       /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial:       018F3776EBE8D60E64ECF24273C4A44C07AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 04:01:31 +0000
Manifest this update:     Thu 02 May 2024 04:01:31 +0000
Manifest next update:     Fri 03 May 2024 04:01:31 +0000
Files and hashes:         1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: rhGcSSTvP9xOnQJ0wLavYsZQM+lU3AWtiVmcl9heLO0=)
                          2: JPT0IliCUzMXphM0NVGfT_WvNYI.roa (hash: LY2opO6HdvHrbJtYPsL11chstZUDX1Jxhcqp1Z0bZ0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:eb:e8:d6:0e:64:ec:f2:42:73:c4:a4:4c:07:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
        Validity
            Not Before: May  2 04:01:31 2024 GMT
            Not After : May  3 04:01:31 2024 GMT
        Subject: CN=39d6b00509bb0503bc4db4d1bab2f15a8ba4bd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:d4:c1:87:2d:e4:38:98:21:29:fd:78:23:
                    20:29:0e:c0:cf:b0:72:41:38:06:aa:8c:32:05:62:
                    1a:40:1a:16:c8:6d:0f:d1:be:a9:be:ff:1b:3c:b5:
                    b9:d8:cd:1c:13:35:60:5f:c2:11:b4:9e:3c:0d:9b:
                    42:7d:99:07:96:06:ed:f8:32:99:27:e4:0c:a6:a0:
                    86:c5:d2:a3:2a:0c:ff:57:73:75:b9:32:39:e2:ed:
                    7b:e1:db:fe:44:ab:2a:f5:5c:94:8b:3f:31:b4:77:
                    ae:40:1c:4d:71:a2:6d:7a:5d:25:2d:73:5c:30:7e:
                    5d:e9:cc:00:88:e4:d5:d1:2f:4a:fb:e0:7c:8f:94:
                    e6:82:51:82:a6:cd:54:ab:40:1c:59:be:e9:ad:18:
                    19:4d:17:9a:4b:19:9c:5c:81:b1:74:31:3c:12:f0:
                    b1:7a:60:4a:77:20:2b:b8:95:e1:16:a8:e2:34:66:
                    52:5f:3b:2e:87:bf:21:89:23:be:31:ee:17:0a:e3:
                    1e:5e:d2:7b:82:1b:22:a4:75:cf:ae:27:02:d2:1c:
                    f2:2d:a3:85:a0:bc:9e:82:8a:ba:bb:c2:14:7b:df:
                    f7:01:50:3c:e8:df:b7:81:51:9d:fb:3a:3b:08:2c:
                    e5:e3:f8:f5:a2:f6:fe:90:e1:3d:93:4e:0d:8d:f4:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:B0:05:09:BB:05:03:BC:4D:B4:D1:BA:B2:F1:5A:8B:A4:BD:41
            X509v3 Authority Key Identifier:
                keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b6:3c:ba:6c:b1:e2:91:28:8f:21:ec:9d:7a:62:ea:93:e4:
         20:d9:1d:7f:83:37:72:cf:aa:09:08:ae:b6:43:af:f9:9f:44:
         5b:da:a8:8b:bf:f3:94:b1:42:40:9f:0d:0f:34:3f:90:0c:13:
         8f:5a:97:4a:bc:2e:ee:f3:2f:30:76:cb:78:59:7c:c0:a2:90:
         3b:ff:60:4e:c7:ca:3c:52:67:a0:de:a8:8c:2b:66:b3:27:d2:
         ea:5a:53:19:62:ef:28:f7:5c:4e:d4:7d:12:e1:6f:f4:3d:43:
         36:d3:6e:58:1b:02:4b:62:00:ec:34:f6:95:46:0d:45:42:d2:
         a6:9b:89:fc:1a:f8:52:af:1a:7f:7a:94:8c:49:f2:c0:dd:05:
         84:f4:1e:78:31:dc:9b:ed:5e:57:5d:57:08:31:4e:65:d9:e4:
         95:5c:97:a9:b9:73:46:1e:97:c4:5f:97:05:5a:7e:07:a2:ed:
         ed:0d:ec:88:05:2d:84:a3:8b:b1:e0:7d:cc:8d:98:91:21:68:
         b7:3c:73:c5:0a:91:5a:d3:9f:ad:2f:87:9c:49:c6:e0:a5:9c:
         69:c5:a9:ec:fa:68:ff:40:87:8c:bd:3f:ee:86:69:8d:23:ab:
         84:26:60:ee:78:c3:63:b7:a3:4a:bd:3c:c0:ea:fa:36:76:40:
         18:6a:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:26:03 2024 by rpki-client on console-fra.rpki-client.org