Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File:                     Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier:          VmvKWPFgeU8xmCdq8akdChMdKgRYKyAjRRFzoAL0Fxc=
Subject key identifier:   C6:8E:14:A3:0D:00:81:F8:D0:4C:DE:6D:FE:FF:5A:36:69:A4:68:D8
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer:       /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial:       018F874AE11CDBF9CEFE385965F175061E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:03:02 +0000
Manifest this update:     Fri 17 May 2024 16:03:02 +0000
Manifest next update:     Sat 18 May 2024 16:03:02 +0000
Files and hashes:         1: G_xknW3R6j_BAMsYnC0TJpAxwbE.roa (hash: m6mIvsd0lX/mklK4k4hJHXPAeQyAsXunRHs9gj7a5aU=)
                          2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: oPgrnAiJcMyIgE5FwJRSxjUdqybSksvKntM74kMJNuU=)
                          3: v1iO82Ndv5XslXxmLlk1JCmNJgU.roa (hash: 3TnNtQdYZh1Pmwdlws3+Zw8hbwtZGtY6ogZCeIxz8Zc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e1:1c:db:f9:ce:fe:38:59:65:f1:75:06:1e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
        Validity
            Not Before: May 17 16:03:02 2024 GMT
            Not After : May 18 16:03:02 2024 GMT
        Subject: CN=c68e14a30d0081f8d04cde6dfeff5a3669a468d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:46:8a:ec:ee:cc:5a:a1:6d:5c:f1:2c:9c:
                    84:a5:f1:df:f8:88:71:d8:51:e4:cb:8e:87:2e:ac:
                    b3:4d:c3:61:b8:67:30:7f:3d:a7:33:a1:cf:8b:8e:
                    e5:72:be:df:74:d6:7b:32:66:c8:64:67:41:74:cc:
                    d3:5f:65:51:0d:b3:27:41:81:54:4d:86:9e:b8:02:
                    21:db:4b:02:fa:05:88:8d:ab:80:f7:67:1c:87:d7:
                    d7:06:81:72:fc:e8:49:e9:aa:36:11:8c:a5:b8:7a:
                    d0:ed:b7:a5:f1:8a:4c:2f:f8:b7:6e:f1:8b:99:d3:
                    2f:e4:9f:db:7e:e0:67:ae:1b:05:72:5f:e7:73:14:
                    15:f0:d3:93:3b:5e:e4:6a:37:91:14:c0:dd:c5:e6:
                    40:0b:dd:d1:b2:54:1d:ed:d9:b6:e4:a2:8d:ce:05:
                    30:25:dc:1a:ec:83:b4:09:bd:a7:36:5b:20:14:b9:
                    65:cf:24:70:7b:3b:13:0f:06:aa:f4:74:7e:2e:b1:
                    39:99:e4:75:46:a9:84:04:cb:43:49:ec:c9:73:68:
                    bc:0c:8f:59:db:1c:21:52:40:d3:8c:36:7a:b6:d4:
                    f8:cd:c3:b9:f8:74:e9:53:df:98:c0:8b:ad:68:43:
                    26:4d:3b:a4:fe:06:a8:79:5a:89:b8:15:bc:23:dd:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:14:A3:0D:00:81:F8:D0:4C:DE:6D:FE:FF:5A:36:69:A4:68:D8
            X509v3 Authority Key Identifier:
                keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c2:66:ab:e3:bc:73:70:32:65:f2:ff:76:ac:14:1a:1c:bf:
         ad:12:49:51:1b:49:f0:f1:71:1a:bf:fa:57:5d:0c:09:d5:dc:
         5c:ec:22:7d:2a:2c:30:18:d4:22:b3:22:95:ec:7e:4d:d7:2d:
         0d:b3:ef:18:26:5b:d1:5f:f0:95:6d:13:28:e1:47:68:a4:3d:
         b8:19:e0:1e:18:30:28:09:59:59:21:cd:74:4e:8c:d4:2f:dc:
         a5:53:22:70:db:50:cd:60:49:39:85:88:fa:ec:0a:8e:1b:b2:
         c9:61:be:c7:ac:4e:c6:7b:90:92:c3:7e:90:2e:d6:1d:37:93:
         93:a1:b4:06:7a:85:7f:a4:0e:11:4d:96:0a:10:30:36:6b:9e:
         68:66:d2:74:0d:f1:a6:24:50:32:0c:3d:f7:4f:6e:9d:0a:18:
         be:e6:ee:94:e2:e8:82:76:b7:ca:77:a0:b7:31:39:31:e7:d9:
         4b:64:8a:4f:e3:68:c5:a2:aa:73:91:bd:d7:5f:0f:eb:f8:50:
         e7:33:a9:2f:8e:aa:db:f4:81:54:8e:52:86:fb:10:46:a8:47:
         0b:de:e0:98:90:e4:c0:10:a0:fb:60:67:e7:d1:b9:be:e5:35:
         57:97:cc:82:d4:9f:b8:b8:d2:dc:76:78:c0:d4:79:70:66:5c:
         32:d6:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:34:44 2024 by rpki-client on console-fra.rpki-client.org