Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          J0yW7pMkYTZQ4+TXUKDXgdjXlhc824Tvuie2K8W5Q1c=
Subject key identifier:   63:7C:7A:00:63:F0:32:5D:6B:4B:99:9F:97:5A:96:7A:AB:0D:9C:E8
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       019351DDCABECE15F74DFD0F50A673F270F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 03:15:10 +0000
Manifest this update:     Fri 22 Nov 2024 03:15:10 +0000
Manifest next update:     Sat 23 Nov 2024 03:15:10 +0000
Files and hashes:         1: 1B7mTKFD5t7Y9Qy2XYKxfIDApBs.roa (hash: fmr44mLV8peoXkxNspse+DPdd4ROEvAvHJbzC4hYLh0=)
                          2: 27w5U8_qx1GxnrOThLkfyExiFeY.roa (hash: nbpq09AZQbCZLqPS5Sltq9GaZF5wIQYm8z0Ud9o6XPM=)
                          3: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: HB9PnNGOzP2XyvDYzgNkJhvLbtFEP2de2VIb9ocPveo=)
                          4: tTZMquYPJR2jueSg33MO_TE77g4.roa (hash: DLFvSR7r3t55N18LddkE5Biiy7tDzg1DYPxv+6zlFYI=)
                          5: z6HWpmdB5L7_Y4nzzhXhgIPWtWc.roa (hash: v9xlGzwYW8uSywfGAz7LX4F6ctklPZ+bSlReFoVOeGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:dd:ca:be:ce:15:f7:4d:fd:0f:50:a6:73:f2:70:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Nov 22 03:15:10 2024 GMT
            Not After : Nov 23 03:15:10 2024 GMT
        Subject: CN=637c7a0063f0325d6b4b999f975a967aab0d9ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:d9:73:60:04:0d:08:26:df:c7:07:db:45:
                    62:34:7e:0a:02:15:a0:2f:03:9d:fe:ae:60:43:78:
                    28:e6:e8:89:f1:b1:ad:a1:72:d0:a5:d8:d5:b2:1e:
                    f4:29:c4:95:b3:5e:73:f3:e4:6d:51:29:fd:71:e5:
                    75:4c:62:b6:06:b0:91:e1:38:d2:cc:63:6f:31:3d:
                    1c:e1:87:a4:09:1f:12:17:bb:bd:a1:2a:9b:f4:73:
                    ef:c3:a6:d0:6a:ca:cb:5a:03:b1:2c:f3:52:1f:41:
                    41:82:3a:e5:43:52:39:5d:a0:88:2d:b3:ae:b4:b9:
                    87:54:f4:9b:7a:ba:e6:49:e4:bd:20:5e:2c:a7:be:
                    37:05:70:1e:d1:b6:de:81:de:36:8d:74:95:f6:bf:
                    5d:23:e7:c0:d3:02:50:25:6f:59:98:70:20:2d:0a:
                    66:03:27:b4:47:9e:07:5f:c8:23:0a:42:31:0a:2b:
                    8b:ae:91:8e:3b:8d:54:ab:b8:57:45:ad:f3:e6:19:
                    af:b0:1e:09:4f:16:d7:c5:52:7e:7c:f4:79:a4:6d:
                    22:d9:d5:e0:46:b0:5f:4f:c9:fd:1d:1b:f7:06:d5:
                    15:f6:6b:6f:b8:47:af:0e:53:e8:d0:8a:31:32:bc:
                    ac:2e:a5:1c:59:6d:0d:f3:4e:2b:d3:35:68:01:22:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7C:7A:00:63:F0:32:5D:6B:4B:99:9F:97:5A:96:7A:AB:0D:9C:E8
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:2d:4c:96:fd:9b:a7:85:d9:8d:c1:2c:38:ba:ee:81:cd:
         22:90:8d:19:63:6c:fd:5f:e6:da:9b:05:44:fb:4b:92:1d:ca:
         bc:52:1b:5b:0f:e1:80:01:38:e8:5a:5c:27:ce:ed:1d:20:28:
         47:e7:16:ab:81:c1:93:e9:a9:0c:b4:a5:98:05:8a:01:9c:c0:
         b4:da:5c:5d:d4:7a:eb:5f:14:31:d2:07:dc:32:fe:b9:04:d9:
         87:20:a0:b0:7e:98:aa:25:c3:78:8b:ce:c3:8c:d3:9d:3f:69:
         0a:0f:79:81:9b:02:58:c5:24:90:67:0e:57:67:bc:2d:36:4e:
         7d:d7:21:d2:e3:84:74:d7:eb:c5:56:3f:73:e1:84:f8:b0:3d:
         db:76:ca:5a:a5:03:37:22:74:9f:75:92:28:0b:25:49:69:f7:
         d5:51:da:7f:ba:51:8c:58:08:ec:b0:ab:3c:40:d4:78:95:9a:
         0a:6c:d4:d9:85:ca:01:0d:30:d0:24:d8:ee:ee:94:b9:4c:f6:
         d9:20:ad:7e:c3:7e:d8:db:c1:4c:c8:d7:03:0c:d5:95:e1:c7:
         30:fe:d0:f3:fd:18:bf:bd:00:dd:ef:d6:8d:f2:87:86:e4:93:
         6f:63:7b:23:2c:a0:b7:a5:2f:0d:a3:bb:07:53:2d:bb:27:f6:
         df:00:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:03:28 2024 by rpki-client on console-ams.rpki-client.org