Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File:                     fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier:          eZzeJL7IhhOgcVhq+7Da3wSQhror5YtsDLj00fAq8TA=
Subject key identifier:   81:5C:6D:05:CD:66:E7:03:E9:4E:7F:22:42:F8:99:AC:47:15:42:31
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer:       /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial:       019072E4D223A6209EC63479D9E06158BBC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number:          0753
Signing time:             Tue 02 Jul 2024 10:01:56 +0000
Manifest this update:     Tue 02 Jul 2024 10:01:56 +0000
Manifest next update:     Wed 03 Jul 2024 10:01:56 +0000
Files and hashes:         1: 1-sO9bpSCHY3pcf1vjjU7QQNW2bs.roa (hash: t9lXRBcErlfLVHvB3zwXMXA2GlU1/A3M7QeqNMmh1wk=)
                          2: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: oLVPiM9dmPSIPmBcXIrjDtfHTMAtNditM8hFG1sYNkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e4:d2:23:a6:20:9e:c6:34:79:d9:e0:61:58:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9656d5867b43ce506445290bba705722260586
        Validity
            Not Before: Jul  2 10:01:56 2024 GMT
            Not After : Jul  3 10:01:56 2024 GMT
        Subject: CN=815c6d05cd66e703e94e7f2242f899ac47154231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:be:b2:c1:36:9e:53:a7:fd:d0:3f:e0:db:
                    4e:37:be:72:1d:5c:f3:2c:49:4b:48:5c:ce:93:f1:
                    aa:37:09:50:88:7e:b0:bb:a1:aa:4a:5d:60:a6:7e:
                    7e:96:c4:41:7b:68:56:00:6c:4a:a7:ae:b4:1e:a0:
                    e9:df:61:da:b6:24:55:06:e5:6e:86:fd:ba:ba:17:
                    cd:2b:c5:63:0e:2c:5d:01:d8:ef:80:63:da:79:9d:
                    15:8c:99:4b:18:7a:3e:0b:bf:35:91:69:47:0f:82:
                    9b:02:3b:f5:d6:13:0c:58:0e:f9:ad:91:0f:f0:b3:
                    ad:8b:c2:e3:67:71:75:69:d5:cc:e9:7c:3d:c4:df:
                    3a:36:b0:48:c0:89:8b:54:5b:33:9d:35:7e:ad:db:
                    fa:a1:1e:bf:58:20:b2:c1:d2:ea:56:1b:9b:a3:c1:
                    51:71:16:5a:95:74:76:fb:0d:ed:d0:e8:f9:53:86:
                    b1:8f:35:dc:80:61:1d:ff:dc:e5:e7:63:2a:7c:81:
                    0f:5e:20:7c:ee:40:5e:21:fb:c6:7f:c0:15:e1:51:
                    11:68:ff:ff:81:9e:da:18:ef:b9:c6:11:c5:26:50:
                    02:fc:63:d3:ac:cd:6f:f6:cd:12:dc:55:65:7a:cf:
                    fe:47:43:ed:0b:d7:c1:d6:60:12:e3:4c:8e:60:8a:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5C:6D:05:CD:66:E7:03:E9:4E:7F:22:42:F8:99:AC:47:15:42:31
            X509v3 Authority Key Identifier:
                keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:6d:61:c0:95:c1:71:c6:cb:a1:4b:21:3d:c4:84:2b:b0:
         28:5f:d0:76:01:ff:28:77:e7:ed:cf:24:83:64:55:19:55:d3:
         9a:58:96:6d:d6:94:75:c1:2e:f5:e8:bf:b8:8c:f1:a8:93:d2:
         55:c2:65:8f:63:47:eb:f2:e1:93:86:46:9e:7c:36:e9:2b:c0:
         97:dc:3d:f6:44:df:77:9c:0d:0e:45:53:6c:a2:1d:03:e3:2b:
         61:1f:5e:74:41:35:b1:95:db:73:28:ed:3d:0b:77:36:0f:52:
         6c:b3:39:04:c2:cb:c4:61:b8:1c:38:ba:63:ee:ca:d1:67:87:
         d0:08:a4:53:76:4b:c8:fa:a5:8c:e5:8f:2a:01:29:97:2f:1a:
         9b:a3:2f:8a:ba:2c:31:a3:35:bf:a3:56:d5:e3:ba:52:9d:c3:
         1f:c9:0f:1c:a2:96:23:70:e3:be:fc:c2:89:98:96:82:f5:8c:
         a4:c2:0b:a3:bc:54:3b:55:12:0c:66:fe:a5:74:29:fc:8c:80:
         53:09:f6:2e:bd:29:28:ea:2b:cb:f7:97:79:cd:0f:d2:29:4d:
         7f:8b:8a:5f:d5:50:21:9c:e2:62:f6:2a:32:eb:5b:85:2d:5f:
         dc:dc:86:e1:60:e5:5a:e4:7c:4c:2f:7a:0a:f3:4a:36:a2:b2:
         91:22:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:39 2024 by rpki-client on console-ams.rpki-client.org