Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft
File:                     ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft (raw, json)
Hash identifier:          2gIzqfRucuswhnQ8wbf78rL0XNlmB0clI8p44bAzXTY=
Subject key identifier:   DE:78:28:91:04:09:77:83:C7:99:06:74:F4:9B:38:91:13:48:84:7C
Authority key identifier: 65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
Certificate issuer:       /CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Certificate serial:       019352072D59FB1C3B99CF5FE3E2A06D4396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft
Manifest number:          2A
Signing time:             Fri 22 Nov 2024 04:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:22 +0000
Files and hashes:         1: 8CAZO9jPCJdSmbTUZKX93zjmJwM.roa (hash: dtIxOmv8W8LPrxg1Sj4dy8flEd0lpEJ2hnidkDp+YHA=)
                          2: ImTUY-o3TC5IfXUaZFK2jen1TKg.roa (hash: BRj6hsyqyAmbPGNI4/OIrY92qn5NNEhId5W6cKzji1U=)
                          3: ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl (hash: 3gpbwE9uvhNseYjIy+3KcBV/o6EnDz4QKZizcLnohNY=)
                          4: mgmhZpvdI8U7ngEGFH7MdL65YfA.roa (hash: iLCEo/VpwFpNUBrDl2NYDwnXoHns667E/YuKFFW+TAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:2d:59:fb:1c:3b:99:cf:5f:e3:e2:a0:6d:43:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
        Validity
            Not Before: Nov 22 04:00:22 2024 GMT
            Not After : Nov 23 04:00:22 2024 GMT
        Subject: CN=de78289104097783c7990674f49b38911348847c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:13:01:c7:10:e9:40:43:e7:80:c8:d6:98:
                    a3:90:0a:57:57:b6:9a:44:67:e3:fc:08:0f:f7:a3:
                    c3:d4:62:3c:7a:07:f2:e6:2b:50:d4:30:da:ec:06:
                    36:13:17:0c:71:92:43:a2:8e:ea:17:bf:1f:bf:35:
                    f8:be:6d:5d:9e:15:b0:80:f0:58:17:48:8f:c3:0e:
                    68:2f:74:ea:15:05:c5:8c:b7:88:c9:6f:4c:cc:3b:
                    1b:8c:18:52:ce:10:42:75:ec:c5:bd:4c:ba:58:db:
                    8a:54:4a:d7:12:1c:f2:12:c6:36:09:e1:5c:43:d1:
                    6a:6b:4d:40:7f:c2:56:0e:53:c5:7b:ae:f4:05:77:
                    35:46:80:e1:69:88:e4:92:1d:85:80:17:bd:41:30:
                    e9:f0:49:c5:ec:9d:c7:02:d4:32:98:6a:8f:9d:5a:
                    0e:90:e7:5d:46:8a:58:67:36:72:76:84:26:53:cd:
                    b2:4c:56:e2:1d:fc:5d:4d:a0:9f:61:79:2b:5f:3c:
                    53:b8:15:48:59:bc:41:3a:27:a0:aa:b2:bb:57:0f:
                    c4:a5:83:fc:41:9d:01:d2:b3:a0:16:3a:0b:4b:65:
                    7c:c5:62:20:19:9f:13:d1:ea:a9:2c:1c:98:a1:62:
                    9d:64:72:2f:f3:56:fa:ea:a4:f3:bd:9c:12:4d:58:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:78:28:91:04:09:77:83:C7:99:06:74:F4:9B:38:91:13:48:84:7C
            X509v3 Authority Key Identifier:
                keyid:65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:3a:41:f9:c1:d7:e1:9f:2b:c7:a3:fd:c9:27:17:4a:b9:
         96:09:19:a0:2b:40:15:03:7d:f6:6a:26:64:e6:72:23:a8:ff:
         cd:b3:db:de:f1:b6:0d:d2:2d:57:b0:2a:e4:f9:ef:92:b7:b4:
         30:97:b8:83:be:aa:61:4f:16:3d:98:ea:85:9b:a2:74:1c:73:
         30:a3:6f:38:ae:19:11:df:32:86:f0:46:76:32:0d:e8:aa:df:
         85:ad:1d:51:4e:a0:ac:0b:02:cb:51:a0:d9:89:41:07:8f:07:
         c4:c4:09:d6:8f:e5:a3:47:55:bb:b7:24:69:e0:3e:2e:d3:6a:
         14:82:82:5c:0a:35:15:27:f8:64:66:21:e1:56:1a:17:e6:05:
         c4:2c:91:ec:fc:b2:b2:ec:a2:0a:89:cb:2c:27:b5:c3:1e:57:
         50:42:12:25:c4:36:42:16:91:3b:c6:9e:7c:6b:9b:f9:96:ef:
         fd:8e:6e:91:23:fb:53:5c:30:84:37:c4:ee:48:40:04:f3:14:
         37:b9:f4:7e:75:24:d6:1d:53:46:59:bd:9c:62:01:8d:3f:cb:
         74:92:fc:07:36:61:d2:f9:33:3b:ea:44:c9:b3:16:82:9d:12:
         52:5b:c0:9b:57:1e:53:c4:20:9a:de:3d:53:1b:18:35:89:37:
         87:eb:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:19 2024 by rpki-client on console-ams.rpki-client.org