Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File:                     zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier:          SAUEmByCU/TxHwxKivGgmwInDeGXCnRe9pOIusSQxg8=
Subject key identifier:   2C:1C:D6:CF:9D:50:F2:61:8B:2B:FC:01:F4:0A:62:E3:87:5A:D3:B6
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer:       /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial:       018F87B64A4D2DFE1633B88D52383B2CDC6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number:          0A73
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: 0A5Q6MsBzTtUvHQ0d5sOL7b2jRI.roa (hash: Nj/CLOJvYkFVHU/q/kNCIR2kYOgJF0/5g3W5tj0Z5CU=)
                          2: 68ngwDJhzqhYnG43l3w5ajrnHbQ.roa (hash: TRRXYgCNckjIkX/FcRh63crYs/Q8wBPdo6Iz8frDYDg=)
                          3: QN7-2pvz-zlc86VHXAvWZBwelSA.roa (hash: 1StUB7vWQyVZ6PHJmbhkzXxWgZsqAhwPO+K+GGyljMo=)
                          4: TrwHIRfT9VfYbNlh-Wv_L1M56e8.roa (hash: NhukywNPnQaxERKSAjSKgEUJQOZlAlJUap6KZWSLXdA=)
                          5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: 6N7kq5NbrGKVVO/9UuiBMaSnub24UxCc1pehKUFAmlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4a:4d:2d:fe:16:33:b8:8d:52:38:3b:2c:dc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=2c1cd6cf9d50f2618b2bfc01f40a62e3875ad3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:05:28:80:dd:90:01:e4:2b:31:06:9a:cb:
                    49:c7:a6:59:03:32:d4:88:6a:e0:4c:78:1c:92:ac:
                    be:98:3b:5f:9b:a4:10:f3:e4:8f:d9:86:ec:92:96:
                    60:49:04:8c:99:e8:d0:7d:1f:5e:2a:94:ca:f1:ca:
                    3a:b8:65:b7:be:c1:b2:66:b4:69:4e:ee:4f:a2:9c:
                    1a:4a:7c:e9:bd:89:0c:b3:92:f0:cb:7e:6c:bf:60:
                    a1:25:49:fe:ab:eb:2a:0c:1d:38:70:2e:78:b6:aa:
                    0d:9f:f2:a5:bd:3a:e3:ee:d8:2a:99:36:59:3b:5b:
                    29:1e:9c:11:65:3e:fa:b8:4e:72:1c:47:d7:51:06:
                    49:9b:da:41:dd:25:87:08:c5:c0:c0:20:60:03:3c:
                    44:87:8d:e4:18:ef:f0:6d:c8:aa:c9:80:f5:49:4c:
                    8a:0b:07:4e:44:ef:25:d7:42:95:66:19:a6:8e:46:
                    81:f0:c7:23:0f:38:62:62:00:c2:c0:69:81:56:c7:
                    bc:b8:f3:0b:53:dc:72:2b:31:4f:e5:ec:d4:52:5a:
                    1d:33:22:da:68:b2:d9:76:16:00:7b:75:b2:ae:03:
                    00:15:23:06:d6:82:90:ca:aa:4c:7c:f2:2d:22:f1:
                    5e:99:c8:d5:f0:1c:69:da:71:02:43:f8:10:e7:86:
                    70:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:D6:CF:9D:50:F2:61:8B:2B:FC:01:F4:0A:62:E3:87:5A:D3:B6
            X509v3 Authority Key Identifier:
                keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:e0:f9:d7:78:fa:7d:5b:0c:20:80:51:62:5b:65:90:67:0c:
         33:22:90:e4:12:f5:35:e4:f1:dc:dc:9d:5e:11:f8:4f:95:aa:
         dd:d9:0d:14:19:da:d7:b7:16:b0:ae:2c:13:48:01:b5:7e:9c:
         45:ba:a7:a7:bb:06:36:8c:74:82:87:3e:fb:39:61:ed:ca:d4:
         46:3a:a5:fb:7a:6a:3e:38:38:74:f4:a1:b1:05:d4:93:03:3e:
         ed:6d:6b:c6:73:c5:3c:1a:81:75:12:c1:34:25:cb:f5:33:26:
         32:c1:5c:60:1c:df:2e:5e:c2:70:2e:35:0b:56:5d:e0:ad:60:
         dd:39:a1:d3:8a:b8:29:1e:07:12:58:d3:41:54:1f:5f:72:57:
         6d:92:8a:23:00:db:4c:9e:c5:55:fd:01:45:1a:66:3c:15:86:
         60:e9:eb:1b:9e:53:03:27:6f:3d:bd:27:bb:24:6a:94:d8:30:
         17:fb:57:9a:91:39:36:82:47:a9:ad:e5:1e:25:71:15:c9:fa:
         f5:4b:5f:31:f3:2f:a1:54:98:80:c2:72:6a:fe:69:b0:32:bc:
         83:77:ec:d4:79:60:84:d4:c9:5e:c0:9d:f4:27:bf:45:90:c4:
         e4:81:de:80:bb:ce:16:10:8f:76:6e:69:10:3c:42:38:d1:ac:
         73:c0:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:47 2024 by rpki-client on console-ams.rpki-client.org