Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File:                     ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier:          7YEx0kp7wegyFdykIx/NuuGxZgvHCDVWcQU4rB7KZYQ=
Subject key identifier:   99:D6:B5:12:04:6A:C2:32:4F:AE:58:F6:B1:B8:DA:EC:EF:0F:E8:07
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer:       /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial:       0193647B71245FC6A7FFAD81935892149EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number:          1380
Signing time:             Mon 25 Nov 2024 18:00:31 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:31 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:31 +0000
Files and hashes:         1: 5t56b3Sui8opDor2qpOSpC7lFeA.roa (hash: hJ7FUYTVqVwIJYo7T62Rv81+FZ6uzPezO1YHIN8inwg=)
                          2: HYflJPuqhJpfjPxnEYIhO2a_9oY.roa (hash: c6zoSi2WmlLuwlR+cgA1Q46WnIVF1Fbuyye1qhSgMB8=)
                          3: JRmyJvjV9zY3qW53hCmK-0O4Ppk.roa (hash: 4X/INGAPkC3yVtoG+zshxMbswXYxmkp2vBzXzr+Ly50=)
                          4: Nm65lGuUUymkpXTTQTZB0fRUNIw.roa (hash: atTIaYltxI4gXCLGOZMdrfMhtlurFnFIu6Ede1esEiE=)
                          5: SgJoq_JXOHPPXgkWUOkCz5gPk6s.roa (hash: NmF/AVtyev/GKo60w0bXclZSZOH5Rh7lY3L7fhrCVbw=)
                          6: V2lIHOSX_UHMP4MYhy90IIkq82E.roa (hash: slNJo+fYcENqUvWvCsT1GuH/FBOUrw1jQu9fQYBMg9E=)
                          7: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: ZImfQCTxf2HP5Dy6vRPulJcGs/dh6LNS9Y40CgcsWHg=)
                          8: nKFRdFKHdKrcHgMrXWnjKTW47GQ.roa (hash: e9o2f/UUy+WppCIS2bjxtBejfsTc2krGHi/DdTGwtTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:71:24:5f:c6:a7:ff:ad:81:93:58:92:14:9e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
        Validity
            Not Before: Nov 25 18:00:31 2024 GMT
            Not After : Nov 26 18:00:31 2024 GMT
        Subject: CN=99d6b512046ac2324fae58f6b1b8daecef0fe807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:94:2c:f3:76:e7:50:72:57:60:ac:51:b7:
                    d8:03:3d:32:30:74:72:7d:46:3c:1e:d8:50:ff:b1:
                    20:50:8c:7a:d5:8f:1a:1a:d3:51:64:dc:55:ed:56:
                    35:6b:70:ce:ab:7e:6a:8c:33:ee:b8:e3:c6:14:fb:
                    a4:64:29:ca:1d:ca:bd:2c:6e:18:fd:87:5e:0d:15:
                    e9:7f:c6:94:b2:a6:bb:dc:74:a8:b1:bb:21:73:ef:
                    b4:eb:8a:92:52:8c:5d:f7:e3:4b:bb:bb:91:a8:37:
                    91:82:a0:29:84:ee:d7:08:3b:da:18:53:2d:31:b2:
                    fd:61:cd:5b:e5:e5:b4:37:15:58:89:30:5e:cc:f3:
                    30:b4:e3:ca:ff:58:03:a2:72:22:3c:ce:7d:7f:d0:
                    02:64:57:70:67:6b:07:ed:10:69:8a:4a:1d:6f:d5:
                    62:97:4b:d7:cc:ee:44:a8:8f:b2:ed:a1:7c:00:22:
                    8e:77:89:de:8d:79:43:95:71:09:6f:4b:f9:e7:af:
                    fc:9c:d9:54:c7:32:5f:49:78:9e:15:64:0e:4f:17:
                    c3:11:1e:11:42:e7:14:fe:c8:2e:0c:8f:cd:7d:03:
                    96:b2:0a:a0:f1:c7:ce:80:65:7e:f5:e1:2b:c0:9c:
                    a6:e1:a8:7c:1c:d6:7d:18:52:ee:c9:fb:d3:10:4e:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D6:B5:12:04:6A:C2:32:4F:AE:58:F6:B1:B8:DA:EC:EF:0F:E8:07
            X509v3 Authority Key Identifier:
                keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:55:d1:9e:0e:3e:54:61:a5:3e:9e:6a:d9:68:57:ae:b1:07:
         35:17:88:c1:f6:d9:1c:31:09:86:c4:0c:3b:67:86:50:19:de:
         c6:c6:9a:18:53:c1:0f:09:ad:b8:66:27:58:0f:18:5c:95:4c:
         ab:9f:06:6e:4a:f1:b8:11:3e:07:5e:67:6d:fb:e8:a2:fa:2b:
         68:36:60:fb:64:07:bc:50:34:f1:5d:b3:96:bb:a7:9a:2e:38:
         ea:c5:93:22:ea:f0:80:0e:fa:d1:5f:85:6d:29:a0:85:e1:ee:
         ee:64:80:5b:63:f9:05:90:24:01:9c:e0:93:c9:09:4d:39:e5:
         6e:85:08:8a:05:1d:2a:8f:e2:d9:ea:05:e7:6d:1e:c6:31:94:
         8f:83:67:f9:73:33:d4:1f:1d:cf:a7:26:ba:67:b6:d0:b8:3b:
         56:06:87:3e:8d:f6:60:1f:34:c6:03:4a:f7:70:97:cf:d7:ca:
         32:4e:10:db:65:bc:d5:a8:0b:bf:03:e6:84:3a:a7:ed:bf:42:
         3c:d2:64:44:5c:9f:d5:43:46:71:4d:a3:2e:a7:36:39:6e:16:
         f2:06:30:78:b5:e5:7f:a3:b1:30:11:15:ae:d8:50:66:32:af:
         55:38:31:b6:54:f8:13:62:0c:82:a1:18:ad:ee:05:06:9f:67:
         54:7a:94:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:52:17 2024 by rpki-client on console-fra.rpki-client.org