Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File:                     zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier:          y2tT5D/Io6Hyx8hllEqWZDp1Edc76wrXE9abGDwV4EI=
Subject key identifier:   BC:E2:AB:9D:0D:DF:57:9D:AA:50:8B:F2:60:D3:4A:C5:A9:89:2A:A6
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer:       /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial:       018F87ED6CD35BDD24BBDAB1E454FDBFB1DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 19:00:34 +0000
Manifest this update:     Fri 17 May 2024 19:00:34 +0000
Manifest next update:     Sat 18 May 2024 19:00:34 +0000
Files and hashes:         1: q6cdxWG7Tkotc-JP0nTK1-BDV0o.roa (hash: HnOPTjWChsqOf/PIvWVGn4U6i+VZygKf+l3PjNOA7wA=)
                          2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: y6ne01bdHdz9k9DeAjFoedREqguboCua6ziJGvtLuhU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6c:d3:5b:dd:24:bb:da:b1:e4:54:fd:bf:b1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
        Validity
            Not Before: May 17 19:00:34 2024 GMT
            Not After : May 18 19:00:34 2024 GMT
        Subject: CN=bce2ab9d0ddf579daa508bf260d34ac5a9892aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:73:bd:57:6f:10:f5:eb:20:a4:80:aa:a8:
                    46:5d:e7:3c:be:aa:b1:b4:48:9a:d8:d6:cb:4e:af:
                    fe:fa:00:57:c0:32:d9:17:97:e0:6b:98:5e:36:22:
                    15:bb:5d:2b:01:b8:a0:fe:eb:9d:08:ec:e0:a5:23:
                    b4:2d:05:3f:b4:3d:f5:02:db:6f:ab:61:75:0f:bc:
                    c6:a2:31:23:bb:64:c5:ea:4f:fb:e6:b8:f2:8e:5d:
                    02:c8:30:f5:f0:f6:db:5c:ef:96:32:86:91:fe:5c:
                    43:67:54:46:0f:e1:57:06:50:43:36:24:25:dc:d4:
                    62:56:4b:c6:28:74:83:fb:f7:92:4d:1f:51:9a:5d:
                    4f:84:20:21:a0:24:36:93:df:5c:f4:c5:20:30:86:
                    4b:a7:ac:28:2b:12:66:0f:1e:1e:e9:71:d4:5c:e3:
                    74:0e:96:89:fe:d9:7c:fa:2b:42:91:3c:4b:81:79:
                    2b:cf:6d:81:53:14:16:cc:61:93:a3:54:c6:9f:cb:
                    f1:4d:f1:41:ef:a6:99:21:63:5b:3f:66:59:ed:e1:
                    8c:49:bb:01:a4:81:8a:26:ef:d5:44:32:46:d7:b3:
                    b1:16:86:e0:51:1a:f8:b9:22:12:15:b4:55:db:07:
                    e3:03:32:b5:42:36:5c:45:77:5e:68:e8:e7:0e:00:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E2:AB:9D:0D:DF:57:9D:AA:50:8B:F2:60:D3:4A:C5:A9:89:2A:A6
            X509v3 Authority Key Identifier:
                keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:24:1e:d3:8f:33:a0:90:d9:2d:18:67:b4:37:7b:45:b9:6f:
         d3:8a:f7:c4:a4:21:11:39:f6:b9:a8:59:f6:05:7f:9f:8a:1b:
         ba:d0:82:1d:46:7f:91:bf:6f:c6:c9:81:9c:5a:90:00:56:91:
         85:21:08:fe:d1:e5:d7:76:ca:2b:c7:c7:3c:7b:2b:3f:54:b7:
         98:eb:81:8f:5c:ba:5f:e6:5a:b5:98:c5:ce:1b:6f:6d:e9:cc:
         2b:e7:5d:8c:d3:3c:ad:16:4a:98:e7:f5:70:bb:14:62:ed:5f:
         ee:99:85:70:8a:c5:3e:5f:9f:c1:2d:2a:c1:30:c6:66:51:73:
         3b:01:6e:a3:97:13:68:e7:e9:a0:4d:e3:e1:f6:68:56:ce:8a:
         fe:10:c5:bc:13:d0:f0:a2:d1:ef:d4:31:1c:32:39:ef:d0:44:
         20:8b:2e:61:b0:bc:f7:d4:2a:d4:91:6d:b0:ba:b4:7c:eb:a1:
         80:68:8b:91:d5:c8:44:8a:cf:b4:78:29:c7:b9:79:38:76:93:
         00:ab:96:f7:1f:e8:52:64:5d:c7:c8:a6:6b:cf:e5:da:c1:63:
         0e:54:3b:79:b6:00:8e:6f:c6:2f:8c:23:16:99:d9:1b:03:b0:
         8c:1d:ee:b7:c2:f3:c4:71:bc:db:90:18:c3:29:48:f5:24:ff:
         7f:97:70:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:18 2024 by rpki-client on console-ams.rpki-client.org