Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File:                     ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier:          oeGkAALXu/AtxEinDmCLi31343h0Uh46Rrow/Ir26io=
Subject key identifier:   36:0B:48:BF:EE:76:A6:E7:D5:8E:19:A1:DB:F3:E9:4C:0F:FC:93:9C
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer:       /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial:       01935877BC18B44D65C7184D4BCD478C39EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 10:01:02 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:02 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:02 +0000
Files and hashes:         1: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: SfwzDHQ5TG9ZgISinZ1B4FgS7pzGkcualmTrEXRKUUI=)
                          2: sWPliBTo9K9nPi5SGtdRowNcY9o.roa (hash: OhhyCCwKuwE6O6UnokF6WfreQlcQxKrdaDxX3+DFw60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:bc:18:b4:4d:65:c7:18:4d:4b:cd:47:8c:39:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
        Validity
            Not Before: Nov 23 10:01:02 2024 GMT
            Not After : Nov 24 10:01:02 2024 GMT
        Subject: CN=360b48bfee76a6e7d58e19a1dbf3e94c0ffc939c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:9c:67:49:d1:25:a8:96:4d:d6:fa:cf:78:
                    e8:0e:39:57:e9:c9:61:9f:05:d6:eb:a4:ed:8d:2c:
                    1a:49:28:21:47:ea:82:37:06:21:1e:1a:cd:13:f9:
                    83:ac:b7:ed:fa:b1:91:9e:16:fb:20:b4:a7:94:be:
                    53:56:cd:a6:48:41:a3:13:1a:9f:00:5c:3f:92:35:
                    4b:29:85:90:21:68:35:ea:1a:7f:c1:c0:a3:9b:b7:
                    99:fa:be:1a:f9:43:75:09:ff:4a:56:18:8f:95:8a:
                    fb:0b:e4:e1:88:9c:7e:3b:14:f5:af:44:64:10:ee:
                    19:0f:b7:17:11:8a:4b:62:71:c5:5d:8b:ae:b6:0a:
                    15:dc:ae:eb:8b:aa:d3:c6:42:27:b6:a0:55:6a:35:
                    5b:6b:66:3c:7d:73:33:98:2f:c8:f1:55:b8:d2:ab:
                    d0:ef:ff:6d:2a:ba:dd:20:d6:53:f5:54:49:1b:8f:
                    80:c4:a8:0e:bc:ff:44:97:81:08:08:12:bd:41:fb:
                    ab:25:ff:41:1f:2c:11:0e:79:32:b1:0f:cd:27:2a:
                    85:fd:8d:57:6d:dc:b9:a8:ec:44:36:0d:a8:b1:17:
                    c5:a2:b1:9f:c7:ff:97:2b:b4:a2:14:26:00:ae:b8:
                    a6:8a:f2:2a:cf:d2:66:f9:22:22:d1:79:2a:3c:85:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0B:48:BF:EE:76:A6:E7:D5:8E:19:A1:DB:F3:E9:4C:0F:FC:93:9C
            X509v3 Authority Key Identifier:
                keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:fa:15:75:de:60:02:be:5a:77:9a:b5:94:06:15:6d:29:
         8d:b3:01:67:41:49:a9:a1:4f:8a:1b:ae:91:93:84:d8:dc:a7:
         98:d3:10:68:7c:9d:a7:a6:b5:3f:e7:07:cd:42:04:62:55:d3:
         0b:53:f6:db:b2:c5:5f:23:02:d9:5d:ac:ca:f4:d0:90:89:9f:
         d0:55:6d:5c:5b:bf:8c:9e:06:26:06:0f:ea:dc:38:80:e6:fd:
         bb:9e:a4:f8:d6:6a:f3:73:2a:a6:f2:04:af:ea:a4:5d:60:e3:
         1c:55:d2:34:42:f7:0b:15:ad:ce:d4:54:b8:ca:93:a7:c9:95:
         b3:c3:8a:43:95:48:63:25:d8:7b:f7:80:bc:4c:10:5a:dd:f3:
         4b:dd:d4:d0:ce:e6:9b:7a:24:0a:dd:57:fa:f5:ca:dd:d4:b9:
         b5:9c:ad:4a:38:b7:c4:f2:13:9f:c7:3c:e8:e3:08:11:ff:35:
         e1:85:88:78:fb:ff:f2:0e:34:d2:0e:bc:2a:05:83:ec:a3:ce:
         78:fe:c5:f1:d8:c1:a6:9d:15:38:bf:c4:3d:97:a8:0e:8c:31:
         85:c0:29:17:89:90:b3:42:8a:91:84:bd:0f:bd:bd:69:a8:9b:
         17:9d:63:ff:1e:2d:a3:8f:87:05:7f:c0:ee:e0:9c:82:21:8d:
         fa:f4:25:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd7wYtE1lxxhNS81HjDnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTNkOWM4NTY0NDRhNzA5NmUzYTg1MDhjYWUzMDdmZGVi
YzBjZDQwHhcNMjQxMTIzMTAwMTAyWhcNMjQxMTI0MTAwMTAyWjAzMTEwLwYDVQQD
EygzNjBiNDhiZmVlNzZhNmU3ZDU4ZTE5YTFkYmYzZTk0YzBmZmM5MzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcmcZ0nRJaiWTdb6z3joDjlX6clh
nwXW66TtjSwaSSghR+qCNwYhHhrNE/mDrLft+rGRnhb7ILSnlL5TVs2mSEGjExqf
AFw/kjVLKYWQIWg16hp/wcCjm7eZ+r4a+UN1Cf9KVhiPlYr7C+ThiJx+OxT1r0Rk
EO4ZD7cXEYpLYnHFXYuutgoV3K7ri6rTxkIntqBVajVba2Y8fXMzmC/I8VW40qvQ
7/9tKrrdINZT9VRJG4+AxKgOvP9El4EICBK9QfurJf9BHywRDnkysQ/NJyqF/Y1X
bdy5qOxENg2osRfForGfx/+XK7SiFCYArrimivIqz9Jm+SIi0XkqPIVtvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYLSL/udqbn1Y4Zodvz6UwP/JOcMB8GA1UdIwQY
MBaAFGYT2chWREpwluOoUIyuMH/evAzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84YjVmMWUtNDE5MC00OGI2LWJkYzUt
N2QwNWY5ODg4ZTk4LzEvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84YjVmMWUtNDE5MC00OGI2LWJkYzUtN2QwNWY5ODg4ZTk4
LzEvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeH6FXXe
YAK+WneatZQGFW0pjbMBZ0FJqaFPihuukZOE2NynmNMQaHydp6a1P+cHzUIEYlXT
C1P227LFXyMC2V2syvTQkImf0FVtXFu/jJ4GJgYP6tw4gOb9u56k+NZq83MqpvIE
r+qkXWDjHFXSNEL3CxWtztRUuMqTp8mVs8OKQ5VIYyXYe/eAvEwQWt3zS93U0M7m
m3okCt1X+vXK3dS5tZytSji3xPITn8c86OMIEf814YWIePv/8g400g68KgWD7KPO
eP7F8djBpp0VOL/EPZeoDowxhcApF4mQs0KKkYS9D729aaibF51j/x4to4+HBX/A
7uCcgiGN+vQl8g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:25 2024 by rpki-client on console-fra.rpki-client.org