Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File:                     ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier:          WtxM+VEtqOB0bZKOoMEGROeO7T+7T0RFkK2rj+CHtSw=
Subject key identifier:   10:09:9C:5F:0F:FE:43:F3:07:F7:45:F0:02:AE:2F:A4:88:FD:AE:AF
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer:       /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial:       019356F6C61D6874767C09935A7E9215CFDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number:          0E90
Signing time:             Sat 23 Nov 2024 03:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:33 +0000
Files and hashes:         1: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: 7PAs5xWK5T4yUpTUcfabsV6/MuED4LjkXHaCp769O/I=)
                          2: lxqC-CPlJvi44AT9ZbU7pYt-n4o.roa (hash: xj27zgbd/gTQ66cI588GSWIO9lCmgsVv4HH0K5G1xmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c6:1d:68:74:76:7c:09:93:5a:7e:92:15:cf:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
        Validity
            Not Before: Nov 23 03:00:33 2024 GMT
            Not After : Nov 24 03:00:33 2024 GMT
        Subject: CN=10099c5f0ffe43f307f745f002ae2fa488fdaeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:55:5a:d2:99:6f:04:60:19:b4:40:ff:36:
                    78:1b:f1:3b:d5:1c:1b:94:7f:4f:eb:c5:ec:a3:48:
                    e1:49:23:55:ea:a4:83:9e:91:5f:9e:e7:11:f2:45:
                    37:b6:4e:8f:4a:ef:ab:72:3d:31:a3:42:cf:3e:2d:
                    d3:79:33:56:e7:34:d2:79:1f:fd:54:45:00:d9:46:
                    18:df:25:5b:d3:c7:82:6c:bd:22:48:71:b4:a8:3c:
                    36:dd:c3:ec:a7:d0:d1:2e:d7:ef:fd:a9:eb:53:f7:
                    65:b6:1b:92:6c:ef:22:4a:a4:ea:65:f5:b9:15:71:
                    4a:99:79:34:1a:38:62:c5:c2:ac:c9:68:5e:02:6f:
                    06:48:5b:72:1d:52:ef:08:23:d7:38:97:5b:6d:61:
                    72:d5:be:19:68:76:d7:c4:53:a4:5a:17:51:53:3c:
                    8b:ea:82:3d:84:99:d4:d0:bc:b0:0d:88:d1:08:c0:
                    6a:79:d4:9c:11:36:7e:7e:88:3f:2a:5b:62:4c:62:
                    87:4f:47:f7:8b:dc:dd:ff:c6:35:a8:30:39:2c:a9:
                    13:6f:41:44:ab:03:bb:55:60:7b:4f:0c:00:cf:e4:
                    9a:ac:49:60:15:17:0f:8e:c4:b2:3a:80:17:74:1c:
                    f3:5a:9f:e7:60:b4:84:f9:71:34:27:cb:52:b5:8c:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:09:9C:5F:0F:FE:43:F3:07:F7:45:F0:02:AE:2F:A4:88:FD:AE:AF
            X509v3 Authority Key Identifier:
                keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:35:14:38:b5:fb:de:cd:74:80:d0:34:90:06:9b:40:14:7e:
         8a:60:41:f9:9c:58:fe:e3:1c:a5:fe:e4:c7:95:42:4c:2c:15:
         03:ce:0a:92:89:c6:39:21:ac:db:4a:37:f7:ef:10:44:5d:0b:
         9c:d1:f6:56:d7:89:cc:21:63:60:26:f0:bd:4e:6b:3a:e0:b1:
         03:77:bf:8b:4b:84:36:23:c2:f9:3e:7b:f6:35:04:e1:1b:7d:
         cd:ae:41:eb:d1:01:ab:c7:68:ae:3c:e7:8a:dc:b0:96:9f:cf:
         3e:96:08:e7:ca:a1:f8:b6:89:98:8a:95:5d:dc:13:23:57:da:
         03:64:63:e8:0e:81:bc:f2:ac:bb:a1:70:91:53:79:3d:ff:27:
         09:cd:5d:76:cf:9b:88:18:05:42:9c:56:52:ec:0a:29:35:00:
         81:69:cf:66:9a:f0:9a:4d:ea:61:21:31:f4:cb:a4:22:8f:64:
         15:cc:37:ea:a1:ea:91:85:d3:75:46:70:8e:68:97:a8:0a:09:
         ba:a9:64:9b:29:ae:1c:37:e0:81:7b:11:37:e0:2c:75:45:a1:
         a9:d2:d8:1c:b1:fb:e1:0f:54:4c:a9:49:4e:a5:62:54:f0:e8:
         41:cd:af:14:9f:d3:9d:52:2a:09:75:ec:eb:3e:a1:69:5c:1b:
         60:88:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:40 2024 by rpki-client on console-fra.rpki-client.org