Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          dA1bZOPkWFiaSOFKgysonDTI90qoNGWtnBnj5ywN92s=
Subject key identifier:   A0:A6:61:A7:94:26:4E:13:83:E2:39:19:0D:39:E1:9A:C3:18:5C:DA
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019355764CBD78CDD119B0A4F9981695E1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          0BF8
Signing time:             Fri 22 Nov 2024 20:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:36 +0000
Files and hashes:         1: 7_FMBrAVc7sfsMYUvt71kvtz3tg.roa (hash: HK8Ovf7xfYIy7/vdg1sakAgLf1RZVxq9fpMuNVAsOlM=)
                          2: Gef1M4cb_51ApoyV3grdOoIH-4k.roa (hash: Jzj4GFTg3nnS80b+UZjWFPV5rqy3Y2qS6uCid55XJas=)
                          3: PLx4rj98cMNbH-J-FjWFR_p1hhQ.roa (hash: fwTWx0P4CSo1sNLLQblnyhxPlhs8yHEKYJQZvbwwx/Y=)
                          4: W4eF4du5uCkxQjCLv0X5A7cFREg.roa (hash: xAmcu59dsPDeMijNA3kQmO0PG9yhwH8GBf28ru2BEZY=)
                          5: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: mUSQeoQYe6vMPgLa8dQWnaFtLt6lE1J462sTbg7mLr8=)
                          6: r3751rmLEpNaBvevXGLG5bcf9ng.roa (hash: NVx9cjfvM9VFUVH8od6r0DCALJsi2wO3OE5CFxi3nWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:4c:bd:78:cd:d1:19:b0:a4:f9:98:16:95:e1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Nov 22 20:00:36 2024 GMT
            Not After : Nov 23 20:00:36 2024 GMT
        Subject: CN=a0a661a794264e1383e239190d39e19ac3185cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:27:86:63:2c:27:c8:63:a3:b2:5f:53:4f:
                    d0:9e:83:69:32:34:e1:0f:f4:b0:e0:c7:a6:d8:e1:
                    1a:d1:44:86:59:26:62:0b:53:68:bd:ba:b2:1a:4e:
                    b5:cb:f1:ef:3a:20:07:5d:a1:28:ba:cb:bd:7f:ae:
                    dc:46:d9:f7:b6:c5:86:cd:b7:39:45:3d:82:86:8c:
                    6e:4c:12:e3:c8:b6:bf:d9:14:47:8c:71:05:9c:90:
                    33:d2:b4:d4:d1:68:ac:e6:fe:2c:4d:fc:70:aa:b2:
                    65:6c:7e:d9:f0:1c:86:6e:82:a8:f5:fb:b1:6f:bb:
                    40:2e:59:77:43:18:12:80:ac:00:68:25:fc:92:44:
                    80:48:75:5e:81:b8:11:65:f2:a0:51:f7:f6:3d:bc:
                    29:f5:43:f8:08:c3:9e:49:51:ef:4a:94:e0:de:ab:
                    5f:5d:93:12:99:2a:cc:c2:bd:a0:f6:90:f0:2d:85:
                    4a:c2:ba:9d:83:20:af:a4:0e:eb:ec:74:ce:b8:02:
                    18:7b:df:64:f3:96:4e:d7:bb:dc:6b:44:ef:c4:a2:
                    ae:d5:bf:87:2b:22:e2:98:a9:23:8b:9b:4e:7b:a5:
                    8e:df:70:82:1f:e2:72:ad:29:e5:1a:e3:1e:8e:dc:
                    0e:5e:60:e7:13:0b:2a:45:d8:d3:40:e8:de:f6:a5:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:61:A7:94:26:4E:13:83:E2:39:19:0D:39:E1:9A:C3:18:5C:DA
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c5:8a:a6:03:50:1d:46:fa:12:34:3b:24:15:49:4e:a4:54:
         9e:c2:78:dd:f7:06:21:08:26:a7:35:c7:6f:b5:d8:7d:01:72:
         01:15:0f:e1:14:d6:07:b1:ea:6e:6d:86:d1:e2:f4:6b:c3:3e:
         42:01:1f:de:c5:2f:cc:a2:69:03:94:8e:0d:bc:fa:d1:bf:bb:
         8a:c9:b0:b5:48:9b:c3:a7:ec:36:aa:0d:61:57:8f:f5:4a:37:
         4f:03:98:29:a9:05:39:c6:b5:84:ef:c0:24:df:54:ec:ea:2e:
         c3:7a:50:6d:2c:5b:b3:d2:ff:cb:c7:d4:2b:c0:2b:db:3c:be:
         c4:b0:47:58:e6:90:e7:4e:e3:b3:69:4e:ee:c9:25:b8:37:ee:
         7e:cd:c9:c3:e0:51:db:98:f2:7b:aa:f3:f6:43:8b:43:61:0f:
         53:47:f3:55:b1:fa:28:07:37:23:65:ca:a5:ee:94:27:18:e1:
         19:f7:d8:a6:3f:ee:af:bc:0e:dc:76:2c:29:4e:95:d9:12:4b:
         4a:74:3f:46:24:37:9f:a3:a2:3a:a5:20:cd:f4:5c:fa:71:77:
         0d:73:61:c4:f4:ef:29:a6:49:32:71:61:4b:a8:88:24:fe:d8:
         7e:5f:db:fc:90:01:61:bd:b0:33:79:66:50:9c:6b:8a:cc:92:
         4f:1b:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:42 2024 by rpki-client on console-ams.rpki-client.org