Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File:                     z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier:          A6nCGgUAH8pmxN87Uwc+F6pbPUX6KkA3D11pC0pKoIw=
Subject key identifier:   ED:6A:DD:83:8F:A8:FF:36:20:E3:DD:3E:B6:2E:97:5A:94:C9:0F:29
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer:       /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial:       0193572E038D88BB6D37DFDD1724CBB20F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number:          0137
Signing time:             Sat 23 Nov 2024 04:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:53 +0000
Files and hashes:         1: rIo7gZj286m4-_LMNpHFnl0FVNk.roa (hash: 6kcCWxae9P4RKAUs4NlzeksGMrP9hprvY4pCbouOc0Q=)
                          2: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: cm+4mej+HC/oVzL/gJbqDIm5n7vPJGCeVrNHwdh7gfI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:03:8d:88:bb:6d:37:df:dd:17:24:cb:b2:0f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
        Validity
            Not Before: Nov 23 04:00:53 2024 GMT
            Not After : Nov 24 04:00:53 2024 GMT
        Subject: CN=ed6add838fa8ff3620e3dd3eb62e975a94c90f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:5f:e3:6f:be:fc:0c:1c:45:33:4a:86:bd:
                    db:2e:e3:59:1f:37:5e:91:f3:14:c0:bd:e8:35:1a:
                    fb:3d:8e:24:19:3c:8d:e1:33:a6:0c:05:05:88:75:
                    12:39:3e:f4:24:11:74:12:c9:20:7c:b9:b7:51:8d:
                    58:cb:c8:5e:e5:4e:d9:03:2a:79:1e:77:b6:44:b8:
                    39:9b:36:14:f9:3f:3a:bd:08:fc:a4:6b:ec:79:59:
                    13:66:65:b9:3f:18:f5:43:49:cb:28:4f:89:55:74:
                    be:5e:84:03:5d:0f:53:56:7d:2c:ff:15:78:57:eb:
                    db:d2:67:94:a1:16:b1:63:94:e8:31:31:44:1b:f7:
                    40:19:40:3a:a5:83:05:b7:4b:2d:57:3c:08:3d:c8:
                    52:01:b7:fc:3e:1f:f8:de:dd:81:15:50:7b:a2:12:
                    23:7d:b9:67:84:86:e5:63:ac:32:ef:b3:19:89:7e:
                    a4:2d:17:d9:7d:89:e8:a4:4f:72:54:b9:f9:be:8e:
                    43:73:02:70:70:9f:bb:1f:45:63:17:10:82:b1:56:
                    c3:77:ba:f0:ef:07:e0:dd:e6:f0:f4:90:9a:24:d5:
                    a0:0a:57:93:b0:4f:e3:b5:56:40:65:76:4c:5a:b3:
                    87:bb:be:3e:ca:77:de:76:1b:92:d2:73:5c:59:c6:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:DD:83:8F:A8:FF:36:20:E3:DD:3E:B6:2E:97:5A:94:C9:0F:29
            X509v3 Authority Key Identifier:
                keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:88:4e:d1:30:b3:ff:d3:20:7f:a3:7f:55:f3:2b:55:d8:80:
         fd:e2:50:48:e3:04:a2:a1:7e:4a:8e:86:6b:2d:09:19:f3:1c:
         c0:9a:15:2e:63:f9:15:4b:4c:18:c1:6f:f9:78:f6:bd:79:d2:
         6b:7c:76:29:2a:50:2d:4c:14:aa:fa:62:9d:66:0d:d4:0b:2c:
         86:fd:c0:71:44:fe:cf:c8:bb:20:d2:d4:d6:f4:29:95:5e:f2:
         e5:98:5b:80:38:70:1f:88:87:ab:37:7d:d7:8d:b4:3d:96:56:
         f4:ce:a2:bf:6b:17:ae:17:5c:04:94:00:a6:60:5c:b4:64:99:
         a5:50:91:ff:50:3b:c3:b2:cb:04:d7:54:fe:cb:47:74:a4:1b:
         8a:8c:fe:c3:30:06:7b:50:4d:d2:a1:de:74:c9:75:7a:1d:a5:
         a6:78:e0:72:4e:b8:04:29:fd:da:2c:02:9c:f8:5a:fd:57:96:
         28:10:d5:3f:c7:3d:23:01:8d:aa:38:30:c5:56:6c:4a:96:0c:
         16:38:6d:06:ff:57:60:25:26:4b:8c:12:f8:1a:ca:89:c2:3b:
         5a:ae:e1:cf:66:e0:e6:6d:a8:e7:e4:1c:a5:be:58:62:a6:b7:
         b9:63:39:94:5b:1a:f8:41:af:87:5a:ed:00:17:d3:bc:23:0f:
         82:ca:6e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:55 2024 by rpki-client on console-fra.rpki-client.org