Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
File:                     Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json)
Hash identifier:          T/UdxiHuYzB3IWmRuGAv/iMzqZgZEKCr2f8boZ6A9BE=
Subject key identifier:   54:50:A4:29:62:D2:37:7A:9A:72:BC:48:1A:0C:BA:5D:C6:FE:FF:84
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Certificate issuer:       /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial:       0190516AF4DFE3741492C0E0C84B37A9B369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
Manifest number:          11E7
Signing time:             Tue 25 Jun 2024 22:01:22 +0000
Manifest this update:     Tue 25 Jun 2024 22:01:22 +0000
Manifest next update:     Wed 26 Jun 2024 22:01:22 +0000
Files and hashes:         1: 0BU8oJTVyO-A84adMDh8u7aADwI.roa (hash: in9FIUXK/Ict9zFkkzqb3fQVSCDT9Vo+v+PHczbch7g=)
                          2: 8JkfDB6eK22N4RoO2wpqzpyXwxY.roa (hash: yIO4Te5dfKPbc86IZRzYcxjzwsd1A5F9knQUS1Vc1gs=)
                          3: APi0i-j_bBG9LSEQofhbd4DaEsw.roa (hash: IJUdGD9JyIzQE37qoxBxrRtdqt7HbsA9LMXG84gdxfE=)
                          4: L8AjesTkEuvn9L5TRzsDVNLgI-M.roa (hash: N03HrtzCMC+2aQQ/bFj8Qt8nyzMMQGNtGN9F/D/n4UA=)
                          5: MjkG6JrzAKDevuz_dXz7HlUJ0dc.roa (hash: Qs4Ppr5igGX4gwBSrF37YitCoch1ov7z9TNyfBUAsrA=)
                          6: Viio46hYEPd5DDotfUUDidLPOH0.roa (hash: t6Ry/9tdNFBRi8YNaeWBS4PkhhtPnjZJAeQ2sbc6dXs=)
                          7: W2rPeYO_qb8YQ7OV7disCiPoJVo.roa (hash: x0Rxk8rgEJ3MiC/f1P+0IA/vkclTOkX4aTLIXgygR1A=)
                          8: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: qe2W3ZA8ovJjZGAnVfoZEtvth1TU/ApKbM/EECmO3Bw=)
                          9: bRmAkwkFpN2FZAMy58qwBlE4LsI.roa (hash: Llbj+QvAYlqFX5lGV9DeJznL9UuCMLAuFf0PnhnsjJg=)
                          10: bw19npsKBwD1l4HkfCmcBa4naF4.roa (hash: mWu4uEQcNi9QA5X5k4nEeRvrlwk/nmFxxfcmTbc3ROA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:51:6a:f4:df:e3:74:14:92:c0:e0:c8:4b:37:a9:b3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
        Validity
            Not Before: Jun 25 22:01:22 2024 GMT
            Not After : Jun 26 22:01:22 2024 GMT
        Subject: CN=5450a42962d2377a9a72bc481a0cba5dc6feff84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:fc:96:8e:cf:8e:a0:79:40:6c:69:65:ed:
                    51:de:6a:e6:10:36:d7:57:aa:1e:72:25:0c:81:2a:
                    e1:90:2a:bd:57:17:78:1b:66:28:9d:f4:9d:17:d8:
                    7d:9c:68:e3:c6:7e:40:b8:4c:0f:f9:1b:45:1e:a2:
                    dd:29:96:8e:9b:ac:e1:11:2b:32:39:1d:aa:17:ff:
                    85:04:6a:ab:d1:51:27:9e:f0:36:bf:67:2b:92:d9:
                    1e:b5:be:c5:33:ae:2b:14:c0:1b:ef:06:af:35:78:
                    df:43:d7:bb:d6:32:05:6f:cb:c2:84:b4:d7:26:02:
                    69:4d:2c:6a:71:ad:03:b7:8e:b4:4a:0f:19:44:fb:
                    26:21:29:71:9e:93:2a:02:3d:aa:15:df:fb:ea:0a:
                    15:dc:ec:23:c6:a1:b0:d9:de:0f:8e:ef:4a:59:e9:
                    db:7c:83:35:5e:70:d7:4d:d4:74:8b:31:eb:f4:2a:
                    18:c2:84:55:e7:6f:b7:20:41:5d:fa:5d:53:4c:d4:
                    d4:dc:00:b8:47:ea:b6:76:ab:6e:d3:ba:00:0f:08:
                    60:f1:68:46:78:a0:a8:22:80:38:a0:01:6e:80:9f:
                    cd:c5:20:3c:9d:17:a8:2c:bd:b9:77:c0:87:67:57:
                    11:34:bc:80:ae:c1:32:c5:06:db:85:a1:a7:8b:32:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:50:A4:29:62:D2:37:7A:9A:72:BC:48:1A:0C:BA:5D:C6:FE:FF:84
            X509v3 Authority Key Identifier:
                keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d8:5a:f8:bf:44:50:1d:bf:5b:1b:b0:b2:c2:e5:af:56:34:
         74:41:f3:14:a7:35:8e:1c:5f:8d:59:d7:d0:80:46:a3:14:1f:
         c3:61:00:b8:a5:79:24:17:73:42:66:10:5e:e0:ae:74:86:3d:
         07:3c:3d:71:30:fd:85:c6:ee:ba:ac:d6:3c:4a:66:73:17:02:
         4f:7a:da:82:2a:25:9c:01:a1:f0:52:8f:b3:26:84:a1:72:9a:
         79:1c:20:1b:da:93:d0:cf:f9:00:77:ac:b0:91:0b:e6:9c:10:
         84:a5:dd:ef:57:e4:92:7d:0e:4e:65:79:96:7d:27:17:11:0b:
         53:ae:a7:81:43:7b:76:0f:1a:f7:d2:9c:38:d5:21:09:2d:a0:
         7b:47:e3:89:b5:c9:e0:33:7f:a6:ed:9e:e3:28:a8:50:ba:27:
         7b:05:fb:84:b1:cc:d2:8c:5b:03:39:62:4f:17:6e:d3:c3:97:
         47:02:d7:12:0a:b9:38:47:e4:4b:43:9c:26:b4:12:ed:0a:8d:
         bc:54:9f:eb:b3:58:a5:7e:58:57:88:ec:d4:ee:a6:95:a9:37:
         e9:7f:f3:5e:ae:52:91:dd:40:c5:dd:f7:37:85:aa:38:88:91:
         14:54:5e:c1:97:83:41:2b:28:7a:17:ac:80:35:0a:8f:17:aa:
         e9:44:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:50:20 2024 by rpki-client on console-fra.rpki-client.org