Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File:                     zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier:          wWeLbNAR+8WgtYWmdxUFa2rwfV4tAQA+23o6Dtz8wfM=
Subject key identifier:   C9:7F:78:B8:FE:2F:89:BC:52:24:0B:2A:28:CA:2E:5C:BC:03:56:25
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer:       /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial:       018F87ED3AEFC70EF6B855200747E5EB0B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number:          0ACB
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: 8ozFi_ngNbBcUsrtfLaskZw55DU.roa (hash: AcAjY9LI2YBaM/nw3G75BQBg77tPW6Kud5OMlTLeXcI=)
                          2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: iz0msyFVLNPymSrTkrCPgiU58qaUPmJfTg7+jviGKww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3a:ef:c7:0e:f6:b8:55:20:07:47:e5:eb:0b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=c97f78b8fe2f89bc52240b2a28ca2e5cbc035625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:1f:39:31:d7:46:6c:8a:90:9b:65:84:c5:
                    e6:cc:7c:de:f3:bd:f5:54:c0:51:6c:d7:f8:03:50:
                    8a:ab:c1:fb:33:1c:b0:cb:68:72:e5:94:e1:af:cd:
                    90:df:3a:39:5f:98:60:63:de:7f:33:9e:1a:af:1d:
                    40:26:01:a8:40:3c:bb:7f:23:7c:77:98:48:10:13:
                    2a:e2:86:f5:8a:0a:48:f4:29:41:6d:ef:69:96:e3:
                    4b:a9:fd:8e:7a:53:56:f6:e4:4e:49:3b:34:c0:08:
                    99:76:e3:c7:5a:14:3b:d3:57:8c:5c:6b:52:74:5f:
                    48:2d:37:a9:62:5b:e0:b3:3b:c5:a8:b8:e6:71:40:
                    b0:8a:30:27:c7:38:b6:10:82:a1:c3:28:bd:83:cc:
                    b0:aa:f3:2d:c4:ed:74:47:33:e4:cd:1c:9a:65:94:
                    e2:65:8e:ae:c2:2e:0c:d6:d2:38:5d:85:76:ad:f8:
                    5b:36:6d:2e:f5:d4:cc:26:54:63:8d:78:9b:97:dd:
                    dd:20:bf:d6:3b:93:1c:04:55:87:ae:1e:0e:0d:bd:
                    04:11:d4:2c:bf:35:d8:76:96:a3:ee:83:a0:7e:2c:
                    6d:89:6e:ce:bc:d9:c8:f4:79:59:86:6a:85:50:63:
                    df:64:48:19:03:86:03:df:99:c1:1c:3e:71:91:2e:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7F:78:B8:FE:2F:89:BC:52:24:0B:2A:28:CA:2E:5C:BC:03:56:25
            X509v3 Authority Key Identifier:
                keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c4:fb:49:b9:7b:d7:1a:e0:e1:c2:27:92:cc:58:e3:38:41:
         ec:01:0a:d5:21:95:89:0f:33:a9:05:58:cf:1a:3c:03:ab:36:
         26:91:88:aa:ae:dd:6b:2e:1b:15:e0:32:e5:45:d8:9d:74:1b:
         88:1e:75:95:cb:86:0b:51:90:23:1b:fd:43:82:44:c4:e6:6f:
         05:ae:90:3d:5e:ba:28:47:85:1e:c3:95:a9:77:ef:34:d7:2a:
         f7:6d:b6:35:42:5e:0d:83:b1:a0:11:11:44:1f:a7:36:43:dc:
         3c:84:0f:8e:31:ad:df:7c:df:ac:91:f3:3a:08:51:e0:da:c4:
         f8:bc:a9:a7:88:32:7f:92:b9:0f:dd:c2:59:bc:f8:c5:16:a8:
         1e:fa:d8:4d:dd:21:3b:22:2e:8e:0e:0d:3c:d9:7b:cb:10:39:
         20:0d:d2:1b:dd:31:f6:c3:51:27:5d:0d:7b:3a:4f:0d:0c:2d:
         78:bb:52:b5:ad:fd:27:53:72:89:43:c5:15:26:33:5f:00:14:
         e1:29:82:9e:1e:31:9c:d5:9e:73:a2:b3:f5:78:13:56:c5:d1:
         a2:b7:55:76:14:30:09:18:12:80:ce:56:83:fd:c8:f5:2d:32:
         1c:b7:2b:e9:89:ec:bd:8d:d8:64:03:7b:02:13:2c:74:bd:a1:
         f6:0d:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:42 2024 by rpki-client on console-ams.rpki-client.org