Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File:                     zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier:          2NCr3PqZUzWKXGiP5fB6m3AX+Vf9YvPrVhhUE/lMkqc=
Subject key identifier:   96:54:47:85:CD:B8:AA:12:0D:45:C2:40:82:89:36:A6:ED:0B:04:06
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer:       /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial:       018F874A9566E0884415E780B50CD6C6A18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number:          0680
Signing time:             Fri 17 May 2024 16:02:43 +0000
Manifest this update:     Fri 17 May 2024 16:02:43 +0000
Manifest next update:     Sat 18 May 2024 16:02:43 +0000
Files and hashes:         1: hbWjWJTI0X4Vui-msn5ZemFRvVc.roa (hash: +2D6nZR/B1EV/9uyBDcZXsq7S/IioLTey44kSP/E74M=)
                          2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: VzHqrdGFF59/NyBOqVThOiQgfstmE/1TMuxgMl5Bu3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:95:66:e0:88:44:15:e7:80:b5:0c:d6:c6:a1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
        Validity
            Not Before: May 17 16:02:43 2024 GMT
            Not After : May 18 16:02:43 2024 GMT
        Subject: CN=96544785cdb8aa120d45c240828936a6ed0b0406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:4f:0f:a7:da:9d:0c:59:8d:70:ff:57:93:
                    47:ba:8f:d7:25:8d:64:51:64:c8:61:5b:72:10:4f:
                    12:46:4f:34:52:ed:f5:96:fa:e7:54:4c:e8:6b:84:
                    5b:bb:e9:8e:62:27:64:86:ed:06:12:56:88:ce:47:
                    9b:d1:3c:89:97:84:f3:e5:f2:1d:9d:ee:85:f4:38:
                    68:e3:2b:1c:da:d4:53:8a:28:95:ae:1d:18:41:a4:
                    b3:ae:bd:21:69:5a:49:aa:34:de:1f:b4:29:07:ae:
                    50:cb:e9:33:6e:38:af:4d:54:04:46:c7:1c:f2:93:
                    d9:77:d1:89:15:30:46:c9:c4:48:7b:52:4b:74:f7:
                    cc:0b:53:b6:fd:65:9e:bf:c6:d3:2f:9b:4d:1d:af:
                    e6:c4:1b:e0:1c:93:b6:4a:1f:58:b1:0f:2d:93:bb:
                    30:2e:13:e0:31:e6:72:34:88:1e:ed:85:fd:f9:65:
                    d4:66:ed:12:24:89:48:05:04:a5:70:4c:61:99:be:
                    1a:1e:57:ff:02:05:96:f2:52:58:1c:27:e8:f5:a4:
                    ac:b3:6b:5c:8f:9f:58:96:8e:24:73:a8:cd:55:7f:
                    b8:22:0f:09:b8:20:83:b4:35:4a:f9:db:1e:0b:96:
                    88:a7:79:f4:ea:99:c7:8c:7a:34:7d:85:c1:d2:8c:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:47:85:CD:B8:AA:12:0D:45:C2:40:82:89:36:A6:ED:0B:04:06
            X509v3 Authority Key Identifier:
                keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:e2:f2:1c:cd:b0:13:f8:d3:6e:1e:b5:b0:3b:3f:84:08:
         56:a7:61:ca:ab:50:9f:5f:13:36:a4:e2:95:82:b5:b0:03:69:
         54:7d:9e:7d:f8:20:f9:4d:1f:3f:18:49:18:69:84:36:0e:65:
         f9:6d:5c:6e:8d:12:d6:93:6b:c5:4f:4d:68:d0:30:f1:da:e1:
         33:df:c0:83:ed:c3:6e:8f:92:8f:b1:c2:3e:72:68:dc:47:51:
         7c:41:40:30:92:32:2a:a1:a6:35:4a:1b:d6:48:b3:2e:a5:7c:
         18:b8:7e:df:aa:25:a4:4d:13:f2:24:b9:40:01:4d:e3:4a:c9:
         7e:fd:37:4d:13:f1:f0:c3:ff:ae:3a:1f:1c:a5:bf:ac:cf:91:
         5b:44:13:d6:78:d8:2b:c7:0e:55:ad:bf:86:7f:c6:f6:68:f1:
         45:a0:24:be:b6:ec:64:e7:9f:34:82:ee:e3:1a:ea:0b:83:62:
         c0:60:fc:1c:63:4e:3e:f0:96:36:bf:a9:f1:24:9d:13:f7:0d:
         92:bc:10:fd:b2:07:ba:f6:af:72:fd:39:27:21:51:0d:7f:48:
         ee:ed:ce:5a:bc:f7:2a:57:c1:89:34:30:14:a8:32:27:f5:e7:
         a6:2d:29:71:9a:5e:86:84:1e:7b:ac:72:92:04:1c:cd:6b:c4:
         65:8d:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:37 2024 by rpki-client on console-ams.rpki-client.org