Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File:                     ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier:          zwzfj8fnHFLRQjPqFRZc+CFaUkPAIXmBtvCAKMQIT1I=
Subject key identifier:   F1:AC:92:95:FA:B8:6D:24:74:1F:70:59:D3:2A:B6:2A:A3:3A:8A:72
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer:       /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial:       0190508F2D98A60AB91099451863B790CABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number:          0D6B
Signing time:             Tue 25 Jun 2024 18:01:18 +0000
Manifest this update:     Tue 25 Jun 2024 18:01:18 +0000
Manifest next update:     Wed 26 Jun 2024 18:01:18 +0000
Files and hashes:         1: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: ibzUBr5TC/gag9dtwFQqysjh9vEECyI6DLb+etGf3dk=)
                          2: dMIMqgHi5Z88l2vexG6YU3zGucI.roa (hash: gaVxT/eJ2wUTm0QRniP4u3jyxehwS6ighExUgY72Jvs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:8f:2d:98:a6:0a:b9:10:99:45:18:63:b7:90:ca:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
        Validity
            Not Before: Jun 25 18:01:18 2024 GMT
            Not After : Jun 26 18:01:18 2024 GMT
        Subject: CN=f1ac9295fab86d24741f7059d32ab62aa33a8a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:bc:25:bd:de:b9:d9:11:c3:90:75:a3:b9:
                    ae:7f:fc:a2:bf:d6:ac:49:d1:0b:9e:bb:e8:6d:d4:
                    4b:62:43:1a:76:af:02:57:cf:8e:f4:e7:75:62:27:
                    e9:53:5d:57:19:ef:b6:0b:5a:a1:4a:80:36:9b:56:
                    6f:7c:79:5e:1e:ba:66:11:63:09:3e:d4:8d:52:d9:
                    0b:75:37:bf:72:4a:3d:85:30:53:32:26:b7:f0:98:
                    45:ba:b7:ec:4e:f4:88:75:9e:07:3b:fa:5a:3c:1a:
                    b8:90:7e:4d:12:c5:fd:1b:16:fb:a7:cb:5d:fd:90:
                    7c:d2:fb:a8:eb:ec:22:c4:34:17:9f:fa:a0:4c:36:
                    8a:78:1b:3d:89:16:e5:b0:e3:a2:b8:e8:a6:1c:22:
                    4b:0a:03:22:a9:d0:b6:23:6b:d8:3d:2a:f3:de:9b:
                    dc:44:e4:a1:a5:8e:0d:7f:1f:71:09:5a:10:5f:41:
                    01:ba:03:0d:2a:26:99:94:85:9d:6b:2e:1a:b0:50:
                    af:04:8a:99:68:cc:0c:45:6e:34:a7:35:05:49:c4:
                    16:b8:57:f8:aa:85:55:d9:ed:b5:a5:5e:ef:55:cb:
                    83:a1:c3:90:dd:f4:05:77:34:3b:72:55:03:ef:74:
                    91:ff:3d:78:f2:0d:e3:93:80:f5:d2:95:07:4e:ac:
                    1d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AC:92:95:FA:B8:6D:24:74:1F:70:59:D3:2A:B6:2A:A3:3A:8A:72
            X509v3 Authority Key Identifier:
                keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:5d:28:03:5a:a7:42:e3:5a:78:29:48:4a:98:96:5b:e2:
         1b:75:80:2c:1b:ca:52:ce:8e:fa:ff:f5:15:c3:04:a3:15:9d:
         20:2e:f7:0f:bd:8f:e8:2e:33:b8:83:2f:c3:50:48:b6:db:e3:
         fc:05:3d:7d:86:bb:ce:e2:8c:ab:ed:24:4a:4c:63:fd:10:d7:
         6a:21:09:8b:f8:1a:d6:87:cc:71:fd:a9:91:ed:76:7b:88:38:
         26:4c:a8:67:4c:a4:8f:e6:e5:7e:9d:6e:60:91:a0:a1:29:c4:
         19:53:15:4d:ba:fb:8e:ae:b4:81:71:69:1c:25:15:d4:45:58:
         82:27:b6:a0:1e:cd:91:e1:0a:7f:07:97:75:5a:40:84:46:32:
         78:9b:59:23:9e:02:f9:d4:71:36:1e:f0:d6:65:c7:f5:9b:1a:
         d8:6d:8a:d0:49:cd:b4:04:9f:82:a2:ae:3a:fe:ad:50:90:84:
         fe:61:c5:f5:55:de:4c:9c:8c:ac:29:06:b3:b2:1e:0f:13:38:
         ac:ba:a4:97:29:c1:20:31:7b:4b:7e:05:89:7d:a4:c6:5d:14:
         d6:2a:b7:8e:cd:8e:77:1e:f5:1a:80:71:00:26:bb:e4:6a:e3:
         36:e9:e9:e9:c3:83:af:f2:be:6b:84:cb:de:27:d9:60:17:88:
         d2:bd:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 01:03:06 2024 by rpki-client on console-fra.rpki-client.org