Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File:                     ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier:          ASJ5E65Az6UQeiik/eLvQx+MqYcAgr0IlAmzg6fXTEw=
Subject key identifier:   F4:B5:D0:4F:FA:C7:4B:86:CD:75:0F:09:00:15:5B:C7:31:58:75:69
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer:       /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial:       018F87B6AE8F356A2A4AA766E6B2740A5992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number:          0CB9
Signing time:             Fri 17 May 2024 18:00:47 +0000
Manifest this update:     Fri 17 May 2024 18:00:47 +0000
Manifest next update:     Sat 18 May 2024 18:00:47 +0000
Files and hashes:         1: P_Q8crevVPiE0CPMdJxpaDsoTdU.roa (hash: vcJ8+K87bVV27uNvVYRjXiWk5dgyW8yRpmpPfCGqzWg=)
                          2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: 0GKvZyvVFkEBP3z3h2JvDfDYjigPcbIELd7HAn0bW9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ae:8f:35:6a:2a:4a:a7:66:e6:b2:74:0a:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
        Validity
            Not Before: May 17 18:00:47 2024 GMT
            Not After : May 18 18:00:47 2024 GMT
        Subject: CN=f4b5d04ffac74b86cd750f0900155bc731587569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:60:39:fa:03:ce:c0:c1:67:45:b7:ad:ce:
                    af:3c:5a:91:64:86:3d:84:f8:b3:5f:9c:46:71:72:
                    b6:55:70:51:f3:e1:67:ba:00:29:1c:3a:25:0e:e0:
                    7a:e3:bb:96:b5:f7:49:7d:45:59:1a:eb:4a:21:76:
                    7b:08:8a:0d:93:dc:d1:49:07:03:e8:76:4f:9d:b5:
                    71:db:81:cb:f5:75:ec:48:20:4e:26:7e:fb:fe:ce:
                    41:18:5c:ef:b1:ce:15:2f:de:c7:4d:4f:a5:81:cb:
                    50:2b:18:fe:f5:39:66:4b:fd:ab:c1:98:0c:d0:ee:
                    a5:90:7f:9b:66:cd:cb:11:05:7f:2d:4f:47:58:32:
                    08:1a:a0:fd:80:5e:68:3e:cf:06:46:05:3c:a1:a8:
                    7b:f9:6e:53:69:7c:3f:ee:cb:62:8a:47:95:69:fc:
                    d8:48:3b:bf:f2:ff:72:6b:e5:b3:93:12:cc:7d:14:
                    0a:c1:ab:9b:9f:06:e5:42:5f:ed:5f:25:79:78:06:
                    8a:db:d6:99:e8:47:43:3f:83:27:81:a1:b6:02:ef:
                    aa:5a:67:bb:aa:8d:6e:7a:af:85:71:21:e0:45:2e:
                    ac:00:0b:d7:f8:07:d2:82:2b:72:02:44:d0:ee:05:
                    ca:80:f9:57:3f:5c:d8:db:78:0a:cc:be:b4:fa:f6:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:D0:4F:FA:C7:4B:86:CD:75:0F:09:00:15:5B:C7:31:58:75:69
            X509v3 Authority Key Identifier:
                keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:ab:2b:76:79:20:54:14:c5:77:0d:55:1b:0b:c5:44:df:
         a9:f0:d3:a6:7b:73:16:0b:d1:87:b6:27:36:11:15:0a:2b:30:
         0f:86:81:67:1d:ce:54:b0:a9:35:3f:38:7e:3e:ea:ea:42:45:
         8e:48:9c:a6:dc:2d:71:95:48:6c:72:41:39:ef:97:86:75:9d:
         a1:df:10:12:f8:e1:95:4f:20:30:2d:43:97:9e:d5:18:cf:bb:
         7e:92:ca:5e:c6:0a:dd:e9:a4:cb:de:5e:45:f0:54:74:b2:69:
         01:21:39:74:13:18:80:82:34:49:f5:82:29:16:05:42:41:67:
         c2:0d:6c:a9:54:3f:ce:0c:3c:84:f6:79:6c:41:2b:c1:cf:a6:
         7d:f8:fd:a3:21:25:50:ba:2f:0a:9c:1b:e0:27:b0:89:4f:a0:
         ec:d5:26:67:8d:b3:48:9d:e6:b7:d2:a3:62:63:16:e5:31:0b:
         b9:2f:65:a3:d3:14:e7:18:11:d8:fd:8d:21:44:ff:6d:29:73:
         00:d4:66:1c:e4:a7:c3:89:63:65:4f:97:24:b0:99:ff:e1:49:
         0d:b9:7c:da:c3:ea:86:06:e4:24:31:8e:3f:35:65:da:22:ab:
         68:7b:2f:2c:29:22:0b:db:7b:19:33:31:a7:f0:4a:35:aa:62:
         a5:7e:e4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:31 2024 by rpki-client on console-fra.rpki-client.org