Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File:                     ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier:          Kx9MrozfhFsHFhDWF1zwexnJzY3pQBwD3EwoTdgzDp4=
Subject key identifier:   FF:A8:6E:45:00:B8:7B:A4:85:D3:8E:42:09:3B:18:5E:55:86:2D:80
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer:       /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial:       018F87ECFEB2A00A18B515BF7F8804CAE4D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number:          0267
Signing time:             Fri 17 May 2024 19:00:06 +0000
Manifest this update:     Fri 17 May 2024 19:00:06 +0000
Manifest next update:     Sat 18 May 2024 19:00:06 +0000
Files and hashes:         1: 3fCPYsZRO4920I7J3fiL7m3QYMA.roa (hash: 22Tcanln/YyWYPAdVKqHcBbg+HRmZ4L+xgloOhYJJ3s=)
                          2: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: b3GhteCJf/HPZDX2tRerdaxHNuHl38uRorh1PKXtoAg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:fe:b2:a0:0a:18:b5:15:bf:7f:88:04:ca:e4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
        Validity
            Not Before: May 17 19:00:06 2024 GMT
            Not After : May 18 19:00:06 2024 GMT
        Subject: CN=ffa86e4500b87ba485d38e42093b185e55862d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:b6:19:dd:31:2a:34:6b:45:51:d9:de:49:
                    6c:ce:fb:60:ba:96:d4:d0:19:b7:a4:fb:6e:a2:f1:
                    75:d8:d2:c7:be:57:0a:0f:41:70:73:1f:a9:90:bc:
                    26:5b:9d:9e:8e:0f:37:e9:1e:da:1f:58:5e:7d:ec:
                    87:ca:bb:89:8a:80:dc:ff:26:1d:8c:8b:58:4b:12:
                    ab:a2:f9:e7:67:03:93:c8:59:22:40:48:fa:87:30:
                    73:cb:17:7f:71:0d:26:09:fa:73:f0:ed:07:e5:03:
                    5f:02:27:56:15:08:50:ad:45:65:77:f0:82:47:45:
                    dd:3d:a5:8c:e9:62:4e:fa:1a:6b:93:1e:98:95:d4:
                    9d:68:c6:60:44:35:01:19:7e:5b:09:0c:89:9b:0e:
                    08:aa:25:37:66:aa:6e:63:13:b9:3d:b5:b6:1b:de:
                    f8:02:02:64:d9:d9:8c:62:cf:ed:c7:00:e0:77:de:
                    8a:e8:77:9d:63:56:af:4c:a0:28:47:e1:e3:35:26:
                    49:5c:28:44:5a:70:69:49:b6:78:65:ca:5f:8a:32:
                    ea:e9:79:f6:f9:60:42:89:05:e0:89:63:72:ab:7d:
                    29:4b:bc:73:14:b8:47:1e:02:33:af:be:d1:ac:51:
                    f3:7f:b9:20:9c:71:f4:60:0d:06:ed:6a:d9:47:ad:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:6E:45:00:B8:7B:A4:85:D3:8E:42:09:3B:18:5E:55:86:2D:80
            X509v3 Authority Key Identifier:
                keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:93:d5:c9:4c:da:df:62:d2:a2:1f:4c:ea:c6:e6:10:3d:66:
         d5:2f:b8:44:73:64:42:2c:ef:f0:77:2e:e6:de:7e:27:ed:56:
         14:c1:26:98:f5:46:bc:f1:89:28:01:31:a3:73:c5:fc:4a:8e:
         3c:1c:9c:9c:aa:24:8c:cf:66:84:2e:ec:65:16:42:eb:5c:96:
         82:f6:23:e2:32:ca:39:8b:3c:29:67:7d:1f:6d:fd:db:32:bf:
         23:c4:5c:64:dc:4e:fe:ae:86:c3:3f:eb:82:01:07:90:3c:d4:
         ae:96:70:80:7a:91:e8:33:d3:2b:4f:fd:3c:fe:b3:80:5c:c7:
         4c:78:e9:be:30:c0:e1:a8:61:6e:62:fb:4d:2b:40:ba:1b:c4:
         26:98:39:bf:dd:fe:3c:c5:2e:56:b8:82:b8:0e:e0:a5:5a:6a:
         89:0d:f7:a9:ac:b6:f5:86:d8:14:33:e0:eb:52:0d:d3:03:38:
         b1:5f:b8:ae:5d:af:f1:bb:b2:1f:e9:04:57:c0:d3:15:07:cd:
         08:ed:e2:aa:85:47:78:97:58:ed:28:ba:c2:e5:62:8c:f3:84:
         76:b9:55:65:0d:b0:ea:dd:61:26:c9:6a:fa:5f:cc:86:fb:ad:
         d5:6d:76:c4:00:25:ed:84:3a:f6:41:22:db:68:e7:60:ab:42:
         c7:d9:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:12 2024 by rpki-client on console-ams.rpki-client.org