Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File:                     ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier:          r7yJtluULZ/w0Hjj4pHnnFSieDsLAD4SzlZFvHCsdbY=
Subject key identifier:   56:7D:D5:AD:73:2B:D8:52:F9:32:44:D6:92:D0:68:D3:7F:60:E3:53
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer:       /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial:       018F87ED5D92CF3AB789A211F263DA6C2EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:31 +0000
Manifest this update:     Fri 17 May 2024 19:00:31 +0000
Manifest next update:     Sat 18 May 2024 19:00:31 +0000
Files and hashes:         1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: yCq59ZO8zoBpBSh3e0XlJ9srEezUziadyl4EzNOL/hc=)
                          2: phfiv3SfeaBhcvne3aza_cBtZsY.roa (hash: T71fbllJpX3pc09o0rIjJAYIrt93XRYdQk5LcVyv9Bc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:5d:92:cf:3a:b7:89:a2:11:f2:63:da:6c:2e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
        Validity
            Not Before: May 17 19:00:31 2024 GMT
            Not After : May 18 19:00:31 2024 GMT
        Subject: CN=567dd5ad732bd852f93244d692d068d37f60e353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:05:81:22:75:54:85:69:7c:2c:e1:03:4b:
                    35:8f:b0:de:3e:6f:8e:3b:2f:f2:32:27:97:b6:db:
                    11:bf:94:2a:e4:98:1f:f9:d2:ed:6c:97:18:64:e6:
                    6b:ef:d0:df:0f:cb:71:57:36:d2:ed:f3:65:26:3f:
                    8b:f8:43:de:c2:10:dc:70:40:01:b6:71:a5:eb:95:
                    2a:12:78:d2:c7:dd:ec:98:72:a2:32:24:aa:2f:04:
                    48:ae:84:04:0e:fc:ab:dd:98:09:bf:ac:c9:4a:32:
                    5a:d8:a1:15:5c:2d:c8:a4:58:b6:e3:7b:b6:1c:93:
                    fd:dd:94:ac:1c:87:c9:43:60:47:82:2d:b3:e9:a2:
                    55:dc:f2:c0:bd:03:f2:c7:18:55:74:53:36:c3:2a:
                    f3:d5:a6:fb:c2:e2:9f:ba:3b:f6:92:34:33:8a:cb:
                    d3:c2:1c:57:f4:90:c1:5f:6a:a8:53:9f:ca:22:60:
                    ae:cf:74:71:30:62:b3:ba:a3:c4:c2:01:3f:64:24:
                    fa:cb:a0:10:54:27:12:cf:5f:81:70:55:ce:72:86:
                    0e:49:a7:1b:30:d3:01:fd:12:b8:8f:c0:f2:30:26:
                    6b:87:94:eb:ff:14:3e:0c:91:9b:60:48:f4:a1:84:
                    2b:bc:b7:00:1a:b1:f4:e8:b4:57:42:3f:24:c2:35:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7D:D5:AD:73:2B:D8:52:F9:32:44:D6:92:D0:68:D3:7F:60:E3:53
            X509v3 Authority Key Identifier:
                keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:35:1b:27:b1:d4:96:af:a2:95:33:3a:dc:77:13:70:ea:
         c8:5f:f7:3d:1b:ff:ee:c1:d0:10:b7:a6:f6:3b:61:84:76:5d:
         5f:33:dc:64:b2:4b:59:49:51:81:2a:d0:63:3e:f9:0c:8c:1e:
         9e:95:4c:49:86:8b:02:08:ef:57:9c:b9:56:f9:bb:08:78:24:
         50:46:7a:89:dd:48:05:c7:6d:39:44:7f:16:27:2a:f3:ba:61:
         1c:d2:c4:ed:1f:30:a6:19:ea:af:0c:6e:d8:16:75:75:8b:4c:
         c2:44:fe:82:5b:2a:0c:49:28:0b:37:a0:79:ab:f6:87:c1:32:
         fb:54:9e:43:43:54:30:80:32:67:3c:93:f8:cd:d7:79:fb:5f:
         f2:b7:d7:d7:c7:e8:2b:3d:fa:5c:37:c7:34:e2:2a:bf:63:a5:
         0e:3c:63:1a:41:26:c4:cb:bc:28:09:07:a8:16:21:09:3f:2c:
         2f:1d:08:af:73:35:11:87:45:2a:90:96:92:0e:55:2b:6d:e5:
         d1:ab:a0:cc:1b:ea:66:00:8e:07:db:cb:b4:29:8c:e6:35:8b:
         aa:fb:9c:ef:5b:0c:df:5b:15:17:3d:c8:ba:07:6f:97:b0:54:
         28:21:da:86:ee:ea:b4:d0:bb:51:07:40:71:8d:66:d5:84:e6:
         06:a7:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:13 2024 by rpki-client on console-ams.rpki-client.org