Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          3vwqL6AF6BnfSCPys4M/dh//tzH3o/AZxXxd+U2Zlzo=
Subject key identifier:   C0:D0:C0:7E:B0:94:91:9B:B2:18:05:F3:9C:B2:11:AE:42:FF:B1:8D
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       018F8748FD2314420F56EAED2B2817C9DB74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          0E88
Signing time:             Fri 17 May 2024 16:00:58 +0000
Manifest this update:     Fri 17 May 2024 16:00:58 +0000
Manifest next update:     Sat 18 May 2024 16:00:58 +0000
Files and hashes:         1: M2OH_WFXBTlLndzIp5QUruovXI4.roa (hash: 5zo/dRVK4oui7RPJW8l0zbgckgoUxjo1WMoirNDyfEs=)
                          2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: pFErMPmHyneHUlyfsDUAW9rgzEayuiPY2hWr4oCgMlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fd:23:14:42:0f:56:ea:ed:2b:28:17:c9:db:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: May 17 16:00:58 2024 GMT
            Not After : May 18 16:00:58 2024 GMT
        Subject: CN=c0d0c07eb094919bb21805f39cb211ae42ffb18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:43:08:b1:c6:be:8f:82:7f:08:7b:96:e0:
                    ae:9e:16:4b:4f:d7:6e:3a:94:9e:26:b6:92:21:79:
                    19:22:6b:48:29:76:05:c4:95:f7:58:96:9b:fa:ac:
                    74:43:6e:bb:13:24:ba:94:72:61:22:f8:27:31:4c:
                    a6:b9:cd:e8:f7:d1:b4:f7:96:29:93:00:29:33:4e:
                    b3:12:5e:92:49:11:16:b4:9f:99:bb:e6:15:e4:93:
                    70:df:a9:e1:a6:f3:28:60:bf:bc:be:cd:f3:35:38:
                    39:14:ed:ea:a9:d2:34:db:7c:8f:cc:bb:77:12:93:
                    77:ca:ac:2a:05:ad:8e:6d:6d:65:35:7b:a6:e7:23:
                    7b:4b:15:02:65:a1:25:5c:4e:24:cc:be:bd:84:9a:
                    69:bd:6f:32:e6:36:41:33:ae:44:20:84:17:d6:1b:
                    16:f1:55:c9:2f:35:b2:0c:23:4f:b0:6a:95:58:a7:
                    b8:db:77:7e:17:1c:69:eb:3f:49:5a:ab:2a:16:d0:
                    a3:94:35:96:4d:bb:d5:df:3a:ed:b3:64:0f:12:73:
                    b8:4a:b0:21:18:82:aa:9d:fc:b5:7f:8c:18:d8:4b:
                    bc:e7:bd:1f:9e:e8:35:9f:32:1c:69:00:91:ce:c3:
                    2f:5b:2f:58:ea:00:3b:f6:cd:82:9b:af:bd:2f:95:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:C0:7E:B0:94:91:9B:B2:18:05:F3:9C:B2:11:AE:42:FF:B1:8D
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:28:66:e0:4a:8c:99:8e:c6:3e:17:db:8c:d1:fc:05:a9:fd:
         a3:41:50:19:36:d8:a7:af:0c:79:13:46:96:58:a2:a4:16:60:
         98:e1:27:28:83:c9:68:72:6f:78:4b:42:18:64:68:90:43:f1:
         eb:c8:94:8d:de:8a:86:b4:0d:1a:d2:12:28:a0:f0:b9:93:df:
         6f:a7:70:f6:2e:db:a7:4b:19:4c:ea:99:42:40:44:16:c7:79:
         4d:c2:e5:f1:71:e3:cd:77:44:ea:42:80:90:97:3e:32:2e:5c:
         bf:20:bf:31:84:88:96:c7:8a:52:8e:1b:2f:99:ea:12:b0:36:
         c0:19:10:d2:53:5d:a3:d6:82:31:d2:61:3f:c7:8c:f3:5a:4b:
         3f:af:98:cb:66:05:8e:09:33:17:9e:45:8d:b9:0f:c4:60:77:
         f7:b3:e6:dc:eb:f2:67:93:3f:31:41:7e:09:c4:07:2a:e2:11:
         bc:8d:9d:44:ad:99:06:76:3f:3c:f5:c4:7b:59:3f:59:89:fe:
         d5:9d:95:c2:74:1f:c0:a8:93:11:2a:94:96:d8:00:1d:7d:17:
         7b:fe:1b:3c:10:e9:50:69:63:cc:1f:e0:d0:23:dd:f1:7e:35:
         ac:56:b3:2b:ee:44:ac:4e:0f:b0:d1:64:aa:fd:e0:a7:dd:2d:
         18:3a:9f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:30:54 2024 by rpki-client on console-fra.rpki-client.org