Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          NaAs23Pt4a/SdghOHnOwxAQFOMAquffJX4jTA8O1lt4=
Subject key identifier:   80:A0:8D:73:D9:46:CD:88:6C:68:6A:4B:03:BA:47:C4:B7:A8:6D:DB
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       0193568A1A84CE1642026CF25A019FB0E843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          1081
Signing time:             Sat 23 Nov 2024 01:01:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:51 +0000
Files and hashes:         1: M2OH_WFXBTlLndzIp5QUruovXI4.roa (hash: 5zo/dRVK4oui7RPJW8l0zbgckgoUxjo1WMoirNDyfEs=)
                          2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: 89/n4LG1Z/u+L9s4E0xl4n8pah+QzrIX8lGBwCdIwwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1a:84:ce:16:42:02:6c:f2:5a:01:9f:b0:e8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: Nov 23 01:01:51 2024 GMT
            Not After : Nov 24 01:01:51 2024 GMT
        Subject: CN=80a08d73d946cd886c686a4b03ba47c4b7a86ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:b0:23:62:8e:bc:38:3d:0a:a1:4d:73:ab:
                    93:26:31:e4:95:70:b9:21:52:b0:84:2e:75:1a:ad:
                    ce:d5:93:eb:01:fa:17:63:d5:01:34:5a:b9:36:62:
                    4e:01:b0:eb:66:6a:c4:54:69:4d:69:48:cf:a3:00:
                    e1:0a:03:0f:72:22:0c:ba:7e:6f:96:83:95:9b:73:
                    8e:30:a7:e7:11:39:b4:b9:2d:a0:e3:38:3c:1c:f3:
                    b6:d6:c9:7a:7f:bd:36:77:1c:0a:84:61:25:9a:5d:
                    f6:b0:a5:13:99:2e:05:38:4e:96:82:1f:fb:1f:a0:
                    7d:86:6b:1b:3b:f2:f4:ca:29:7a:da:f2:a9:7d:06:
                    54:82:e7:87:82:cb:a3:8d:9c:58:ce:fb:2e:5e:08:
                    0c:16:8e:b4:60:29:da:58:c2:25:cd:f0:09:79:b2:
                    55:2f:92:d2:99:74:39:43:a5:fd:db:ae:69:db:b5:
                    35:ed:b8:0b:de:2b:b3:53:fa:0b:92:db:7a:c4:c6:
                    96:80:79:e3:c1:82:ca:5a:19:e6:66:46:ce:38:9c:
                    18:2f:b8:46:e9:d4:7e:32:56:03:b2:7e:96:01:b7:
                    6a:29:57:1f:a3:af:f5:d6:52:69:03:3e:eb:95:04:
                    c8:67:bc:51:b1:50:3b:b5:4a:50:7c:bf:b0:83:f0:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A0:8D:73:D9:46:CD:88:6C:68:6A:4B:03:BA:47:C4:B7:A8:6D:DB
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:65:3e:44:41:b6:0f:4a:0e:f9:40:92:c6:07:77:87:08:
         a0:c0:3c:6c:a5:85:df:f9:32:6f:ae:59:03:f8:7d:9e:9c:8d:
         ce:8c:02:84:3f:7e:9e:93:ac:ed:8c:0b:55:7b:ad:4d:01:75:
         ae:e6:e4:6b:ae:06:d0:92:92:25:dd:85:19:24:26:a9:43:e1:
         dd:e8:6c:fe:b3:da:f4:d8:b3:a4:f7:c3:37:0c:8a:f2:4a:bd:
         63:f0:75:c6:71:f3:a6:c3:84:15:3c:27:22:38:2e:00:e4:b7:
         f4:42:a0:fc:d7:5f:2f:4f:0f:ef:22:a0:3b:84:54:2f:d0:44:
         46:87:b6:61:e5:b3:82:dc:82:8d:a3:4f:19:ca:5f:94:32:1d:
         17:33:cc:68:2a:1d:3a:59:24:01:2c:bb:b9:fe:10:82:30:f2:
         1c:03:b4:00:14:eb:a4:44:c0:52:43:b0:75:93:ce:3c:9f:75:
         e7:60:41:65:88:a9:50:ee:ed:12:cf:ec:d2:17:4d:46:7b:93:
         d4:54:50:7a:0f:80:c0:bd:c5:91:af:00:1e:ca:09:99:a3:8b:
         79:01:0e:8a:36:a4:9d:26:40:47:14:10:63:77:58:f9:aa:fe:
         ac:7e:bf:af:3b:40:ac:1d:c0:16:c0:89:af:69:7e:3c:c4:2f:
         6d:71:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:42 2024 by rpki-client on console-ams.rpki-client.org