Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          PwGPkKemmRcSbmKNHSaAj+pT6mKzES25rzLS9ecfX0c=
Subject key identifier:   CF:BC:F7:35:D0:77:C6:8E:F5:EF:DF:E8:AC:27:09:DC:D6:58:97:2C
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       01923AA77136691BD29BC5CEAA1B9F1B1E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          12E0
Signing time:             Sat 28 Sep 2024 22:01:44 +0000
Manifest this update:     Sat 28 Sep 2024 22:01:44 +0000
Manifest next update:     Sun 29 Sep 2024 22:01:44 +0000
Files and hashes:         1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: f+bn6CmQ3Nfi5XGugrh0dmHcvIeDeUffomRHyQ4U5xI=)
                          2: t5m6pTI_7W7d9a5uARQOLgDEips.roa (hash: JNgBU9T0z+oNDnKpw7O6b+hRJzvaN25GQ9a+bXKjK1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a7:71:36:69:1b:d2:9b:c5:ce:aa:1b:9f:1b:1e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Sep 28 22:01:44 2024 GMT
            Not After : Sep 29 22:01:44 2024 GMT
        Subject: CN=cfbcf735d077c68ef5efdfe8ac2709dcd658972c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:37:c2:a0:c7:a8:5d:8e:65:ff:d9:e3:2d:
                    9b:a0:c9:48:0e:3d:c0:99:55:e2:17:92:20:4e:ac:
                    2b:6f:da:15:d6:d2:78:6d:51:fb:38:8e:18:e2:d4:
                    01:f1:80:ae:c9:18:21:f4:f2:86:77:c7:d2:00:05:
                    0a:f7:ed:51:47:1a:21:34:d3:44:2f:54:c1:fc:f3:
                    da:73:f3:aa:29:55:3c:3a:d1:aa:cd:52:91:50:b8:
                    9c:7a:77:03:69:8d:6f:07:69:54:ac:d3:62:ba:b2:
                    65:18:2f:ed:86:0e:98:7e:62:01:83:f1:d7:eb:b0:
                    af:70:7c:e9:d3:ea:78:87:3d:2a:38:a0:37:5e:52:
                    35:b1:1d:c2:f8:fc:19:41:df:4b:7f:62:d4:b6:70:
                    7a:f4:f4:ec:91:8f:95:2d:09:8b:85:cb:ab:11:1b:
                    35:c1:e7:e4:ce:30:e1:ee:8c:90:71:9c:b8:84:5a:
                    c9:f1:06:c7:51:86:32:5a:7d:1f:75:31:8b:47:27:
                    5b:5f:70:ac:2c:ec:d4:d8:d9:1f:64:4e:6b:6c:f5:
                    40:89:5c:cd:5f:0d:68:e9:2d:4b:73:e6:2c:2d:a3:
                    f7:86:b6:64:fd:a8:57:ec:86:d9:09:87:fa:db:3c:
                    30:a9:27:3f:28:8a:67:e4:0f:76:c2:f0:84:fc:8a:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BC:F7:35:D0:77:C6:8E:F5:EF:DF:E8:AC:27:09:DC:D6:58:97:2C
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:56:de:75:7c:8e:84:64:e6:3c:34:98:82:5f:66:32:e9:d8:
         29:36:d3:e9:28:7c:02:91:9a:d7:45:c1:14:f5:8d:ff:a5:b1:
         a0:96:6d:6c:ba:48:1a:7f:db:f6:09:a4:f2:d3:53:d1:97:00:
         e2:b8:5a:97:be:34:eb:fd:9e:f8:f1:64:4f:05:13:0f:fb:c6:
         5c:42:62:9f:56:fe:57:44:45:b1:9a:1e:df:47:c1:3f:38:e0:
         67:e1:62:80:59:6a:59:7b:cc:aa:1e:20:cd:82:02:b8:9f:cb:
         08:ff:a4:b1:8b:1c:6f:2c:2b:c5:50:cd:5d:84:9e:50:a7:5b:
         bf:1c:73:2a:a9:bd:b2:b6:40:23:a4:a8:8b:87:61:55:15:19:
         dd:53:6f:5f:20:68:ba:6a:e7:2b:ba:01:8d:ca:57:91:cf:66:
         4c:31:ed:ed:95:f0:16:df:df:5a:da:31:ee:03:5d:25:eb:79:
         63:0d:cc:e0:34:b2:2d:b3:2a:53:bb:ea:98:8b:d1:56:7c:7c:
         54:c6:0f:c2:81:e8:7b:a4:d2:11:3e:42:18:e3:1f:18:89:07:
         27:13:de:23:f4:a3:0b:59:c7:b6:24:36:1a:bd:91:52:4a:0b:
         6e:16:45:4f:1c:8c:3e:ea:10:61:e7:f9:11:82:48:af:35:65:
         e3:e0:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:04:09 2024 by rpki-client on console-ams.rpki-client.org