Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File:                     ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier:          VLE55F6+CO9RTfTNBN0GvZYSqmwGftRoNRKYrzIZ6bo=
Subject key identifier:   D3:76:EA:FD:4D:35:A6:4C:29:8D:21:F7:B3:B3:A9:97:2F:B0:75:71
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer:       /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial:       019369DAEF5087B135837B4170A37C9CBD98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:02:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:56 +0000
Files and hashes:         1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: 2237Lnf5DANmexB5CjDe5zZLxdFEmKWtnvhxsDUYkx4=)
                          2: aZIo2iIyd4nYuuJb-e7kq7z5hXw.roa (hash: QN7c8ArqlniZjNI4BJgmpxqtuMz26rKAUXgSmrCm5Go=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:ef:50:87:b1:35:83:7b:41:70:a3:7c:9c:bd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
        Validity
            Not Before: Nov 26 19:02:56 2024 GMT
            Not After : Nov 27 19:02:56 2024 GMT
        Subject: CN=d376eafd4d35a64c298d21f7b3b3a9972fb07571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:d3:05:bb:25:09:7c:1c:cb:13:72:f1:ae:
                    1e:8a:01:fe:a0:22:f1:26:58:2a:04:b6:e0:0b:ba:
                    51:70:ac:2b:a1:83:45:37:8f:67:c8:32:70:f9:46:
                    6b:99:94:d3:d4:17:23:85:c1:d3:78:88:c8:52:1b:
                    c5:9f:3d:79:e0:db:07:59:6d:d7:e3:a0:b9:b2:32:
                    10:b2:9a:9e:18:5e:07:6b:bd:8f:82:ce:9c:d1:a6:
                    8a:2f:8a:70:10:4a:8a:34:53:a3:77:ed:18:07:a6:
                    c5:35:ef:07:bb:9b:ca:de:7e:1d:43:f2:af:f4:70:
                    88:25:65:3a:ab:87:37:9b:77:d1:7a:90:4d:35:63:
                    3e:a3:23:2d:c0:bd:12:ec:05:16:b6:e6:90:88:4e:
                    d2:e5:fa:78:88:76:dc:7a:6c:cc:22:7a:13:ab:62:
                    14:c5:f0:5e:52:23:30:9b:55:92:67:06:1f:11:35:
                    96:56:01:b3:50:4e:a9:44:ef:59:56:b4:15:20:12:
                    ec:00:6a:e2:c1:a0:c3:78:b6:2d:05:22:b7:45:14:
                    35:96:b7:93:be:8b:72:af:82:83:77:d3:17:97:37:
                    95:c3:9b:ae:c1:76:55:30:f4:c9:b2:5a:cb:4c:9a:
                    5f:88:a1:75:02:49:96:b9:26:82:33:6f:c4:84:2f:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:76:EA:FD:4D:35:A6:4C:29:8D:21:F7:B3:B3:A9:97:2F:B0:75:71
            X509v3 Authority Key Identifier:
                keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f8:23:5a:bd:58:5a:fa:c9:e9:07:79:cf:2c:83:2f:b5:36:
         d6:0a:8f:5f:6a:f6:9c:67:14:52:f0:88:3e:1d:bc:38:e4:83:
         f1:68:19:b1:18:23:f4:99:58:45:03:7a:11:44:ed:28:24:8d:
         78:63:d9:39:10:29:c5:40:e0:d8:68:e8:d6:1e:3e:be:cb:0c:
         20:d0:66:48:ca:69:92:6e:80:a6:eb:6a:d9:06:3c:9f:cd:48:
         a6:6b:78:54:5d:bf:4d:99:47:9c:06:fe:2d:dc:ef:d3:a7:54:
         dc:69:f8:3f:d5:41:34:fa:68:83:43:e4:3b:d8:f3:b1:89:b2:
         d7:21:e4:80:b6:2c:b5:df:49:7f:5e:f2:a5:f9:40:89:cc:b0:
         e8:66:a1:f1:68:20:81:06:55:15:90:10:fd:3c:27:24:97:e2:
         d0:4a:23:40:e7:37:82:be:82:0e:e6:0a:e9:8d:59:60:4e:9b:
         15:7a:f1:30:fe:cf:4e:31:6c:36:0c:a3:4f:99:0a:7d:fd:55:
         28:6b:3c:1a:f4:e5:42:62:46:cb:3d:2a:89:e1:6e:28:11:f6:
         33:18:21:22:51:5c:42:8d:76:dd:e7:d2:fd:80:7d:b2:f2:dd:
         68:ca:25:58:5c:09:f3:24:d9:f8:c2:95:79:55:08:0b:d4:1a:
         99:34:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:44 2024 by rpki-client on console-ams.rpki-client.org