Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
File:                     fZZeprOcIq7CrS1NTAo6MT3x3vo.mft (raw, json)
Hash identifier:          YR03hH8+flAo5UkxGUI4121Iv97AtT5Z3NyRfRW2ZT0=
Subject key identifier:   AA:28:6C:31:39:A0:36:C5:5B:74:4C:5F:05:37:3C:99:3C:19:41:BD
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Certificate issuer:       /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial:       0190508EF30D709C56CA070261BE51301175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
Manifest number:          05DF
Signing time:             Tue 25 Jun 2024 18:01:03 +0000
Manifest this update:     Tue 25 Jun 2024 18:01:03 +0000
Manifest next update:     Wed 26 Jun 2024 18:01:03 +0000
Files and hashes:         1: 1-df6Xltt3IIwh-BNtFHOzeAKA2Y.roa (hash: pTts1mH90ktfyl5CdpGc8ObTujkV38UQBL/pvBDiUUc=)
                          2: EBUtWqJt77CR3-i9CS-0XzsshBY.roa (hash: UkSlDLe5yOd1kafp3m6pk14Hxj9qaRLrWQelUo9sg+E=)
                          3: FflGgEqWyj-DNnL4ZOjfpO_5jVc.roa (hash: h36hkfh5xo/bj1xxQzprWPWaQpGhxeLMaz6HBfNpyaM=)
                          4: M8LBnQw3WLUQ_xguxWSMae0r8a8.roa (hash: FFywbFCxUMtJ+3HCQYv9MDa/u3003/+na8S+rwjyWuk=)
                          5: aplkZ0HL9ZaZ5ASQElr3H2YSvHM.roa (hash: IuE4aqi5iAemciMCZECKsUFlm6Ji/N8cH4INk9fMQQk=)
                          6: fZZeprOcIq7CrS1NTAo6MT3x3vo.crl (hash: 8E5FoALH6wSk6bkd6AGFx6GIy2SkVJUNYvGY7jm2+uw=)
                          7: sQFx683CxXcR28flVAkjdjE5umQ.roa (hash: 3XN6F/x8ISkS/WzsFnBdacVAQiUEtXBTdwgbPUNPxXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:8e:f3:0d:70:9c:56:ca:07:02:61:be:51:30:11:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
        Validity
            Not Before: Jun 25 18:01:03 2024 GMT
            Not After : Jun 26 18:01:03 2024 GMT
        Subject: CN=aa286c3139a036c55b744c5f05373c993c1941bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:ae:9b:65:44:ef:4a:51:bb:86:1e:f2:11:
                    d1:dc:e3:51:c2:66:fa:12:ef:d7:18:a5:20:69:a9:
                    2a:dc:c4:1c:e0:79:f9:ed:e9:ac:9e:34:b0:fb:46:
                    27:67:52:50:70:52:c2:b5:fb:4b:60:a1:88:9e:49:
                    06:bc:c2:87:91:a6:4c:3a:c4:b2:ac:ca:b0:10:33:
                    b0:a4:49:37:8c:94:14:33:36:e4:a3:30:85:94:53:
                    bb:15:b7:bd:90:07:0f:44:43:a4:78:d8:b8:c1:36:
                    02:b0:67:48:07:bf:be:cf:f6:05:f9:b6:23:bf:ce:
                    be:bc:72:29:e0:ba:30:ed:28:d4:e1:d0:56:02:87:
                    0a:34:e0:46:e9:f6:70:fb:1b:8f:1c:40:21:5f:78:
                    55:29:22:b1:67:bc:24:43:c4:53:e0:51:8b:42:50:
                    2e:06:7e:7e:5e:62:7c:f0:5a:d8:56:31:8e:e9:43:
                    16:06:1f:ee:64:12:c0:7b:d3:9a:a3:1d:87:2b:45:
                    b1:2a:aa:f3:ec:9b:09:7f:8b:92:fd:20:7f:06:f2:
                    1c:c2:45:b4:a2:f4:7c:6a:5b:09:39:8c:1b:8d:6a:
                    6d:81:a5:4d:a0:b9:9c:20:26:4e:aa:f5:2e:6b:22:
                    84:8d:7b:bf:e8:0b:3b:7c:ae:de:28:1a:b2:1d:d4:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:28:6C:31:39:A0:36:C5:5B:74:4C:5F:05:37:3C:99:3C:19:41:BD
            X509v3 Authority Key Identifier:
                keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:3c:d5:af:e2:a4:cc:61:ed:2e:6d:dc:e8:ae:8f:50:37:
         89:ae:7f:b1:76:4e:1d:0e:4c:28:12:8f:d9:32:87:bc:14:8c:
         d7:9c:06:02:95:17:8d:45:b7:9c:52:3a:03:50:c9:da:9d:5b:
         23:c2:b4:2d:c8:75:bc:85:8f:e7:79:ce:9c:83:3c:86:dd:50:
         cf:bc:76:c2:5e:29:ac:69:fc:15:2b:78:a8:4f:6a:6b:aa:c6:
         91:43:69:ef:72:5d:ee:b7:30:75:36:33:e5:d3:0a:63:af:a0:
         92:03:0e:62:dd:5d:a7:0d:55:5c:17:ea:ac:7b:ea:25:b8:94:
         1e:a8:ee:62:22:4e:49:9d:5c:95:e5:9a:09:32:d2:7b:39:8d:
         aa:c2:d9:47:b9:72:5b:25:e6:15:f4:bc:62:a3:89:4d:f0:b0:
         d2:c4:6b:f5:84:75:e9:6b:45:97:12:e2:0c:98:af:97:ae:a4:
         98:a4:8b:53:74:2a:fd:1e:02:0d:34:da:3d:20:b7:d9:a6:1f:
         bb:c8:2a:eb:02:dc:96:6d:46:67:9b:30:ac:97:a9:27:ab:4d:
         25:4c:02:f8:c4:38:90:ff:70:74:17:eb:59:77:6a:ad:1c:00:
         80:7d:c9:a2:6c:6f:12:8e:1b:ae:ef:0e:ba:2b:58:10:8c:20:
         71:c1:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 00:07:36 2024 by rpki-client on console-ams.rpki-client.org