Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File:                     ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier:          ivY/QsR+4p5luT8vYhdWoViXDVIQMmKCcj8ujcRtb+8=
Subject key identifier:   43:85:6A:E9:6F:24:F9:21:1B:11:43:B5:BE:36:6F:6A:4E:E3:86:1C
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer:       /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial:       018F874A7EA2ABC62DD741B5C353BA4A2E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number:          0CBA
Signing time:             Fri 17 May 2024 16:02:37 +0000
Manifest this update:     Fri 17 May 2024 16:02:37 +0000
Manifest next update:     Sat 18 May 2024 16:02:37 +0000
Files and hashes:         1: 8etL1ZGqS1H_O126hvRXa4sDH9g.roa (hash: hlmfxprImqTmmYg34noCC0D9MjBihwafXuQa+0/nNVM=)
                          2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: Ha88x9B001ZDiXr66wTJjMvUawHCU5RkVjJBdylL5Yw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:7e:a2:ab:c6:2d:d7:41:b5:c3:53:ba:4a:2e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
        Validity
            Not Before: May 17 16:02:37 2024 GMT
            Not After : May 18 16:02:37 2024 GMT
        Subject: CN=43856ae96f24f9211b1143b5be366f6a4ee3861c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:71:4c:91:5d:6b:41:a4:45:4d:c0:0f:5e:
                    5c:a2:fe:da:c2:ff:22:23:dc:e1:98:c9:d6:4d:f5:
                    a1:5a:08:f6:ac:c3:3b:9f:ac:0e:de:c9:e4:34:37:
                    3f:5f:a9:57:7f:1a:b5:27:ca:3f:ce:c2:1c:72:e3:
                    85:96:0d:a8:ca:74:45:b0:4b:06:14:55:b4:14:15:
                    37:13:dd:fb:c0:0c:0b:ea:8e:17:f8:82:45:8a:ce:
                    43:08:5f:ee:1c:85:8e:21:65:49:55:a7:bc:ca:35:
                    fe:d7:a5:42:60:20:a3:19:f6:42:af:f5:b1:8d:19:
                    9c:7c:55:1f:41:17:21:71:c7:c1:f5:3d:86:78:d2:
                    e0:df:7b:1e:04:6b:17:c4:e9:ce:5f:54:df:dc:a7:
                    72:89:2a:61:a6:4a:ca:1c:9b:54:5d:2b:9c:bc:29:
                    db:51:47:0a:d0:fe:2e:a1:92:67:3b:94:55:32:97:
                    cf:b2:1e:3a:92:7a:71:fb:5d:1d:8c:9f:65:d8:92:
                    9b:dc:9c:30:2a:2b:bd:d4:d1:24:ef:fb:6a:2b:30:
                    3e:60:0b:4d:c4:0f:8d:36:d4:db:b7:eb:fb:82:62:
                    97:bf:c1:d5:6f:a5:f2:3f:ef:e8:6c:b7:8b:f5:7d:
                    18:19:ac:3a:63:ee:75:7c:0b:e9:3a:b0:20:ed:24:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:85:6A:E9:6F:24:F9:21:1B:11:43:B5:BE:36:6F:6A:4E:E3:86:1C
            X509v3 Authority Key Identifier:
                keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:75:94:8c:d8:79:62:a8:7d:ab:5f:51:f4:9c:2c:71:1e:
         ec:95:7f:ad:65:9f:94:b2:5d:8f:72:aa:83:48:ad:8c:a4:fe:
         12:ea:a8:1b:50:73:83:a5:60:dc:cb:18:f3:0a:11:f5:a0:b9:
         c1:e1:b5:26:82:15:2e:57:e1:3f:83:ac:e6:67:ca:03:73:00:
         cf:b9:6b:f4:85:39:a1:2a:c6:c8:1b:d5:82:c6:ca:e2:a8:f7:
         4c:5d:53:0f:55:a5:49:72:d7:7f:f1:14:ee:96:62:bf:84:36:
         4a:9b:62:3e:a3:29:9c:1f:9e:cf:01:a0:59:c5:76:d1:47:df:
         6d:03:60:64:45:f8:0e:97:b5:a2:e1:46:87:9a:45:cb:1b:3b:
         6a:35:a9:62:82:39:96:cf:14:b3:64:21:aa:20:f2:3a:2d:85:
         57:39:64:eb:8d:af:2d:c6:9d:2e:e3:25:d2:13:15:b8:44:61:
         08:a2:62:1e:28:1a:e3:c0:55:da:5d:fd:0c:d3:1d:a7:a7:dc:
         c0:23:1e:80:da:87:62:d6:9f:f7:0c:42:54:d8:2e:a1:8e:04:
         dc:ff:b5:fc:f9:74:a5:39:2e:4a:4e:9c:7d:0f:22:f6:f7:fc:
         5b:37:2e:ae:41:f0:02:af:d3:53:02:83:21:30:8c:02:c8:08:
         cd:1e:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:53 2024 by rpki-client on console-fra.rpki-client.org