Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File:                     ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier:          /ZwVW0LaBwbMMkcxmMyPiIlHt44OuHnaBQ5uIGAEZ8g=
Subject key identifier:   7D:87:88:53:CB:3E:65:01:AF:1B:87:DE:AF:01:E3:72:5A:FE:24:5C
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer:       /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial:       018F8824A370D4A512A7EDBC695EBBBF2E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number:          0C67
Signing time:             Fri 17 May 2024 20:00:53 +0000
Manifest this update:     Fri 17 May 2024 20:00:53 +0000
Manifest next update:     Sat 18 May 2024 20:00:53 +0000
Files and hashes:         1: 5iAv7QWA5NMfwHWi5y1iJjBfwUY.roa (hash: 0L7zcIsQzAQExt8Ppd8j9ZjtXt0OdZ16Wz2ipROlkqE=)
                          2: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: UWsntZm5/BHJG2CzdwOGYDy3BujwhNWoOuA/T59gnhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:a3:70:d4:a5:12:a7:ed:bc:69:5e:bb:bf:2e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
        Validity
            Not Before: May 17 20:00:53 2024 GMT
            Not After : May 18 20:00:53 2024 GMT
        Subject: CN=7d878853cb3e6501af1b87deaf01e3725afe245c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:42:9d:d5:48:86:cf:83:a9:d4:db:82:2a:
                    e0:67:d1:3a:f4:e6:9e:61:e3:fa:4c:85:50:d1:ed:
                    fb:d8:1f:63:17:7f:73:2e:e5:79:9a:6c:85:e4:e6:
                    f8:a6:f7:2d:24:36:df:1e:78:86:4b:02:9b:8b:47:
                    75:de:7f:1f:c9:10:1c:88:df:0c:49:0e:20:a1:0e:
                    10:6b:74:b6:83:fc:b3:ac:a5:90:99:2c:38:f6:b8:
                    6b:1e:62:e1:9c:22:5b:6e:fe:ba:92:52:cb:6e:82:
                    c1:ec:e9:38:02:ea:21:4a:e0:dc:1a:e0:d4:81:3d:
                    a6:9b:fc:6b:ae:8c:ac:0f:f6:b0:4d:2d:a7:f8:99:
                    a1:21:24:e8:36:13:5c:db:16:96:d9:5b:e0:18:3b:
                    7c:5a:c0:78:ea:f5:23:f9:6d:42:8b:e0:14:a1:37:
                    41:b0:0d:9d:46:36:7b:82:68:19:9a:d5:ef:9f:76:
                    43:12:9a:bd:1f:48:a4:af:b5:99:c2:0e:e9:93:34:
                    2a:db:97:7c:b7:4f:bd:89:5d:4c:a2:ae:91:93:63:
                    36:42:62:a7:09:6d:cf:20:95:7f:86:4c:27:6f:79:
                    eb:f5:fc:99:6d:bf:31:b3:24:55:97:cd:ea:f4:b5:
                    2a:47:ee:de:ed:af:33:b4:c3:f9:b6:a3:a9:c5:23:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:87:88:53:CB:3E:65:01:AF:1B:87:DE:AF:01:E3:72:5A:FE:24:5C
            X509v3 Authority Key Identifier:
                keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b0:96:51:d2:55:b8:4e:21:93:74:ac:f8:d1:9c:c6:4d:ea:
         8a:6c:51:6a:80:a6:03:72:56:32:0f:45:14:05:2b:d2:01:98:
         53:68:ae:39:e1:bf:1e:b5:c4:84:da:6b:98:a8:ad:ce:5f:00:
         d6:bc:a3:c9:39:96:0c:ca:f8:3a:b3:ec:75:25:f7:99:fb:3a:
         09:3f:a6:a8:77:5d:bd:44:7e:3b:cf:ac:9f:a0:75:ce:e7:93:
         8e:e9:c3:b0:9b:15:5f:44:f9:dc:51:49:80:58:a9:50:05:45:
         86:f6:2d:3c:13:af:20:05:e3:03:c2:b6:f3:47:53:c5:28:29:
         b0:14:72:66:76:2b:94:97:31:28:e1:43:9a:77:32:94:2d:5c:
         0f:77:bb:7e:3e:04:c5:10:ad:f2:51:81:b2:a1:e8:8d:37:38:
         f0:0e:ed:39:6e:fb:81:fa:ad:87:38:51:58:78:8a:85:8b:58:
         25:1a:13:f7:19:39:3b:f0:43:0a:91:26:cb:9e:7d:10:4d:04:
         9b:53:83:1c:86:4f:be:16:37:d4:aa:a1:7d:61:bf:cf:95:1d:
         34:09:3d:5c:b5:de:6b:1f:61:c4:61:25:bd:d7:1e:c2:6a:f5:
         67:0b:a0:62:10:66:13:f3:a0:13:a1:2c:08:c6:35:ac:0b:52:
         8e:1c:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:13 2024 by rpki-client on console-fra.rpki-client.org