Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File:                     zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier:          twwZBP2DZ7g5QmIHFD82/pPccny5QzIdlh+lemTeDOw=
Subject key identifier:   F0:9B:2E:9E:E1:28:C1:EA:A9:4D:31:83:57:7D:76:49:15:B4:44:80
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer:       /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial:       0193561AE6B13C73340F44B3BD0738853181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number:          0320
Signing time:             Fri 22 Nov 2024 23:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:23 +0000
Files and hashes:         1: DNVxfpDGSUNqKv-bobTqAYY1GM4.roa (hash: x9YGFHRkG43RP4BW49ozQGkYJsq4ebX61fFE9z2j/U4=)
                          2: LzCaoVwJCRxldKi4eL6i8tNyo88.roa (hash: 3QdjZuTmrS4T2Z847EMr7gOkuZi8yjucaxielSSUztc=)
                          3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: eq68KMTxSMP9tCYHISxGF+3ooAwpvYcLS/7vM1D5oI0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:e6:b1:3c:73:34:0f:44:b3:bd:07:38:85:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
        Validity
            Not Before: Nov 22 23:00:23 2024 GMT
            Not After : Nov 23 23:00:23 2024 GMT
        Subject: CN=f09b2e9ee128c1eaa94d3183577d764915b44480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:29:40:66:39:28:3d:ff:bd:18:85:fe:3c:
                    d9:26:00:22:c7:de:94:c6:01:8b:c8:ba:43:3e:da:
                    20:68:1f:d2:55:a1:1b:d6:8e:ee:ed:85:ba:f5:a7:
                    f4:8c:b6:1c:1e:a1:cd:56:9d:80:c7:2b:01:51:c5:
                    a0:72:0b:83:ed:c5:05:1e:00:a3:18:51:6a:8d:75:
                    8f:fe:54:7f:03:8d:cf:4b:6f:5e:b7:7d:4e:a3:72:
                    83:96:e5:c5:39:61:9e:6a:cd:d0:86:51:84:62:da:
                    f9:7d:55:bc:44:57:fe:2e:91:8e:ae:ff:d4:15:41:
                    a6:44:d9:b5:b5:70:5a:d9:36:f8:1e:f6:15:44:64:
                    d4:cf:fa:1f:30:cf:d2:61:94:9e:ed:a5:19:60:00:
                    36:ff:fb:3b:14:81:3a:97:f4:8f:4c:7b:a9:38:4b:
                    7f:06:00:19:bb:4b:0d:18:de:7b:21:4d:4a:68:c7:
                    d5:fa:f7:fb:d5:af:f3:3c:52:37:da:5d:18:61:62:
                    c9:b4:00:3c:8a:5b:2c:be:ce:4d:ac:4e:29:48:cf:
                    ee:18:25:dd:99:61:80:6f:8a:1e:f4:2e:12:f2:89:
                    36:e6:64:f6:ec:80:a0:fc:a7:a9:cc:4c:f7:0e:81:
                    90:d8:8e:29:6e:59:89:af:60:69:e4:c0:36:00:33:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:2E:9E:E1:28:C1:EA:A9:4D:31:83:57:7D:76:49:15:B4:44:80
            X509v3 Authority Key Identifier:
                keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a9:84:6a:46:90:4f:e5:b7:bb:c9:fc:a0:c5:ac:96:1c:cb:
         a0:13:3e:4f:c6:8b:cc:eb:3c:e5:30:ee:ed:d2:95:cd:63:98:
         63:71:81:a9:f7:e7:ae:83:84:e7:fe:9d:9a:73:88:5c:a2:c2:
         7b:c4:3f:dc:fe:51:21:9e:07:fe:d2:0d:48:15:e2:45:e0:c6:
         e0:74:a0:5e:dd:72:12:d3:c0:88:ff:7c:61:b5:5d:e6:3a:a0:
         d6:57:09:c4:cd:9c:da:db:b2:0d:82:66:22:d8:0c:60:01:62:
         8b:4d:ab:c0:51:7c:ea:b7:70:f1:3c:77:f5:79:97:09:e7:d3:
         ee:74:4a:63:38:ee:61:ae:f8:89:f1:cd:f2:6f:27:28:bf:a8:
         7c:53:b1:6c:4a:8e:e7:2a:4c:97:f9:79:d7:44:0d:52:f8:31:
         72:ed:a5:b4:d0:65:e9:31:23:6a:90:2d:dd:b1:36:91:d6:a9:
         a5:ee:6a:45:d5:aa:22:53:e1:32:01:c8:7f:dd:49:6d:ce:69:
         d5:c1:36:a8:9b:ac:4c:49:58:4a:b2:8d:17:32:e9:63:11:e7:
         bd:f3:37:e1:e8:b2:4f:01:7a:36:da:0d:09:08:a8:2a:17:4f:
         7e:7f:7c:c1:48:bb:70:9e:c5:63:74:87:f7:9a:3b:37:90:2b:
         86:c1:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:27 2024 by rpki-client on console-fra.rpki-client.org