Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File:                     zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier:          ixldJCm91owrmPnkezqGgUHXwIrM6wO8rpeV9rGm07s=
Subject key identifier:   41:3F:60:53:BB:D7:60:63:40:E0:51:01:48:31:CC:FC:6D:9F:79:1E
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer:       /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial:       01906E6200A8E676F0F2507D70FB5E9A78C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number:          019E
Signing time:             Mon 01 Jul 2024 13:00:34 +0000
Manifest this update:     Mon 01 Jul 2024 13:00:34 +0000
Manifest next update:     Tue 02 Jul 2024 13:00:34 +0000
Files and hashes:         1: LzCaoVwJCRxldKi4eL6i8tNyo88.roa (hash: 3QdjZuTmrS4T2Z847EMr7gOkuZi8yjucaxielSSUztc=)
                          2: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: rJ4+lT4/pWCnROxLKzqiMjU7ybvxVAfHv7WEAvZPII4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:62:00:a8:e6:76:f0:f2:50:7d:70:fb:5e:9a:78:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
        Validity
            Not Before: Jul  1 13:00:34 2024 GMT
            Not After : Jul  2 13:00:34 2024 GMT
        Subject: CN=413f6053bbd7606340e051014831ccfc6d9f791e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:e5:1f:61:19:0b:33:08:3e:05:d4:53:1e:
                    06:fb:5b:ae:31:ac:86:45:a6:b6:f7:c0:30:45:2b:
                    65:73:01:ff:bb:a2:d8:dc:63:97:34:1d:02:fa:c5:
                    17:f5:36:91:94:c7:0f:af:ce:d6:4c:7c:04:fc:3e:
                    03:cb:87:d2:bd:00:e0:bb:c4:52:03:93:14:5d:da:
                    16:55:cb:84:d9:aa:c2:e1:f9:0b:de:9f:94:ac:02:
                    9b:61:90:da:6e:a2:55:09:98:c7:b3:ef:80:30:a5:
                    bf:ce:2e:de:d7:91:92:a4:a3:a9:b6:04:e5:9f:65:
                    7f:0e:d6:1b:7f:61:93:17:8e:4d:7f:f4:a9:07:34:
                    fa:6f:bf:86:0a:37:cc:d9:07:94:c0:be:f9:88:b9:
                    48:5f:2c:9a:50:02:59:64:8f:25:4e:15:40:0c:f6:
                    3f:a8:c9:87:83:6c:99:64:81:8a:05:d7:8c:64:44:
                    de:78:f0:af:8d:78:86:11:1b:00:0d:1a:61:05:c4:
                    41:a5:5a:27:36:c0:ab:ad:48:73:7e:ee:c2:ea:32:
                    a8:73:54:08:fb:b3:a0:0f:fb:79:eb:94:36:9f:89:
                    37:47:f4:2f:e0:75:2e:fd:93:c3:0e:bb:e4:cc:9c:
                    6b:a7:1c:be:61:93:19:73:f5:e5:f6:45:1c:2b:7e:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3F:60:53:BB:D7:60:63:40:E0:51:01:48:31:CC:FC:6D:9F:79:1E
            X509v3 Authority Key Identifier:
                keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8d:4b:e9:85:32:68:2e:16:25:b0:38:43:65:32:ef:45:25:
         73:ac:3e:81:f5:64:90:bd:9f:93:f1:76:9c:17:59:5d:19:0b:
         27:56:d3:91:c6:da:c4:e6:bc:d9:94:92:9a:ce:b4:eb:6b:8d:
         a9:b8:4e:34:e5:a1:3e:79:f1:28:2e:cf:f5:6c:2e:78:40:a5:
         ce:d0:e3:73:3a:49:68:63:c6:47:64:3e:a7:9d:39:52:d5:7d:
         98:b9:59:6b:12:c5:55:3d:ca:29:aa:b0:ad:2f:98:c9:9c:6d:
         12:a1:9c:d0:30:8e:b9:84:84:0a:88:26:cf:3e:7d:95:7c:3c:
         c4:a4:7d:22:f2:02:04:38:a9:7a:16:8a:df:c3:31:07:57:11:
         5c:08:5c:c3:a2:66:d0:5d:8c:f9:75:d5:93:d5:e0:24:34:cc:
         90:68:4b:86:e0:e4:74:70:a5:3b:95:26:53:9e:89:79:33:d6:
         10:aa:97:15:f8:c5:7f:e5:32:fc:12:3f:bd:cb:4b:19:94:dd:
         ad:b6:da:34:ca:88:ba:4a:d1:7e:45:e8:11:75:8b:3b:16:e9:
         e0:a7:cc:43:5b:3a:38:a9:89:d6:ab:7a:8b:2d:88:b7:5b:8c:
         5a:c9:84:55:05:1b:d9:ff:68:d1:43:13:18:8c:da:e8:75:b9:
         bb:f9:98:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:31:15 2024 by rpki-client on console-fra.rpki-client.org