Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File:                     zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier:          H60qPe4D2lCTH2fZXdO9wxkIUgTz4zIySadStfZTxkQ=
Subject key identifier:   EA:46:1A:68:96:71:81:E5:7E:1E:7B:46:AF:0A:25:40:35:F2:82:15
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer:       /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial:       018F8749510BBBA37554FCEFC8C9A6561337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 16:01:19 +0000
Manifest this update:     Fri 17 May 2024 16:01:19 +0000
Manifest next update:     Sat 18 May 2024 16:01:19 +0000
Files and hashes:         1: QxKeepNX2YsA4fWBre47KEa_xkg.roa (hash: E2/pABhFo/7ZxSFw/BJn/VApJP1hMLpoFcOYCUqGkQk=)
                          2: lL3sVpxtitrjvkI-F37q4WIzKJQ.roa (hash: D2kcnkijpIWJS5C3joe3or3b46sLQHR2ULFc8n0Pqz0=)
                          3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: xYTfUSkKU4s72A/gAX2y42ZzNa2Wfw58xpOO/Oy8JNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:51:0b:bb:a3:75:54:fc:ef:c8:c9:a6:56:13:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
        Validity
            Not Before: May 17 16:01:19 2024 GMT
            Not After : May 18 16:01:19 2024 GMT
        Subject: CN=ea461a68967181e57e1e7b46af0a254035f28215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:32:26:d4:bd:f1:7f:d6:6a:4b:92:31:c0:
                    91:35:d6:cf:00:e8:66:9d:3d:ee:7b:ec:29:85:43:
                    03:5a:d4:f1:0e:cf:85:9e:57:85:57:48:b6:24:17:
                    28:cb:25:84:1c:02:9c:ee:20:ff:ea:e8:f7:76:bb:
                    72:b8:80:84:54:33:bc:b9:3f:0f:81:bd:6d:7a:ed:
                    ef:1a:e2:e2:14:84:ef:5e:bc:59:e7:6c:8b:29:b9:
                    cc:48:25:95:7e:4c:be:0b:8a:e4:8e:28:89:05:3b:
                    ed:bc:ba:21:4e:7a:c9:ea:b5:66:83:63:1d:30:a2:
                    a0:f1:0e:ad:02:6c:c2:f3:5f:f9:8c:1a:c4:66:0e:
                    93:27:b7:d8:93:5a:de:30:77:07:6d:a9:d2:8d:57:
                    bd:94:e6:ff:b1:5f:1b:c4:fe:37:f3:1f:06:d6:1d:
                    ef:af:67:3d:5e:56:36:77:02:b7:62:ea:79:ad:ca:
                    ea:07:23:84:84:93:0b:71:09:07:56:aa:1e:70:b2:
                    a8:26:88:23:c0:85:d0:1e:8e:13:43:cd:38:21:a5:
                    7d:3b:68:5c:94:7a:70:dd:36:0f:8f:c0:b8:dd:3f:
                    93:5b:75:55:9c:6a:ec:b0:c6:f3:3d:b9:b4:c2:a3:
                    e0:01:50:07:0f:47:22:b4:35:01:0a:5a:2b:30:f2:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:46:1A:68:96:71:81:E5:7E:1E:7B:46:AF:0A:25:40:35:F2:82:15
            X509v3 Authority Key Identifier:
                keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c2:03:95:a9:35:59:97:10:34:80:8f:1d:f1:91:3e:83:74:
         df:15:48:dc:c0:3f:8c:40:f0:35:7e:2b:14:60:68:09:13:0d:
         63:40:87:5a:5e:66:1e:92:e4:58:9c:d8:f4:81:12:28:ab:29:
         82:74:82:97:8a:78:fc:68:1c:3d:9f:8c:4a:da:9e:c7:ec:78:
         86:7f:63:d0:4b:cd:83:69:81:d1:27:2c:72:b7:6a:fe:a2:52:
         62:8c:32:0c:6a:78:d9:ce:de:f8:cc:fc:a1:9d:ad:0f:47:72:
         53:8a:cb:ea:ec:5c:ed:93:6b:2a:bf:0f:39:5a:24:f1:94:eb:
         a3:ea:53:0d:26:d3:74:12:31:c4:7a:af:7f:82:04:f2:cb:b2:
         52:d4:f5:86:cb:44:66:98:f0:d4:85:8b:d5:65:d9:96:cc:8f:
         8d:90:fa:18:45:48:b6:7c:40:90:9a:04:e8:dd:71:c8:44:52:
         c1:49:56:fb:bd:f4:3a:8d:2a:fc:54:78:c1:12:4d:6d:24:00:
         d1:68:23:1f:50:b9:00:90:e5:8e:71:4b:1a:c5:9a:13:ce:60:
         f2:bd:29:7f:e0:67:26:0d:96:95:01:bc:c5:ae:f4:b3:8e:9b:
         7a:b2:b5:d1:34:96:74:0e:92:7f:b8:56:dc:a9:de:35:25:84:
         c4:98:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:28 2024 by rpki-client on console-fra.rpki-client.org