Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File:                     Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier:          9xNSeqpPsaguc96mK1NrMmW0bKBDbBTeahYentVEJO0=
Subject key identifier:   F5:DE:F1:C2:92:8D:5D:1B:09:11:07:66:8E:F3:07:AC:A9:02:A3:66
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer:       /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial:       01920C4F74E9EAE3726CE5B1A1874F3F5761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number:          01C0
Signing time:             Thu 19 Sep 2024 22:03:06 +0000
Manifest this update:     Thu 19 Sep 2024 22:03:06 +0000
Manifest next update:     Fri 20 Sep 2024 22:03:06 +0000
Files and hashes:         1: WV5sxYOT_2xZGV6d5cq__8Cn_3E.roa (hash: hE8IUBPB2DZKwoVTyIgYHhgu80x43ZKEKab23ceM224=)
                          2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: PYMRDkCOthEJQqmk5wZvEGLi3bjYqoIwg13g7ilMYVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 20:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0c:4f:74:e9:ea:e3:72:6c:e5:b1:a1:87:4f:3f:57:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
        Validity
            Not Before: Sep 19 22:03:06 2024 GMT
            Not After : Sep 20 22:03:06 2024 GMT
        Subject: CN=f5def1c2928d5d1b091107668ef307aca902a366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3f:6d:e9:a7:58:db:ff:9f:05:45:15:15:49:
                    0d:4c:de:8e:23:0f:a8:13:aa:68:f9:fc:bc:b5:00:
                    27:e3:06:fd:06:17:c9:4a:03:22:f6:38:ce:3c:53:
                    bf:d8:b6:14:d9:7a:36:95:57:b8:05:e8:79:ae:f1:
                    60:a0:b4:6d:ec:a8:2c:df:60:29:de:d2:6a:7b:bf:
                    46:f9:e0:aa:a4:1a:89:e9:94:f7:1d:8d:63:ae:c9:
                    d7:92:6b:4f:4e:66:20:f4:0d:2d:17:a3:75:54:e1:
                    2f:78:b6:62:3a:a4:12:d9:0f:d5:cd:00:aa:75:80:
                    d5:e2:a4:b4:8b:6c:84:5f:c4:61:34:c7:b2:c9:71:
                    4a:6f:3e:c8:b9:9d:dd:6d:9b:52:51:bb:fc:4c:fc:
                    aa:46:e9:eb:50:f0:59:e2:c6:f6:8d:69:0e:a8:2d:
                    8a:4b:5e:be:88:f0:5a:9e:f9:d6:e4:a9:59:0f:80:
                    32:cc:e8:18:fd:5e:60:97:99:5f:cb:27:4c:b7:3b:
                    40:5f:b5:86:45:1a:ce:fd:61:93:df:07:72:86:ad:
                    52:4f:4b:51:3b:37:da:b9:c8:35:97:70:cb:fc:8f:
                    03:15:c1:72:c0:bb:a8:1d:bd:e7:e7:56:9a:f0:fd:
                    80:b9:9b:47:b9:a1:d5:1c:99:7b:8e:8f:61:c4:da:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DE:F1:C2:92:8D:5D:1B:09:11:07:66:8E:F3:07:AC:A9:02:A3:66
            X509v3 Authority Key Identifier:
                keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b8:cc:ac:56:cd:b7:9d:87:a8:24:f0:f5:5f:ee:4d:e2:7e:
         77:96:20:16:f5:03:ee:b5:3f:7a:4b:65:03:49:51:8c:91:41:
         9e:ca:6c:9f:3d:19:3a:d6:d3:20:bb:62:6e:3d:36:e7:da:b6:
         d4:66:2e:98:f2:47:15:1b:85:70:85:dc:07:c8:fc:b6:83:4a:
         d4:a1:c5:a9:bc:9e:da:fb:30:75:be:0f:97:ad:ee:03:b0:78:
         b9:9b:5e:67:9f:63:fd:92:96:9f:00:13:b6:9f:b3:92:fd:57:
         8e:92:63:66:30:41:01:cb:b9:1d:f3:1e:4a:e3:4a:a3:e8:91:
         42:61:13:4b:3c:a0:56:5c:7a:9c:74:a8:a5:02:f2:c9:3d:e3:
         5d:52:a1:f6:10:75:95:0a:88:e9:17:4d:76:22:6a:91:ce:8e:
         67:51:24:9e:47:bd:e5:61:b3:09:9d:21:13:8c:aa:15:49:5c:
         25:49:93:41:db:63:ea:2d:d5:e6:0b:ce:9d:6f:3d:83:3b:e8:
         9d:0b:36:cc:69:da:1b:97:ba:2d:17:d8:a5:cd:ba:b7:be:d0:
         1e:8e:44:f0:ab:21:59:7b:cd:a8:60:1e:68:8c:c8:41:d9:4b:
         e6:bd:79:e3:71:50:bc:1d:7b:cb:0b:76:72:20:58:e6:50:6d:
         13:b4:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:24:39 2024 by rpki-client on console-fra.rpki-client.org