Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File:                     ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier:          6O0/6j1hPBpkiRili+Po4UiK0K2s5JUJZxd0qfpTkIQ=
Subject key identifier:   4D:1F:AB:B6:28:B9:D5:96:ED:72:A7:42:9E:C1:1A:55:58:F7:84:E1
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       019359530645E6FF172482EE1A84576FF61B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number:          137F
Signing time:             Sat 23 Nov 2024 14:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:33 +0000
Files and hashes:         1: 1-ChiW6WQnSVSx-O8IRJLvR83OQ8.roa (hash: tGwCTCPEgmVKM32PIOR6zu7nBOc3XGE95r2FUT8gVgM=)
                          2: Hpwv1MCu60jinYmYYv3bmXxalzI.roa (hash: gEefqIQkRfRlUj/6gzjsjEE2fEPWnXw9ASl2BktiGG0=)
                          3: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: njDDwvvFu5tRCq7dNI0n0+iskyO2jaWmhgGnzYQG4eI=)
                          4: ZOhKs1ECmJZJhcXek5XwYVsPcI4.roa (hash: PMT86e+b5L7mFPBhIwS4kw07chpBPh8UBIhmQnMdvks=)
                          5: hHTc5WSNewYP0m_Xbk9399DO9uU.roa (hash: YmPtOCX15wX7Rvf+nDHf7yLIHAWSX2QkFVmtgpCgeWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:06:45:e6:ff:17:24:82:ee:1a:84:57:6f:f6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: Nov 23 14:00:33 2024 GMT
            Not After : Nov 24 14:00:33 2024 GMT
        Subject: CN=4d1fabb628b9d596ed72a7429ec11a5558f784e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:ce:e2:93:0d:19:73:01:9b:62:04:ef:1b:
                    b7:cf:bb:bf:59:c9:1b:01:08:d9:a9:a9:ea:15:dc:
                    75:70:27:3f:bb:ab:04:e2:ea:94:be:24:ff:c3:49:
                    1c:e7:2a:d9:87:11:15:44:d9:12:69:43:76:11:c8:
                    54:95:02:2f:e8:ef:c5:54:3b:59:6c:3c:62:20:45:
                    ad:1c:56:9d:2f:27:2e:fc:e7:58:16:5a:16:47:ed:
                    fc:30:59:c3:45:a6:99:fc:8a:9c:80:58:88:bf:d2:
                    5c:9f:4f:4f:ec:65:b3:17:7d:c7:97:df:60:26:ba:
                    10:8f:55:51:76:f3:03:74:d3:96:eb:b5:e7:65:f4:
                    6e:6e:fb:a2:ff:a0:00:44:0f:d1:37:f9:d6:89:48:
                    14:c0:0d:c8:ee:b5:d4:a8:89:96:6f:2b:25:7b:54:
                    78:40:6e:ae:ac:ce:33:54:8b:64:56:62:21:ae:6b:
                    e5:2f:84:8c:f6:48:37:54:c0:b8:2c:5a:a4:97:c4:
                    04:84:86:b0:df:4f:e6:1f:12:fa:d3:df:3b:8b:d2:
                    19:26:46:97:e1:d3:5c:cf:6c:07:5b:de:bc:07:3c:
                    53:d7:a5:2c:a7:0b:f1:a0:14:ab:88:37:47:ef:30:
                    37:5e:57:a6:b5:78:3d:61:8b:91:0b:cb:14:1f:9a:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1F:AB:B6:28:B9:D5:96:ED:72:A7:42:9E:C1:1A:55:58:F7:84:E1
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d8:1a:a5:7a:34:24:65:a4:05:b3:83:2f:cb:1f:df:7c:e1:
         e1:46:85:dc:8e:f8:ac:ed:30:6d:2b:e7:12:ef:5b:01:4b:aa:
         c6:f0:b1:56:b2:1d:4c:05:28:ab:37:53:30:88:cc:4a:d8:f8:
         ec:a8:24:e1:00:1e:84:9f:74:b7:93:2c:c7:be:d1:9c:f8:c9:
         a7:20:e6:13:e7:40:7e:ae:b6:8b:eb:d8:86:a4:01:e4:63:92:
         96:e5:24:51:d1:13:36:be:90:83:fa:51:df:ab:45:03:78:a3:
         cc:59:22:e1:00:d8:81:e1:bb:e1:34:40:b9:b5:64:f6:bb:95:
         59:37:bb:27:e9:64:0d:93:21:04:1f:ff:c1:da:e4:44:92:59:
         d1:84:e4:29:c1:74:01:bc:e0:21:aa:e4:c1:66:d2:e5:39:e7:
         e7:61:f3:3f:cd:9c:3c:83:ea:a8:9d:fc:e9:4d:71:d9:f8:b0:
         13:4b:f8:4a:53:f8:f4:12:0a:69:ba:79:1c:a6:90:64:3f:13:
         62:f0:58:42:d9:ec:93:6c:5e:f6:55:72:db:83:cc:48:02:57:
         10:29:a0:6a:9d:64:f9:17:26:3a:28:10:d9:74:02:7a:2f:cb:
         c0:d5:2b:97:96:64:b1:a9:65:eb:48:3c:bd:f8:63:a3:9b:5a:
         44:ac:19:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZUwZF5v8XJILuGoRXb/YbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDE3MWY5M2NjMWNhNzE2ZmM4MDZlMzZhNTU4NTJjZGY0
ZjFjMWMwHhcNMjQxMTIzMTQwMDMzWhcNMjQxMTI0MTQwMDMzWjAzMTEwLwYDVQQD
Eyg0ZDFmYWJiNjI4YjlkNTk2ZWQ3MmE3NDI5ZWMxMWE1NTU4Zjc4NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeTO4pMNGXMBm2IE7xu3z7u/Wckb
AQjZqanqFdx1cCc/u6sE4uqUviT/w0kc5yrZhxEVRNkSaUN2EchUlQIv6O/FVDtZ
bDxiIEWtHFadLycu/OdYFloWR+38MFnDRaaZ/IqcgFiIv9Jcn09P7GWzF33Hl99g
JroQj1VRdvMDdNOW67XnZfRubvui/6AARA/RN/nWiUgUwA3I7rXUqImWbysle1R4
QG6urM4zVItkVmIhrmvlL4SM9kg3VMC4LFqkl8QEhIaw30/mHxL60987i9IZJkaX
4dNcz2wHW968BzxT16UspwvxoBSriDdH7zA3XlemtXg9YYuRC8sUH5rXWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0fq7YoudWW7XKnQp7BGlVY94ThMB8GA1UdIwQY
MBaAFGTRcfk8wcpxb8gG42pVhSzfTxwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAt
YTQ2MzVkZjQ3ZDcwLzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAtYTQ2MzVkZjQ3ZDcw
LzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNgapXo0
JGWkBbODL8sf33zh4UaF3I74rO0wbSvnEu9bAUuqxvCxVrIdTAUoqzdTMIjMStj4
7Kgk4QAehJ90t5Msx77RnPjJpyDmE+dAfq62i+vYhqQB5GOSluUkUdETNr6Qg/pR
36tFA3ijzFki4QDYgeG74TRAubVk9ruVWTe7J+lkDZMhBB//wdrkRJJZ0YTkKcF0
AbzgIarkwWbS5Tnn52HzP82cPIPqqJ386U1x2fiwE0v4SlP49BIKabp5HKaQZD8T
YvBYQtnsk2xe9lVy24PMSAJXECmgap1k+RcmOigQ2XQCei/LwNUrl5Zksall60g8
vfhjo5taRKwZ5w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:14:04 2024 by rpki-client on console-ams.rpki-client.org