Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File:                     ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier:          9s/b35bFBmdlhsAVIqz/g+iIznt5Mb9KwCxxCBwMamk=
Subject key identifier:   8B:FC:18:F0:3C:E7:18:EE:D6:89:16:BF:08:E3:63:D2:94:A2:34:13
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       018F874900F84FE77E292A4B433BA88D1F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number:          1181
Signing time:             Fri 17 May 2024 16:00:59 +0000
Manifest this update:     Fri 17 May 2024 16:00:59 +0000
Manifest next update:     Sat 18 May 2024 16:00:59 +0000
Files and hashes:         1: 1-ChiW6WQnSVSx-O8IRJLvR83OQ8.roa (hash: tGwCTCPEgmVKM32PIOR6zu7nBOc3XGE95r2FUT8gVgM=)
                          2: H59b5Oo8ObpV-FWMdiBdaxh75w8.roa (hash: HnBpVO/+rwm+y+C6RmLuibg0PfAiPxGRaso4rDbgVSY=)
                          3: I3Alz1CVYv9QO1gkideCRzt1CwU.roa (hash: UvawyMeC1XZZM4UXCiiJtsBUNo/ZCTUekJR4A7PiKt8=)
                          4: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: 88kCUpaSXhhDcLCFc3c2WZjnTzVr6NQMSupbeLMFvV4=)
                          5: mtsj5w967FgASFhBr37majyOabY.roa (hash: aZ1emg2lijQXM8mxftgmJZCLQ6aByMtWMkR2Tft42n4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:00:f8:4f:e7:7e:29:2a:4b:43:3b:a8:8d:1f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: May 17 16:00:59 2024 GMT
            Not After : May 18 16:00:59 2024 GMT
        Subject: CN=8bfc18f03ce718eed68916bf08e363d294a23413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d3:fc:93:d3:e7:41:5a:cf:f0:f0:23:a4:84:
                    96:22:b4:09:25:2d:1d:16:06:ff:80:92:9e:2e:a0:
                    3a:95:c4:99:8d:42:41:1a:ca:75:49:da:ba:62:2a:
                    e5:34:0e:ae:40:42:c4:85:9a:57:d5:0a:d0:5e:5b:
                    24:bd:f6:d0:9a:0c:7d:cb:77:e9:ee:da:e3:d8:c1:
                    d4:e1:d3:d7:7e:3f:aa:d0:73:e8:ff:87:4c:75:87:
                    cc:0a:e9:32:09:eb:f7:32:c0:a7:cc:a4:08:98:0b:
                    a8:a0:54:16:63:e4:eb:9b:44:5c:a1:d7:5d:b3:37:
                    05:11:71:21:7d:fe:97:74:b0:6a:45:17:a5:de:94:
                    21:03:be:c7:ee:db:d6:6e:b0:15:01:db:45:b4:e7:
                    9f:22:47:0b:b5:5b:14:44:cd:73:da:f8:e1:6b:4e:
                    59:7d:c7:cc:3b:00:b1:6e:e8:82:80:88:c3:c7:2f:
                    1f:30:a0:a0:d8:56:ab:e7:9b:e3:19:48:a0:cb:9e:
                    82:f9:21:ea:bd:0a:14:31:f9:ad:18:c8:12:9f:73:
                    42:9d:86:e4:b3:00:7f:33:52:99:7a:0c:32:51:cb:
                    80:44:9f:89:00:06:1b:47:f0:00:b4:f5:c2:93:fb:
                    5f:5d:fe:05:43:5c:5a:57:19:1d:55:8c:09:13:51:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FC:18:F0:3C:E7:18:EE:D6:89:16:BF:08:E3:63:D2:94:A2:34:13
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5c:a9:04:0a:c3:09:c4:e1:24:9f:b4:92:84:fe:37:03:ea:
         87:99:f7:73:80:11:5b:cb:fb:14:3d:82:b0:e8:1f:4c:72:45:
         8b:c1:0a:ac:36:87:84:3d:39:de:44:14:51:c6:4d:1a:09:5c:
         64:6f:23:95:9b:9c:8d:bc:56:b1:b4:bd:99:0b:a6:c5:f5:a7:
         f6:b9:76:93:15:e8:df:a9:f5:2c:59:a6:b6:43:7d:2a:46:b7:
         9f:9d:c9:e8:97:e9:01:2c:88:34:78:c6:33:04:0f:cc:63:78:
         99:ac:96:2b:99:42:4f:41:76:5c:b3:1e:cf:cf:0c:64:27:3a:
         9d:44:b2:ff:d8:a2:c8:c3:27:f2:df:cf:39:3e:9c:cc:21:0d:
         92:4b:f8:74:c0:e3:14:9a:c4:ba:d9:4f:d7:01:f4:e8:c8:33:
         2e:cd:00:19:9d:8b:14:e7:82:8a:ad:43:8e:b3:f0:ac:80:79:
         0c:53:eb:fb:e1:32:08:be:c6:9f:d2:82:0c:f8:9c:f8:8b:8b:
         54:3e:ce:27:f3:4f:a4:89:2b:62:c6:3c:68:fc:4d:79:18:ff:
         d3:ed:14:de:70:fe:83:a4:aa:d2:48:28:bb:4b:22:72:7b:d0:
         2f:3f:13:5b:33:46:ac:bc:5e:02:00:e5:f9:69:ce:8e:98:da:
         83:d8:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:42:49 2024 by rpki-client on console-ams.rpki-client.org