Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.mft
File:                     ZYXp3VrJv25gAFvDzOValUwxmM8.mft (raw, json)
Hash identifier:          G9J1jrAO8tUAd375UWAdw5P3xn3Jss0qp07uuYtinYw=
Subject key identifier:   7F:C3:DB:4A:41:1D:D0:D7:AD:8C:4B:B1:5F:B7:4A:E1:47:AD:55:BC
Authority key identifier: 65:85:E9:DD:5A:C9:BF:6E:60:00:5B:C3:CC:E5:5A:95:4C:31:98:CF
Certificate issuer:       /CN=6585e9dd5ac9bf6e60005bc3cce55a954c3198cf
Certificate serial:       01936AEB86909AE5DFC6B60417C821D64980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYXp3VrJv25gAFvDzOValUwxmM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.mft
Manifest number:          100E
Signing time:             Wed 27 Nov 2024 00:00:40 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:40 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:40 +0000
Files and hashes:         1: ZYXp3VrJv25gAFvDzOValUwxmM8.crl (hash: WP0Lr+tEB6PrGbPTXUturXbxX1vXWS/ebnQJzqWlVYM=)
                          2: wfiBXvp0psiDXmZIUYF-LmCbN-U.roa (hash: hTXhUqVSmE2iU5Qqawr8uuzYR/K4Ypidz476nXsKYMo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYXp3VrJv25gAFvDzOValUwxmM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:86:90:9a:e5:df:c6:b6:04:17:c8:21:d6:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6585e9dd5ac9bf6e60005bc3cce55a954c3198cf
        Validity
            Not Before: Nov 27 00:00:40 2024 GMT
            Not After : Nov 28 00:00:40 2024 GMT
        Subject: CN=7fc3db4a411dd0d7ad8c4bb15fb74ae147ad55bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:d1:d6:d1:41:fa:3c:14:72:96:fa:d2:e1:
                    32:a7:24:0e:98:1a:39:f8:a4:ba:96:78:0b:c1:b8:
                    39:45:3e:00:c1:c3:0c:bc:ce:0d:b1:1e:4e:c5:42:
                    06:a5:fc:c3:c9:90:ba:94:fc:32:d5:37:08:ca:43:
                    ca:7b:2b:ee:d4:de:67:4c:76:f3:4f:30:d8:5b:2a:
                    63:d2:a3:e3:c1:98:9a:26:2e:c5:b0:13:17:3d:41:
                    b2:69:fc:6e:bb:3d:78:e3:ca:78:26:e2:c1:c6:63:
                    e3:fb:64:ff:32:0b:40:e5:6d:35:f1:d8:15:73:59:
                    a9:80:79:9b:80:ef:7c:ce:6d:fa:75:af:45:9d:b0:
                    e8:ce:07:51:8a:df:ea:c9:98:33:6d:ba:6f:83:b2:
                    e7:aa:90:49:c9:cf:3c:ca:88:0e:75:fa:e7:19:17:
                    74:f2:b5:d7:b4:3c:d4:05:63:6c:39:59:06:3a:1a:
                    fd:63:92:75:a8:30:98:25:7d:a2:61:dc:90:97:6e:
                    21:8e:b3:42:e5:9c:f7:6c:9a:e5:bc:b6:6d:4f:91:
                    2f:f3:8a:88:98:9b:f5:ca:f7:fe:1b:2c:63:f2:91:
                    19:11:ed:a0:2a:76:b0:db:d7:10:68:ac:29:44:67:
                    22:7e:10:26:07:f5:43:ef:cd:29:70:ba:a2:b0:2d:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C3:DB:4A:41:1D:D0:D7:AD:8C:4B:B1:5F:B7:4A:E1:47:AD:55:BC
            X509v3 Authority Key Identifier:
                keyid:65:85:E9:DD:5A:C9:BF:6E:60:00:5B:C3:CC:E5:5A:95:4C:31:98:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYXp3VrJv25gAFvDzOValUwxmM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b7ee0-130c-4fab-bf9d-8ba36c16c08d/1/ZYXp3VrJv25gAFvDzOValUwxmM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:c1:4c:95:5d:8e:63:73:bd:cb:53:8d:65:a3:36:89:9d:
         5e:6b:8c:7c:fb:d4:64:d2:cf:ec:3a:03:35:e3:eb:56:33:08:
         7e:46:9e:dd:43:e2:29:b4:c4:2b:20:3e:4d:49:93:31:7e:85:
         9c:61:47:32:17:e5:a5:dc:e3:77:ea:71:e6:88:30:0c:93:77:
         48:75:f4:f5:e1:b6:3d:98:57:18:83:a3:1e:70:3a:09:67:fc:
         1c:17:86:7e:d0:c1:39:12:85:2d:72:05:d0:4c:ab:00:92:63:
         de:b7:56:b4:41:2b:dd:cd:c8:b7:10:1a:26:4a:d9:5a:2a:9d:
         8c:e2:00:ca:a5:d5:68:b8:70:a1:e5:c6:4a:93:77:dd:c6:2c:
         8c:81:35:4d:a5:ca:c8:06:c1:fe:fd:cf:c5:2e:91:59:74:68:
         f7:91:2d:e8:83:c4:4b:16:49:49:eb:01:fa:53:a2:51:3d:c7:
         52:79:43:78:c7:a3:4e:54:77:e4:19:09:1b:73:24:94:0e:05:
         52:3f:3b:65:d0:7e:88:88:17:f1:cc:e7:f5:1e:df:96:8b:18:
         41:13:a2:16:d9:c4:fa:83:4e:35:19:29:46:fc:f6:63:65:fd:
         ec:7e:46:74:6c:79:d2:a2:be:5f:68:14:48:41:85:35:99:2a:
         83:da:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:47 2024 by rpki-client on console-ams.rpki-client.org