Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File:                     zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier:          e2NO4Gpik1G8Q/k2VPGue1s9HnR5jzqYHuJOS8u1aK4=
Subject key identifier:   1F:31:57:EA:2A:28:CA:67:93:B6:8C:82:00:49:1A:18:45:3F:49:FD
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer:       /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial:       01936A7DB85DFF397D893F982BC6B4BD7379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number:          0206
Signing time:             Tue 26 Nov 2024 22:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:44 +0000
Files and hashes:         1: F7U0RRg86BShkmN5DX44KM_m278.roa (hash: f/2jCJ/We9eb6a5R7g0hxlr/4dUn8y+vyG1yYrh5m+k=)
                          2: PQlHxZe79E5Y2mpraXQEQok5W04.roa (hash: RFdWK0CWr03s2JmcD1iFsBp0pa1cAOc4uEguNxvDWS0=)
                          3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: dPcTc8DCd1LXFP+ahzdqDCOm/kElZr6CUUVsP31ysvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:b8:5d:ff:39:7d:89:3f:98:2b:c6:b4:bd:73:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
        Validity
            Not Before: Nov 26 22:00:44 2024 GMT
            Not After : Nov 27 22:00:44 2024 GMT
        Subject: CN=1f3157ea2a28ca6793b68c8200491a18453f49fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:85:9f:fe:1f:d3:0b:86:09:ef:97:49:aa:
                    39:f9:a0:e1:6f:f9:bd:df:10:7a:a3:96:6a:23:04:
                    cc:ec:52:3a:4d:f6:29:ab:30:bb:0a:c9:f8:31:87:
                    a7:65:80:25:23:9f:9f:e5:c4:b7:11:38:39:91:2d:
                    f5:df:c9:4e:37:33:e6:79:56:9e:ba:04:1c:83:3f:
                    ea:db:08:e3:70:64:c8:04:fd:0f:28:08:60:37:f6:
                    e9:6e:13:40:82:2d:1e:50:43:44:df:f4:ee:d6:12:
                    2e:a8:e7:85:31:ae:b7:a1:8f:09:81:f2:a0:a7:56:
                    02:65:27:a4:e5:43:e1:f4:21:82:11:32:a5:1e:60:
                    bd:46:8a:09:d1:57:ad:55:fd:4e:ce:05:d4:a5:a6:
                    83:4c:38:b6:f3:99:27:80:02:17:48:ad:b3:95:72:
                    61:7d:6b:b9:d6:44:98:4d:2d:67:be:0a:db:94:e3:
                    ea:a3:66:53:23:cc:92:91:47:4c:59:40:c4:a3:bc:
                    25:17:9c:4e:b9:a6:c4:35:45:47:ac:b4:40:76:30:
                    4f:88:fb:73:fe:18:bb:47:3a:c7:3f:7c:76:dd:35:
                    53:04:8a:e2:85:11:c0:be:e9:3e:db:32:85:e9:a7:
                    c3:76:17:1b:d7:ce:0b:a9:65:2a:54:2d:65:95:45:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:31:57:EA:2A:28:CA:67:93:B6:8C:82:00:49:1A:18:45:3F:49:FD
            X509v3 Authority Key Identifier:
                keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2c:8d:fe:9c:12:8c:0b:f1:08:c0:00:fb:33:96:cc:a2:e5:
         e8:b7:7a:c7:4b:36:48:c3:76:cc:37:18:f5:a3:90:f0:a5:fc:
         eb:04:4d:b7:77:c8:00:96:a9:65:0a:60:b2:1c:92:54:1a:d4:
         de:cd:3d:f0:ba:ce:44:77:13:be:26:a7:72:ea:ed:a7:dc:30:
         e7:99:0a:4d:bc:67:26:87:3b:0e:86:1c:17:e0:e4:61:90:0f:
         99:e3:60:2e:20:f5:1f:91:f7:e8:a9:d0:8e:2a:f4:9b:25:61:
         21:2c:65:67:45:f6:2c:f0:a1:da:7a:ff:c7:a3:56:d0:9f:89:
         0d:8e:77:94:d3:56:ab:7b:55:d9:28:ca:f7:00:69:b8:9a:95:
         63:26:75:22:f7:e9:40:d7:5e:61:50:44:ed:df:f4:d3:6a:fc:
         97:f8:1a:84:0c:73:03:85:7d:7a:57:27:87:e0:f4:84:fb:42:
         7e:3c:6f:58:39:1e:31:81:d5:e4:a8:35:c5:36:f3:e6:4e:50:
         23:f9:07:a9:23:69:38:b8:4a:48:f4:88:10:ec:4c:12:81:4c:
         4b:64:f6:bc:1f:87:2c:be:0c:43:90:f1:4f:f5:f3:0e:4e:93:
         b7:07:c9:c6:d5:9d:15:94:80:90:96:58:eb:2f:d4:78:d7:1e:
         3a:db:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:56 2024 by rpki-client on console-ams.rpki-client.org