Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File:                     ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier:          Wa6Pc9CF0SEBjS8Y9fSkybzo0YAXAdWmStUPbaImec0=
Subject key identifier:   62:DE:C9:D4:F9:FB:00:74:2B:F3:48:55:40:01:7D:80:08:71:AE:1A
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer:       /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial:       01936B2261962496EFEFF3C6872F34458998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number:          0FAD
Signing time:             Wed 27 Nov 2024 01:00:35 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:35 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:35 +0000
Files and hashes:         1: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: XyTrfrnq8+K+zcMkSd3vPVWN7fOL3IVCX3SehnbXQG4=)
                          2: fLG_VRBzMQLTf34BRY3yyNPt-sk.roa (hash: ebFwX4IRV2dyazXg6KxQfH5MIHZ4PDpgNvM1ornAoc4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:61:96:24:96:ef:ef:f3:c6:87:2f:34:45:89:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
        Validity
            Not Before: Nov 27 01:00:35 2024 GMT
            Not After : Nov 28 01:00:35 2024 GMT
        Subject: CN=62dec9d4f9fb00742bf3485540017d800871ae1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:1d:df:bc:42:bd:3c:8f:63:61:a8:04:4e:
                    ae:53:95:2c:5c:3d:90:3a:0d:2b:f0:32:e0:e5:ff:
                    b5:0c:fb:70:9f:2c:d7:88:90:3e:a2:43:6d:21:36:
                    8c:55:ec:ec:80:3e:c9:c4:6a:30:a9:36:87:7c:7f:
                    c9:07:7e:5c:25:af:b3:84:5d:b0:62:fd:8c:df:4e:
                    f7:91:07:e4:fa:c0:78:ec:0e:f0:9f:8c:40:bc:40:
                    d6:bd:19:d9:a2:a7:1a:19:d1:5f:a3:5f:93:69:b3:
                    05:69:ec:7a:0b:1f:8f:a0:90:63:16:05:41:48:1a:
                    a7:aa:92:70:83:12:a6:8d:1d:0d:16:08:0f:10:16:
                    e9:11:80:68:fd:8c:e7:a5:cc:e5:40:2b:1c:25:67:
                    76:f5:fb:38:52:72:18:70:eb:35:73:c6:bb:a7:94:
                    f5:d3:66:b5:bb:ce:50:38:1d:f9:b4:a6:0f:83:d6:
                    ec:e2:55:2b:05:87:dc:f7:4f:89:fd:00:3a:10:a5:
                    5e:4f:6b:35:03:95:2e:c6:bf:56:ea:91:86:ba:fa:
                    af:03:66:97:6f:63:fc:af:7f:71:92:ed:8f:fe:14:
                    65:11:39:da:b1:ed:79:d8:33:2b:07:e4:ed:c2:d6:
                    67:2f:9c:59:2f:a5:a9:8d:ee:93:53:6a:bc:51:34:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DE:C9:D4:F9:FB:00:74:2B:F3:48:55:40:01:7D:80:08:71:AE:1A
            X509v3 Authority Key Identifier:
                keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:28:ea:2d:88:74:21:16:0c:21:08:1c:e4:c5:5a:0e:c5:
         82:33:92:93:7d:38:03:d8:38:12:2f:c7:c7:0c:06:15:95:b0:
         7d:c2:15:be:d6:b6:4c:dd:39:11:a1:6c:a1:c1:22:e5:0b:42:
         6e:5b:a8:e5:ea:0a:d5:47:de:75:46:7d:52:5f:bc:f3:a5:09:
         2a:57:c4:06:c2:1b:c0:f2:48:1e:e0:99:1c:c0:ed:3c:13:b5:
         42:7b:f7:ea:24:5e:7c:04:39:ca:cf:f6:90:ac:6f:5b:9e:f1:
         a9:69:71:dc:8b:80:c9:1d:3b:3e:15:ce:fd:cf:fa:33:26:bf:
         12:28:c1:cf:25:a5:92:95:cd:94:40:06:80:9b:b4:db:29:f5:
         14:3d:b9:ea:8f:23:97:61:97:f6:86:d9:c1:cc:04:80:f4:a0:
         45:9d:03:e0:8e:f1:54:34:5c:7c:42:f8:7a:50:5c:1b:0e:c6:
         5e:82:2f:6a:a1:4e:0c:f8:34:9d:92:bb:ea:9b:47:84:cd:1b:
         77:6a:01:e1:c7:14:e1:70:e2:ea:49:49:ca:a0:91:ff:c1:2f:
         27:cf:19:1c:35:54:f6:1e:3c:ab:4a:c5:be:f4:9a:ca:74:33:
         31:f8:81:db:82:96:df:b6:0a:06:ca:6d:ba:68:ae:98:c3:6d:
         28:17:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:39 2024 by rpki-client on console-fra.rpki-client.org