Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft
File:                     Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft (raw, json)
Hash identifier:          ricgZW6XiCqcIXkTNuTbqdHniRNBEw2ZhRwjOJg62t0=
Subject key identifier:   E1:7E:FF:17:35:DE:B3:DC:B1:3E:3F:9F:0A:60:AE:5E:50:90:51:E3
Authority key identifier: 66:1C:B5:D3:F8:FC:87:C1:6B:2D:F9:27:D7:C3:96:62:6F:12:45:54
Certificate issuer:       /CN=661cb5d3f8fc87c16b2df927d7c396626f124554
Certificate serial:       0190964BE2972DDF30821A974B528956E0EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zhy10_j8h8FrLfkn18OWYm8SRVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft
Manifest number:          016A
Signing time:             Tue 09 Jul 2024 07:01:13 +0000
Manifest this update:     Tue 09 Jul 2024 07:01:13 +0000
Manifest next update:     Wed 10 Jul 2024 07:01:13 +0000
Files and hashes:         1: A3_1DFxWhISGR3qRrk0cqzQ_oJU.roa (hash: BBytHZLgmBi1+Gs7BC3AjtpIs+dsTxilXDE0/DUcWSY=)
                          2: Zhy10_j8h8FrLfkn18OWYm8SRVQ.crl (hash: 6Du7t/jY/h6D2xQKPLNtnutndEC12nn0fOrSrJDNsQs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zhy10_j8h8FrLfkn18OWYm8SRVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:96:4b:e2:97:2d:df:30:82:1a:97:4b:52:89:56:e0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661cb5d3f8fc87c16b2df927d7c396626f124554
        Validity
            Not Before: Jul  9 07:01:13 2024 GMT
            Not After : Jul 10 07:01:13 2024 GMT
        Subject: CN=e17eff1735deb3dcb13e3f9f0a60ae5e509051e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0c:b9:2c:4c:e0:2a:73:9c:aa:ed:41:35:1e:
                    2b:ce:90:2e:71:c6:ca:ca:13:df:28:f9:5d:0f:f0:
                    8c:18:18:67:38:64:1c:c0:5e:ab:51:d2:2b:62:a9:
                    75:c2:db:12:61:9f:04:66:f8:ea:49:06:60:d7:e4:
                    25:08:ce:da:85:be:22:48:56:11:d6:6e:ad:9a:49:
                    f4:74:92:05:22:af:9d:a0:0a:fa:34:cf:2c:5e:a2:
                    a2:1b:ac:80:7f:d5:8b:d0:38:b9:6a:95:29:c6:26:
                    82:84:a1:93:ac:cb:ec:68:2c:08:25:3f:ae:41:95:
                    ef:f7:95:67:bf:2e:bf:2f:9a:0b:a8:4d:b7:0e:d7:
                    06:3f:45:96:25:61:45:fc:dd:9c:f3:fc:70:ba:ee:
                    e7:2c:5a:b9:79:a2:a3:50:b8:d1:01:03:20:54:df:
                    fd:25:b4:05:b1:75:3a:1f:82:df:3f:83:06:e0:31:
                    1b:62:0d:8e:f8:4c:86:5a:c7:97:06:28:31:de:10:
                    bf:f5:1f:2f:a6:a3:f9:86:11:9f:c3:4e:c7:b0:3e:
                    cf:ba:2c:cc:16:9e:3b:6c:30:b4:75:4d:57:88:83:
                    1c:cb:bf:97:6b:93:e2:67:18:82:85:a4:92:69:20:
                    e2:25:08:17:9e:f1:3b:34:e1:95:d6:52:cd:19:4a:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:FF:17:35:DE:B3:DC:B1:3E:3F:9F:0A:60:AE:5E:50:90:51:E3
            X509v3 Authority Key Identifier:
                keyid:66:1C:B5:D3:F8:FC:87:C1:6B:2D:F9:27:D7:C3:96:62:6F:12:45:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhy10_j8h8FrLfkn18OWYm8SRVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:27:4f:2b:1d:8b:f0:9f:c3:89:29:2c:38:7c:4d:4e:46:d7:
         10:e2:24:c6:06:f0:ac:1b:e5:61:8f:50:e9:55:bd:81:83:5c:
         de:7f:c2:e6:a5:8a:69:a1:58:3b:09:e2:d0:aa:b2:6a:75:9d:
         19:9c:bd:8f:5f:01:03:7f:c7:57:fd:80:57:74:44:fe:20:61:
         df:a7:89:bd:60:78:fe:5d:55:9d:4a:21:0a:35:1b:0d:ac:4f:
         6c:be:e2:08:a6:33:a1:85:71:11:37:16:0e:a5:eb:4a:c2:47:
         06:d4:ba:67:03:52:8e:2d:6d:ae:14:cd:cd:3a:30:1b:b4:d9:
         11:db:a0:65:ff:a1:a4:4a:fd:f2:d9:4b:46:ed:2a:e8:30:6e:
         b3:10:eb:4a:55:62:be:9f:5b:47:d3:ab:ee:c5:eb:da:5f:52:
         e1:4e:96:fd:54:4b:21:c0:6e:92:cf:d6:d9:fb:7b:fa:93:7d:
         3c:f6:79:e8:94:c7:39:29:8a:48:b8:d8:2c:62:8a:64:53:7d:
         2e:33:7c:b8:7a:bc:2a:75:8b:a0:1f:a4:83:be:3f:f2:b7:f5:
         50:c6:03:4f:b3:6d:6f:ff:db:df:81:f5:66:c5:6d:3a:ff:d7:
         05:18:db:9f:69:70:4d:32:51:c8:4c:93:cb:d3:bd:ca:8b:14:
         1b:ee:8d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:33:09 2024 by rpki-client on console.sobornost.net