Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
File:                     ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json)
Hash identifier:          xVLKa3HZguzaJyq1ow79G40xqtuQS9GuKg+XFhaaNMY=
Subject key identifier:   DD:AF:55:DC:47:C2:1F:63:0F:17:82:E2:07:6C:8D:24:0A:34:E6:94
Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Certificate issuer:       /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Certificate serial:       0194BB297B036B2F4ABABE9209AE3A2B165B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
Manifest number:          0355
Signing time:             Fri 31 Jan 2025 07:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:45 +0000
Files and hashes:         1: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: UOMQ/eEIVOolHmAOHWCtQbHuPTpG31M4lce8PU3DuR0=)
                          2: qoEqQd-KonLGkAm_wguz4NaqHfs.roa (hash: E6NKTVGy2K4uHsRTO20RHuS+xHYcScb4tSIex+a8NyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:7b:03:6b:2f:4a:ba:be:92:09:ae:3a:2b:16:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
        Validity
            Not Before: Jan 31 07:00:45 2025 GMT
            Not After : Feb  1 07:00:45 2025 GMT
        Subject: CN=ddaf55dc47c21f630f1782e2076c8d240a34e694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:30:39:2e:e9:9e:ca:e0:e7:06:d2:37:0e:
                    1c:2f:dc:6d:81:31:ac:fd:52:fc:18:8a:f1:1d:77:
                    9a:db:86:02:e3:a8:86:cf:a9:b9:d1:94:89:d1:ca:
                    84:62:c7:54:7c:f6:bd:1a:69:5b:05:ca:68:dc:cc:
                    99:fa:6f:7b:78:8d:f5:10:10:96:0d:57:f9:0e:71:
                    4d:e9:84:59:79:a3:23:3f:1c:fd:ea:8b:00:4e:4b:
                    1d:55:9a:15:d0:3d:75:d1:1d:65:4a:e8:5d:ff:1a:
                    6b:8c:6b:94:a2:fa:a4:da:27:5f:bb:0d:41:30:46:
                    57:65:91:96:94:fc:1a:90:00:98:02:ee:d3:d9:91:
                    5e:61:59:33:19:42:64:29:48:2a:7d:05:c6:26:6c:
                    65:21:a5:74:e4:25:44:b1:95:d4:10:45:79:34:ee:
                    c4:dc:57:4b:19:e7:d4:79:25:ad:5e:2c:17:d1:6f:
                    38:e9:a3:73:19:e6:4c:b9:e2:80:26:6a:c2:8f:c7:
                    23:6f:dc:a4:8c:5a:ef:5c:7e:6b:b0:c0:b0:c3:f1:
                    9a:71:9c:d1:c1:d2:97:7c:f6:c9:94:95:4b:8b:45:
                    68:62:dc:b6:d5:c6:c6:c3:a5:33:69:a9:c4:f9:38:
                    73:3f:73:a7:1f:6a:c8:0d:2f:15:3f:17:48:aa:4d:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AF:55:DC:47:C2:1F:63:0F:17:82:E2:07:6C:8D:24:0A:34:E6:94
            X509v3 Authority Key Identifier:
                keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:bc:3f:5b:3a:d1:90:30:36:5f:d7:20:00:f2:01:e5:d2:9b:
         d1:21:a9:ea:95:4d:02:b4:2e:3c:5f:bd:ec:fe:b5:13:f4:11:
         bc:1e:94:ce:3c:0a:0e:75:8e:e0:d3:40:bb:cf:7b:6b:e9:5b:
         13:7a:cc:45:50:80:87:57:42:3f:d0:0f:95:38:5d:ca:33:6b:
         75:02:12:9b:f1:19:f2:e4:91:53:4e:54:d8:e0:13:cd:f8:b9:
         42:5a:56:f0:e7:4b:48:45:54:42:27:e4:28:3e:46:28:e0:86:
         7b:fb:83:ae:c4:44:3e:4d:8a:f1:db:42:91:b0:d2:07:93:c3:
         bd:92:4c:a6:cf:2c:14:74:d1:27:55:72:86:c4:cf:a4:5b:0f:
         8d:fa:95:d8:2e:ea:67:08:00:f9:b2:2d:9a:dd:da:28:0b:04:
         84:f3:c8:44:e4:e2:74:5f:9e:de:a5:63:ce:8e:ad:d1:d1:a3:
         5a:e9:68:01:a2:87:98:e6:84:9d:be:d8:70:3b:1d:51:c6:d7:
         83:f2:bf:3f:fd:5f:5b:fa:4a:11:5c:89:00:0b:78:4e:91:a1:
         7f:ea:14:0a:3e:e2:18:f6:05:b0:00:64:99:26:72:96:2d:cc:
         fc:41:33:53:18:41:7d:0c:64:20:82:d7:93:e2:e5:b4:df:f3:
         3b:c9:ef:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:21 2025 by rpki-client on console-fra.rpki-client.org