Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
File:                     K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json)
Hash identifier:          4zWEyPqfFCFIR9XRjE+iD4k2UTpJMrU1whAMIQmUPSQ=
Subject key identifier:   ED:53:1D:9B:25:DC:B9:5B:19:1B:EB:FD:8C:44:DA:07:19:BC:19:BB
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Certificate issuer:       /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial:       01969D199535E743E06FAB37F13DD9F6F268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
Manifest number:          0E09
Signing time:             Sun 04 May 2025 21:00:21 +0000
Manifest this update:     Sun 04 May 2025 21:00:21 +0000
Manifest next update:     Mon 05 May 2025 21:00:21 +0000
Files and hashes:         1: JMuA_SE4InzW1qKeTVpx_3oL0q8.roa (hash: R6FzokXTO51RahiuJEIKsH+gffyhCqg/DyumMrYKwlc=)
                          2: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: RvoPw1WmrsG6p38pLPKajZTwx7lQz3E6NpVq6CPy1vY=)
                          3: mIULbw_VsYjjAm8nAGiad1FVRCA.roa (hash: RZC9YnUkAnJgl+1L4ykyICx092CEcPZwqJ0fdIhJKfk=)
                          4: tV4zflXI9fSIgwxFKkPQRhAyRyk.roa (hash: Z1f74NH3kzNP7yaoZvmLnAHN/rFjIJBtqJkrZ6Pd0is=)
                          5: xsMX4xnBtAkWlhocItT5wdfVH3k.roa (hash: z7ATRuzsizy0J/zWBm/YAirUNrjy9iWYQrOG/F0bSwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:19:95:35:e7:43:e0:6f:ab:37:f1:3d:d9:f6:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Validity
            Not Before: May  4 21:00:21 2025 GMT
            Not After : May  5 21:00:21 2025 GMT
        Subject: CN=ed531d9b25dcb95b191bebfd8c44da0719bc19bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:b9:f9:19:96:23:14:d8:de:ee:85:1f:b1:
                    9c:29:95:a8:d6:65:bc:2d:38:eb:12:6a:4b:77:da:
                    92:bf:34:32:55:be:8b:bb:d1:87:89:99:99:16:09:
                    0a:f8:c7:c3:22:5f:43:52:21:0f:78:bc:86:70:52:
                    ff:79:dc:bc:0e:a2:ca:42:85:a7:5f:56:31:4f:bd:
                    f2:bf:0c:01:5a:90:d5:21:4d:95:f4:aa:fc:c9:56:
                    36:5d:b1:80:32:2a:bb:4b:c8:ba:ae:ef:9c:ee:89:
                    5b:de:aa:76:a6:df:94:b2:76:eb:93:27:84:08:de:
                    13:6e:8e:27:cf:4c:b4:aa:4e:50:f9:a8:b6:79:b6:
                    eb:d1:76:00:c0:e4:f9:46:37:4d:a4:4e:89:65:0e:
                    3f:83:01:b1:a4:2b:b2:2e:10:ea:8b:02:05:42:c7:
                    37:7a:40:06:d1:6c:bd:c1:11:92:26:8d:0a:41:ea:
                    d7:d7:1f:01:57:92:69:5e:b2:9e:0a:d7:14:ff:c0:
                    d3:94:bb:d8:d7:27:e4:e1:f9:9d:07:f9:8c:35:53:
                    93:1a:bc:e3:8e:4b:a9:ab:57:7c:ba:59:b9:53:84:
                    94:34:08:1d:ea:39:ab:2f:6d:05:9f:5a:25:40:eb:
                    3c:74:ac:03:78:51:1f:95:0b:07:df:92:4b:69:f9:
                    3a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:1D:9B:25:DC:B9:5B:19:1B:EB:FD:8C:44:DA:07:19:BC:19:BB
            X509v3 Authority Key Identifier:
                keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:16:15:24:f9:c6:4c:59:0a:56:84:37:19:9c:15:58:95:5b:
         34:79:a6:6f:8a:da:dd:c2:02:20:40:6c:39:b1:8a:18:67:46:
         77:15:4a:86:4c:28:57:63:53:c7:66:41:29:39:a5:b0:2c:88:
         bb:8e:31:4d:c4:a5:83:76:7f:94:af:1f:f9:f7:d5:54:2b:88:
         f8:46:8b:fa:80:4d:16:7c:ea:56:04:31:a3:95:ed:ae:c3:0f:
         ed:b0:fa:6c:02:ba:59:15:da:cc:b9:69:bb:9a:0a:76:b4:8d:
         af:83:4a:74:d4:75:d8:14:8e:94:7d:de:ab:c0:da:10:35:21:
         19:3c:cc:f5:cb:d7:61:dc:9a:af:8b:3a:8f:94:0f:73:31:5e:
         c3:66:db:13:e3:16:21:d6:a5:97:57:63:7e:e2:2c:a9:0d:91:
         44:03:91:90:50:8a:54:67:fc:81:27:f4:43:43:7e:97:a7:35:
         0d:b4:ba:cb:8e:fc:78:2b:bf:e9:f2:4d:4d:a1:72:7a:23:f0:
         85:51:6e:3d:91:a3:66:70:0a:6e:9c:1e:c0:d9:bb:ef:26:c1:
         c3:ff:2c:90:a6:c5:31:26:a0:fa:4f:b4:cf:df:6f:6f:0c:25:
         6a:46:35:4f:3b:fd:af:76:9e:e4:6a:b8:2c:b7:be:8a:cd:2c:
         bb:3c:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:41:40 2025 by rpki-client