Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File:                     ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier:          LGfBNXY1mMOHlxtib3SnjwDp2C2/dMvR0STAhFy8lPo=
Subject key identifier:   FC:69:B5:2B:EC:9A:69:9D:33:0E:2D:85:65:87:36:7C:9A:B6:45:E9
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer:       /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial:       019369D8B7E07902414DF21EFD2DA4CCA6B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number:          0AFD
Signing time:             Tue 26 Nov 2024 19:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:30 +0000
Files and hashes:         1: GMcM3n-cpPNm_F2vDoGjmenwwuc.roa (hash: WZFQcOUUGFlFtXiDC/RdZF33URbIrpbhnj9X0K99hD8=)
                          2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: Qq4zLX7SF19FXpzwX2N4Zl75SnjuVeGk68EVq//QnH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:b7:e0:79:02:41:4d:f2:1e:fd:2d:a4:cc:a6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
        Validity
            Not Before: Nov 26 19:00:30 2024 GMT
            Not After : Nov 27 19:00:30 2024 GMT
        Subject: CN=fc69b52bec9a699d330e2d856587367c9ab645e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:81:ca:6e:4c:1b:e4:f7:0d:58:04:bd:2e:
                    2b:a5:14:d5:26:fe:09:15:db:ef:e9:3f:83:fd:54:
                    6f:83:85:b7:8f:11:0c:dd:88:bb:e9:19:1a:83:35:
                    83:d5:fa:5e:c2:b0:42:30:cb:55:63:67:6d:f2:7b:
                    f3:ed:91:51:9b:08:ec:01:6a:1a:d1:22:18:c5:f0:
                    0f:8a:7b:3e:85:ed:ab:1c:e6:03:18:5b:6e:8e:f6:
                    03:db:d4:a6:d5:a3:4e:17:02:28:a5:95:cb:9c:1d:
                    8c:19:20:1b:60:11:10:85:7a:61:09:98:7d:ea:54:
                    0e:c7:af:55:2b:b1:e5:0d:d7:38:8d:4e:89:10:58:
                    f1:52:35:40:35:53:91:e4:94:a7:6b:a8:17:03:5c:
                    1d:d9:d7:36:47:ff:38:b7:21:6f:c3:59:c4:3a:ac:
                    84:93:73:dd:f5:7f:fb:86:30:be:b9:cc:05:54:52:
                    30:cf:1c:1c:ee:8b:8b:0e:b0:39:ef:53:9f:6a:03:
                    5a:b9:89:88:17:29:55:eb:9a:3a:d7:c5:97:4e:e6:
                    f4:49:1a:1d:4b:7d:60:2d:0d:0c:8a:37:b9:bd:17:
                    0f:0c:34:80:0e:8d:37:09:68:13:a0:81:4e:28:b9:
                    b8:b7:06:42:41:27:61:3a:db:19:92:8e:dd:f6:e7:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:B5:2B:EC:9A:69:9D:33:0E:2D:85:65:87:36:7C:9A:B6:45:E9
            X509v3 Authority Key Identifier:
                keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e3:52:8d:02:30:ac:2c:77:77:ed:23:24:ef:76:30:ae:f7:
         d2:4d:39:1a:1e:e1:b8:de:ad:f0:f3:42:a7:a8:84:9e:4b:fa:
         5b:90:f1:ff:6e:98:9d:13:f1:1a:16:5d:55:0c:6c:75:be:33:
         b6:78:28:f0:cf:c8:f2:c9:0e:b1:41:b4:12:76:81:4a:03:8e:
         2a:aa:49:6a:6e:c6:2a:65:45:8b:41:70:69:04:d1:2a:28:f6:
         34:82:26:be:a2:33:36:9c:f5:66:a9:8c:e7:06:9e:95:6e:e2:
         46:9d:05:25:14:2d:57:3b:b5:17:4f:34:02:b7:db:8b:9d:3c:
         55:9b:18:92:fe:a7:72:bf:cd:78:42:98:72:24:6e:eb:0e:99:
         41:75:dc:af:66:a8:99:43:98:26:ef:6c:1b:3f:89:99:51:dc:
         61:a3:2c:b8:37:c5:be:fa:00:5c:c5:98:6c:ec:cb:89:59:78:
         17:86:a7:fb:35:a0:05:d8:56:35:35:1a:7b:88:81:90:7f:f9:
         24:85:25:7b:4d:d7:4a:38:3d:6b:e1:32:05:a0:9c:d6:18:91:
         6d:45:3c:bd:8b:21:a8:78:d6:ad:0d:f7:c8:72:80:32:1c:eb:
         44:0c:9c:b6:8c:90:7e:1a:01:1c:a0:0f:00:42:fa:c7:b1:5a:
         3c:26:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:28 2024 by rpki-client on console-ams.rpki-client.org