Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File:                     ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier:          QQ+bnWIRAklBjmidCLDxCc1hDPLPGGbQ3Ob3HatDQqw=
Subject key identifier:   65:AE:CE:DC:5E:C2:BB:0F:5C:3C:29:D9:92:0E:CC:D7:4A:6C:43:3C
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer:       /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial:       01904868B898141AFE266FEE33E803B4465E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number:          0799
Signing time:             Mon 24 Jun 2024 04:02:20 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:20 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:20 +0000
Files and hashes:         1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: 6g0cDCclR46oJqPPnnUaVliKozE+3evgjRibf9hDYHE=)
                          2: p7jNn_Uf-3XwR8Q2Akiivi8ITFU.roa (hash: wrcQQUeqFZxqfyvero2Q0yfEYxFX2rTh3U2AWRfKLcg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:b8:98:14:1a:fe:26:6f:ee:33:e8:03:b4:46:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
        Validity
            Not Before: Jun 24 04:02:20 2024 GMT
            Not After : Jun 25 04:02:20 2024 GMT
        Subject: CN=65aecedc5ec2bb0f5c3c29d9920eccd74a6c433c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6a:07:de:6d:62:a9:63:f9:74:5d:be:a9:6f:
                    90:c3:31:3c:2d:a1:0b:14:57:95:10:3c:21:c7:93:
                    a3:61:a2:17:29:f4:1a:05:6a:f4:12:e9:25:89:9a:
                    f0:be:ca:66:a6:72:71:a9:fe:31:cc:a8:e2:97:ee:
                    91:2e:28:d6:19:4c:a8:69:84:30:fd:e3:e4:e4:34:
                    bc:cc:39:c7:23:7d:9b:f8:f7:4e:e5:ad:02:2b:69:
                    2d:ad:8c:c9:3f:1c:f8:a2:ac:76:76:e4:fb:8e:d3:
                    af:be:3d:86:6b:d9:06:6a:fe:40:a1:44:24:1a:f7:
                    50:a4:45:1e:74:c4:34:db:25:7d:18:92:15:34:7c:
                    cc:1e:d5:ad:15:52:1b:86:37:48:c3:4d:5f:48:3b:
                    48:89:e9:33:cd:db:0f:d5:8e:9e:7b:f1:fa:aa:23:
                    e4:01:7f:7d:56:a2:7c:2c:1f:16:eb:46:91:c1:e9:
                    3f:e0:09:da:8b:10:f4:26:51:5a:82:80:48:3d:21:
                    87:81:61:20:77:97:50:36:a5:b9:ad:e7:6b:5e:5c:
                    9e:e2:06:ef:02:98:36:18:80:d6:a8:b3:7a:7a:9e:
                    c1:85:7c:f9:50:43:c6:a7:b2:6c:47:e6:b3:10:39:
                    71:60:10:eb:d8:a6:dc:4a:f3:5e:67:34:6e:5e:d6:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AE:CE:DC:5E:C2:BB:0F:5C:3C:29:D9:92:0E:CC:D7:4A:6C:43:3C
            X509v3 Authority Key Identifier:
                keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:83:66:10:f4:de:6b:55:58:de:f0:68:71:fb:eb:b5:69:
         94:ec:b0:da:35:8c:1e:8f:01:51:77:70:bf:24:fd:6f:29:83:
         0e:0c:37:ef:f4:42:a4:05:a6:0b:60:6d:ea:a2:c2:37:08:73:
         1b:88:6f:3b:13:48:9b:25:b9:00:bc:b8:80:9f:88:f5:70:af:
         d6:61:b7:1d:72:2f:20:9f:3d:c4:32:e4:83:b0:aa:fe:26:87:
         8c:f8:21:60:cb:af:a3:cb:db:2f:25:5f:54:93:52:6d:eb:af:
         38:67:d3:ad:b9:a7:41:3e:48:09:58:22:a3:da:b0:8a:a6:bf:
         f8:3c:39:df:c2:12:f5:f8:2e:e3:e1:89:4c:77:d9:19:83:19:
         a9:2a:fc:10:48:01:74:27:eb:87:42:7d:c4:f9:08:cd:dd:4b:
         66:43:e0:a5:2b:8b:1f:42:e6:14:76:9e:67:5d:28:d7:2d:23:
         94:bb:7e:13:fe:10:44:ae:df:22:8f:96:46:3e:2d:cd:cd:6d:
         87:84:5d:74:e4:ba:72:06:c5:65:a7:df:b1:f8:79:ed:a8:3b:
         ba:54:6c:61:b7:85:f6:ea:5b:87:b3:16:50:d3:26:96:ee:58:
         c5:7a:48:d1:90:e6:74:43:15:ff:2f:a8:51:5e:b0:ac:7c:f2:
         2f:b5:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:01:05 2024 by rpki-client on console-ams.rpki-client.org