Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File:                     Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier:          Mn0EPAPHhR+wbnoGhdEhBKc40lqjy86AID8bZ0I46KE=
Subject key identifier:   CC:99:4A:0D:09:21:32:59:0D:76:A4:CC:82:DB:A5:08:18:61:35:31
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer:       /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial:       0190490C6CFD3AE8AAE5CDBED3987FD790AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 07:01:08 +0000
Manifest this update:     Mon 24 Jun 2024 07:01:08 +0000
Manifest next update:     Tue 25 Jun 2024 07:01:08 +0000
Files and hashes:         1: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: uNIE7p+Hk7wii8QwjkhfFg0Pe0yYRe97GLPzN4qZMns=)
                          2: dXXJ6mnIWEWJtg-BUQDxFWkIgTk.roa (hash: ROqLEc6El4HvEo3h8b4C7uWrpKnjm9fYAljpd3e6JBQ=)
                          3: vv_nmRF-gDvmP2LkFvZKYL0dFJ8.roa (hash: r5iAPLyGmNYKc6uqXiqNuwy910WBoAe6izao5SEsqOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:0c:6c:fd:3a:e8:aa:e5:cd:be:d3:98:7f:d7:90:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
        Validity
            Not Before: Jun 24 07:01:08 2024 GMT
            Not After : Jun 25 07:01:08 2024 GMT
        Subject: CN=cc994a0d092132590d76a4cc82dba50818613531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:b3:31:7b:26:8c:a3:f3:ca:1f:cb:10:bc:
                    cb:0c:6b:97:f8:f0:53:0c:a5:6c:2f:3d:34:3a:df:
                    4e:ab:07:43:fa:41:b2:d4:09:f9:ed:f8:52:65:d5:
                    e9:b3:b3:f3:f1:54:fa:aa:0c:96:13:ff:8c:f8:b5:
                    bc:9e:c1:12:4d:07:4a:8e:c2:0a:89:17:49:d6:fc:
                    1c:99:88:e3:b3:b2:7c:6b:b2:22:6f:22:85:cd:00:
                    c5:14:69:cd:28:96:ca:6c:58:89:9d:62:12:ce:cf:
                    c5:b1:f1:f3:6c:20:db:bc:7e:a2:3e:ac:72:84:4e:
                    dd:15:d4:78:a9:5f:c8:d6:b0:e2:85:f9:9e:de:06:
                    b9:05:39:6e:f1:a7:14:dc:72:94:fa:90:24:60:d3:
                    08:25:ae:e6:4f:c1:d1:a3:2c:2d:00:46:2f:75:c8:
                    c9:e8:f9:b2:45:f1:77:a8:f8:1a:c6:ed:72:1a:79:
                    7b:6e:63:03:4d:08:85:e5:72:02:07:94:e4:b6:46:
                    be:61:95:02:ac:a1:58:5c:71:97:ac:85:82:cf:d8:
                    2a:e5:b6:b5:44:2d:31:9a:5c:4b:5a:24:8f:2c:09:
                    ba:3c:37:7e:b3:43:b4:8c:03:d6:aa:25:2f:86:32:
                    5d:50:6b:87:70:c0:4a:d8:18:c7:c5:c0:07:87:4e:
                    26:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:99:4A:0D:09:21:32:59:0D:76:A4:CC:82:DB:A5:08:18:61:35:31
            X509v3 Authority Key Identifier:
                keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a4:49:35:5b:3c:a0:99:5c:43:1c:9e:8f:35:62:4e:b1:16:
         32:ea:31:d0:c8:99:b4:c5:06:75:3a:ba:cf:35:cd:83:83:36:
         c4:27:7e:72:ea:0e:5a:99:7b:2c:5f:09:3b:37:ab:b4:9b:13:
         82:7e:30:b9:64:0a:dd:ee:9b:6d:5f:25:75:f3:88:ed:92:d8:
         dc:e1:9c:57:fa:45:3f:b8:96:c7:7b:b0:32:c6:6f:58:c1:d5:
         97:2d:0d:1f:ba:af:51:dd:1c:f9:9f:50:01:91:9d:06:7e:b6:
         c8:59:aa:0c:1f:c9:bb:97:19:5e:44:d3:6f:28:dd:59:9d:1b:
         1c:d2:c0:f6:2c:f2:7c:9a:36:64:b9:10:fb:7c:65:ca:5d:93:
         aa:8a:1c:67:25:01:20:9d:34:c0:15:5d:0a:b7:4f:5e:5b:4c:
         a5:bc:8a:91:2f:52:31:f3:66:23:df:fa:3d:1f:c6:0b:42:ea:
         69:b2:ea:76:f0:43:a3:eb:c4:72:81:c4:e7:d9:47:6d:25:9b:
         82:5d:62:25:0b:d2:9e:4f:2c:6b:4b:ac:e5:d1:ae:c4:c8:08:
         bf:fc:4d:7a:a6:07:95:2b:da:f6:2c:5d:df:4e:6f:3c:6a:1b:
         73:7c:44:92:5a:4d:27:77:ce:65:ff:f8:2a:ff:32:ee:a4:4c:
         35:ad:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:21:00 2024 by rpki-client on console-fra.rpki-client.org