Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File:                     jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier:          NIYZH+YifUQUT6D+7nBd3l7fc8jgN+JlcStULJXL2Qg=
Subject key identifier:   94:1F:D6:99:6B:6C:05:F4:B2:71:74:F8:9F:FB:7A:C0:23:5E:67:4E
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer:       /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial:       0193568942EB9E0DF591B0998A4301C1DC6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number:          03D3
Signing time:             Sat 23 Nov 2024 01:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:56 +0000
Files and hashes:         1: AF49Ki0255bSw_h61bT_-nmyQjs.roa (hash: UxwitxAfLbcM+/EKZcDA4e0krl/uSHJMvSmJwcnJkpw=)
                          2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: VmTYetR/ct8YqZGqtbk/ufP6JGzMuk9kwUD7csIlK84=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:42:eb:9e:0d:f5:91:b0:99:8a:43:01:c1:dc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
        Validity
            Not Before: Nov 23 01:00:56 2024 GMT
            Not After : Nov 24 01:00:56 2024 GMT
        Subject: CN=941fd6996b6c05f4b27174f89ffb7ac0235e674e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:c7:cc:15:33:3c:b6:c9:4a:0e:c2:5b:9c:
                    2f:be:a9:9f:4e:c6:9e:d4:62:f5:60:7e:68:4c:e6:
                    bc:b7:59:82:5c:78:b3:ed:6f:d4:97:56:ec:a2:db:
                    48:74:e8:02:8c:2d:9b:7c:61:93:12:07:3a:44:bf:
                    00:b3:c5:34:c3:d2:7e:50:70:c4:af:da:a7:d6:86:
                    70:1f:66:cf:f3:c5:73:a4:48:e8:45:2e:55:6c:6c:
                    00:50:c8:79:12:2b:e6:4f:e9:1c:e5:5f:c8:8d:92:
                    a2:bf:bf:77:1d:ba:06:b4:f3:6b:ca:84:d2:eb:35:
                    13:ad:ad:2b:08:7b:5c:ff:d2:6d:21:55:9f:48:05:
                    2c:b9:a2:79:5d:7d:d5:b6:6e:91:41:e1:ef:a9:1a:
                    8c:8d:de:d0:6d:b9:9b:84:d2:1d:83:b3:95:85:14:
                    c5:10:77:0d:09:20:c9:54:7e:af:9c:82:01:64:c2:
                    b1:14:b6:60:fa:d2:ca:0e:b6:2c:04:82:ea:63:bf:
                    7b:15:06:cc:0d:7f:69:15:f9:7c:78:67:98:f0:9a:
                    36:05:c7:9e:53:af:d3:ab:4f:92:54:9a:95:e6:ea:
                    d3:5b:d2:a6:40:31:60:c8:45:f8:7d:76:44:7a:04:
                    b8:17:95:a5:bb:87:15:4a:44:b8:0e:64:a4:5e:79:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:D6:99:6B:6C:05:F4:B2:71:74:F8:9F:FB:7A:C0:23:5E:67:4E
            X509v3 Authority Key Identifier:
                keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2b:57:5b:f6:e1:c7:08:d2:eb:ea:d0:a0:8a:f2:39:32:56:
         8b:ea:9e:1b:17:4e:e5:55:89:81:24:80:e5:32:c3:61:0a:22:
         7b:b1:c9:59:14:39:66:6b:4d:f6:35:d1:08:44:58:60:57:86:
         ae:37:06:58:95:b1:b9:69:6f:8d:b7:d2:f3:b6:23:26:e8:af:
         9f:15:bd:ec:aa:a5:e1:94:96:e9:48:b4:ed:77:ac:45:a5:ac:
         b4:d7:6a:a4:bd:62:62:4e:0c:1e:e5:c2:06:c6:22:18:62:4e:
         ef:c8:1c:c7:7e:31:3c:2a:68:7b:ca:11:bf:01:90:5b:0a:53:
         09:88:7d:a9:e5:a5:d3:4c:55:0e:67:0f:96:cb:0b:88:d4:aa:
         8b:bf:b2:2c:98:93:3e:5c:b0:a9:a6:41:92:a2:c6:e0:fd:dd:
         51:5b:7d:db:d8:47:90:4b:be:88:7c:c5:07:9e:4d:53:44:b1:
         c3:3d:c8:40:0e:c1:8b:51:fa:97:69:71:ab:bd:93:6a:44:97:
         51:49:59:a0:7b:09:0d:91:94:8f:41:2c:56:f3:fc:ca:6a:92:
         09:87:cf:3b:6d:a2:f7:0e:35:e2:18:bd:07:30:7b:54:81:96:
         54:15:57:8e:3f:78:72:83:37:ca:03:1f:eb:43:d1:34:04:44:
         35:97:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:24 2024 by rpki-client on console-fra.rpki-client.org