Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File:                     Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier:          ghiJ7KgrbEei2slZYLKHph2sR0cjZzHxS56sDk59uN0=
Subject key identifier:   92:37:67:F5:02:66:D9:79:B9:71:05:9A:7D:03:CD:CC:BB:70:41:4C
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer:       /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial:       0193549AAD5989F4A42836DFED0D1D80ACDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number:          0C48
Signing time:             Fri 22 Nov 2024 16:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:43 +0000
Files and hashes:         1: B774ZrIkAb0bugX0JbZ0Xn7VrFw.roa (hash: xP5eh4MkYKle9hiLqgokxz2yWPyGtbp/k3PhrWM5LR8=)
                          2: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: kT6NdK8KC/u6XZsbZ97BYo+omPK1pa8Mbfu8VR0xeaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:ad:59:89:f4:a4:28:36:df:ed:0d:1d:80:ac:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
        Validity
            Not Before: Nov 22 16:00:43 2024 GMT
            Not After : Nov 23 16:00:43 2024 GMT
        Subject: CN=923767f50266d979b971059a7d03cdccbb70414c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:fe:ad:fc:0f:13:8d:54:25:c0:39:5c:f4:
                    16:42:a2:c7:1d:46:c3:45:cc:ec:c3:a0:04:37:fd:
                    40:45:eb:5d:e0:a9:30:e8:62:20:1d:7a:53:d1:f8:
                    71:16:46:39:65:3d:f6:77:4c:b5:16:b3:af:4e:23:
                    3b:7b:b4:9d:25:3b:b2:9f:3e:a1:40:3e:cd:75:54:
                    2c:37:d2:b1:87:db:bb:65:f7:39:a5:e2:7d:f7:c7:
                    35:0d:e8:ab:64:5e:0e:7d:43:ea:e1:3a:34:3c:1d:
                    ab:3b:67:b6:d1:6b:77:e0:b3:e6:dd:41:bc:28:ae:
                    60:77:5f:e4:17:09:88:6b:3c:d0:73:3d:28:3e:36:
                    cf:99:9e:d2:70:45:a0:5f:7e:09:d1:5e:bf:42:0e:
                    71:40:04:17:db:9a:72:23:13:c1:4c:cf:a4:2a:79:
                    56:ff:5b:60:e9:23:63:72:a3:0c:e2:8e:ba:73:04:
                    da:c9:67:f2:3f:f8:55:bb:07:a6:91:c4:92:2d:e1:
                    a2:6a:35:9b:c9:8e:68:9b:ee:5e:6e:41:d8:4e:1a:
                    85:d9:c7:af:dd:6c:7e:79:b3:b4:b7:a5:ea:03:1b:
                    61:c8:64:c2:5a:e5:59:fc:64:5a:5f:a5:7e:37:0c:
                    c6:27:8f:47:69:e4:06:49:e2:44:b1:ce:1d:2f:d5:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:37:67:F5:02:66:D9:79:B9:71:05:9A:7D:03:CD:CC:BB:70:41:4C
            X509v3 Authority Key Identifier:
                keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9e:41:85:83:53:37:41:33:90:29:e4:1b:16:a8:6c:c8:1f:
         a7:33:35:98:53:e0:e2:35:6f:6f:e7:2c:bd:1a:14:26:c9:ed:
         e0:42:ad:e1:6a:d4:95:88:7a:fc:10:a0:a8:39:af:2f:2e:ee:
         46:f9:e8:ee:a2:9c:6e:27:8d:d9:ea:b1:49:30:a8:bc:98:56:
         ba:7e:47:2f:c6:f0:3e:7c:22:96:c4:8a:04:c5:3d:d9:cf:4e:
         f0:07:e2:a3:10:f5:9f:1f:0d:bd:f5:f7:80:44:8b:f6:8a:84:
         bf:d3:85:ff:d7:4b:07:7c:4a:a3:c7:e3:c4:55:d9:a8:5a:13:
         eb:38:10:99:37:05:d8:a3:7a:ec:af:7c:df:45:dc:70:c2:3a:
         3b:8e:cb:84:70:fd:b4:ec:68:d0:de:d3:65:1d:dc:b4:38:c6:
         57:02:c7:90:fa:6a:20:04:fa:06:16:0a:7e:0d:2e:85:ac:09:
         b6:23:d3:59:91:46:77:05:00:24:dd:49:91:15:8f:55:33:c0:
         31:33:8a:3d:a1:1f:fc:b0:57:ad:4a:0a:8e:a8:54:86:87:d3:
         c4:07:0d:53:6d:80:99:ad:ee:60:8d:fb:35:ce:95:47:4b:bb:
         02:59:53:d6:4c:9c:e7:ac:ef:d3:42:33:d8:53:bf:38:96:d5:
         3f:28:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:56:40 2024 by rpki-client on console-ams.rpki-client.org