Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File:                     ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier:          RGpw7DR0J4/C7ezc/Sp9ofZPslC1OdaGeFTjXciaRsg=
Subject key identifier:   1C:CE:FA:7A:1C:44:A1:70:A0:02:52:5D:E4:4B:7E:EC:BF:DA:A5:75
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer:       /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial:       01935764CB8870CF7EF315D2A81BC47458F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 05:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:43 +0000
Files and hashes:         1: NjmiQJSiIW2bmDLIukYHDRHnSgI.roa (hash: gZUhsfBxwEpfLulCjb+lFN0TwVjCw9UIBOdKl++AC2Y=)
                          2: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: 9EL0XZYVCW6/sksJkFXdS60WWLc4JudSRCqMLgBIknE=)
                          3: _DAKcqp0QaHt3VNRXnW-f6X1XCg.roa (hash: kp17IW7Zaofd4p7ubYp6dkCxUpcz9QTvZE1Kx3KV1H0=)
                          4: vce4Pv7LwyzcUvbBN_CuNcpJniM.roa (hash: 6PDBUg0bTgjRA+p5LcVEi5duXYN8HAPexhew7/AzV0E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:cb:88:70:cf:7e:f3:15:d2:a8:1b:c4:74:58:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
        Validity
            Not Before: Nov 23 05:00:43 2024 GMT
            Not After : Nov 24 05:00:43 2024 GMT
        Subject: CN=1ccefa7a1c44a170a002525de44b7eecbfdaa575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:e4:6c:75:c8:6d:98:37:a2:82:ba:33:18:
                    30:f2:9c:b4:9b:8e:f6:de:5f:33:b8:05:8e:1c:b1:
                    eb:62:62:a5:40:f7:21:51:47:57:cf:e7:b5:c0:59:
                    f3:43:ef:4b:ed:a8:36:ca:3e:b8:cb:01:cb:ce:b9:
                    f6:69:eb:e0:40:ca:bb:26:d5:fd:84:fa:b8:7c:57:
                    67:84:ff:98:b1:a6:77:5c:ca:e3:1c:24:e7:ab:39:
                    ba:c3:44:b6:40:27:e3:de:42:c2:5f:7a:96:3e:22:
                    77:78:48:2e:15:d2:9b:4b:aa:5b:6c:bd:a1:88:16:
                    b4:5c:2d:d0:67:be:3b:97:43:52:b6:f4:8c:95:8b:
                    67:1a:02:5c:b4:74:a2:ac:d8:a3:cf:a2:91:71:eb:
                    09:c6:8c:22:f2:d1:f0:c3:1b:a3:9b:e4:ae:4f:ae:
                    fc:1f:d2:56:93:46:28:a4:58:fc:e0:43:e0:1a:1f:
                    b1:fa:d5:fb:df:a0:8a:1e:69:c4:5e:5c:44:3c:ce:
                    8e:06:93:54:9d:c7:19:17:3f:f7:d0:49:6b:22:30:
                    ab:7e:0e:ed:d7:dd:ea:6b:59:56:67:60:f4:b5:f2:
                    f4:28:93:a9:64:53:89:04:dd:ec:95:c3:b3:60:15:
                    1d:5c:de:28:4d:ff:66:60:9f:6e:79:4f:29:4f:9e:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CE:FA:7A:1C:44:A1:70:A0:02:52:5D:E4:4B:7E:EC:BF:DA:A5:75
            X509v3 Authority Key Identifier:
                keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8e:7f:4f:d0:f0:5c:e5:12:43:26:b3:01:70:66:91:b7:67:
         da:31:78:af:b6:b9:6b:71:2f:84:3e:ef:bc:d7:76:db:7e:68:
         cc:41:3a:86:6f:ca:98:61:ed:13:21:31:5e:d7:17:ed:b4:29:
         b1:2b:de:1a:8b:0d:0f:c1:ec:62:fb:55:dc:51:de:14:6e:e4:
         c8:cc:a1:fd:5d:0d:88:88:57:c0:d4:74:11:08:d0:9b:8f:45:
         64:cc:3c:65:24:40:39:7d:36:25:39:b9:89:07:bf:25:fd:ec:
         b7:4d:97:06:48:dd:a5:3a:22:bd:47:97:b0:03:5e:25:98:81:
         f5:05:72:bd:21:7e:2f:e8:1f:e2:37:fe:32:3f:83:c0:07:26:
         78:61:13:6e:70:56:a7:fc:f4:de:17:6f:76:ea:b7:d1:c7:52:
         5a:c1:34:b3:b1:c7:a5:fd:84:5e:ae:61:c5:4f:fc:9a:56:0d:
         cd:66:5e:90:7f:f2:4b:ef:ec:39:8e:12:a8:dc:d7:0c:5f:46:
         8d:90:33:20:b1:f3:20:b5:4f:21:c6:96:5b:7b:f1:4e:64:1c:
         ae:ab:ec:29:b1:ad:71:9d:6f:87:ef:28:be:33:89:bf:3a:77:
         38:b5:4f:24:08:12:26:6b:1c:9e:34:02:e0:55:d0:b4:5b:19:
         6a:3b:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:59 2024 by rpki-client on console-ams.rpki-client.org