Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File:                     rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier:          aOge21gYIWCjbp5q6GRyq10nrgmZ1FyWl4MUjG9KrEo=
Subject key identifier:   5A:0C:3D:26:E2:32:93:69:FA:1D:FE:8D:01:F6:BC:04:EA:76:3C:62
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer:       /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial:       01935688AE7261A529B40101FE4078C7D71C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number:          11A3
Signing time:             Sat 23 Nov 2024 01:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:18 +0000
Files and hashes:         1: EQQbPsyYvN3KkYxt0AgBdJMs8n4.roa (hash: Nb6ONfbOSagnj02e9oLNjLB7+i8MLfpzbj0jArK9uhQ=)
                          2: jnUT6ZqIXwGLuMJpnbgdDxfYD_w.roa (hash: qsZ7yFjAZdOt9kBsj7vW4nXf0RjYKnfROHXWVKsAQt4=)
                          3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: 61Jr+RCU+DrubKif60OmAEuGwa1ApcNH1fSS4KBMBmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:ae:72:61:a5:29:b4:01:01:fe:40:78:c7:d7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
        Validity
            Not Before: Nov 23 01:00:18 2024 GMT
            Not After : Nov 24 01:00:18 2024 GMT
        Subject: CN=5a0c3d26e2329369fa1dfe8d01f6bc04ea763c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:57:4c:12:81:ab:05:11:a2:98:f3:06:bb:
                    c8:36:95:e7:21:3f:7c:6c:17:47:af:5e:a0:2b:9f:
                    13:fd:55:18:3e:7b:9b:73:74:c6:17:37:42:84:64:
                    c3:b3:16:3d:dc:5b:6b:a6:cf:c8:bc:86:f4:5b:06:
                    1f:30:5e:7f:d1:a5:e5:a4:14:b7:59:9b:b0:8e:d1:
                    44:27:c8:12:85:22:e1:87:14:28:da:56:f2:cf:27:
                    ec:a8:25:71:a0:51:92:3c:b4:f1:f8:12:00:0c:d3:
                    ef:37:d3:3d:db:d2:d3:9b:0d:8b:24:b7:b2:df:9b:
                    63:99:32:4d:0d:bb:a6:f3:16:48:ba:9b:d1:90:30:
                    62:66:a1:80:22:72:31:39:a4:86:5c:37:a7:a9:17:
                    18:96:38:bb:10:7e:88:4f:91:ce:6f:e4:4a:38:85:
                    26:a2:ea:38:3a:e8:95:16:51:6b:60:99:9e:cf:62:
                    ec:c0:11:16:fb:16:b4:af:79:53:8b:ec:d2:31:eb:
                    c9:24:9f:3f:9d:7d:99:3b:1e:d9:10:c7:90:a6:77:
                    6d:a8:ba:b0:2e:55:66:ce:7e:2e:ae:a1:9d:9d:b8:
                    a7:ea:a1:d9:ef:ed:9d:9f:fa:05:5b:28:3b:de:eb:
                    bf:22:e4:17:40:d2:89:7c:c1:26:39:37:07:02:a9:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0C:3D:26:E2:32:93:69:FA:1D:FE:8D:01:F6:BC:04:EA:76:3C:62
            X509v3 Authority Key Identifier:
                keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:10:9b:84:e0:2d:b9:80:a5:61:68:4e:6a:e6:26:93:69:df:
         91:66:cc:b3:e1:5c:b3:25:4c:77:a8:bf:e4:7c:19:50:42:9c:
         0b:e0:c7:c3:5d:e4:5c:1f:4e:b2:8c:ce:e6:8e:6a:90:5f:cd:
         e4:00:18:90:67:45:31:7b:38:be:ad:9f:ed:43:51:dc:41:e8:
         cb:46:44:c4:d5:04:2c:56:41:89:77:55:20:c7:1b:74:dc:dc:
         d4:97:31:89:f9:16:a4:24:cc:f7:61:6d:d7:90:a7:96:95:30:
         61:4d:5b:39:2a:71:19:e6:67:89:6f:56:19:d9:41:9d:a9:15:
         de:48:90:c9:b9:53:6a:31:32:a4:cf:f8:9e:c2:3a:e9:c7:e6:
         74:db:75:bd:d5:41:95:75:99:d7:2e:7c:3d:27:b8:f2:ed:82:
         ac:f6:d3:93:95:0b:31:08:8f:4a:3d:47:e7:52:35:a1:03:0a:
         9b:bf:8a:0b:92:a7:96:a2:9f:5f:12:04:0a:a5:0e:6b:d1:68:
         0d:c2:1c:18:10:df:80:69:d5:1a:73:33:b8:1c:69:af:3f:9d:
         6a:81:01:dd:5e:e5:9e:7f:93:a9:1d:23:29:10:5a:46:ab:92:
         0b:4a:b2:a3:c1:6a:11:d8:46:4b:23:b2:6c:50:2f:eb:2c:a5:
         18:85:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:28 2024 by rpki-client on console-fra.rpki-client.org