Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File:                     Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier:          ytqbP38z0grd9k4YaaqjSgMRHWevC0pMrF6C3fR+C3I=
Subject key identifier:   9B:D2:6B:03:72:5A:2A:E8:FB:1B:3A:42:C3:BA:C4:FA:E3:A6:7B:83
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer:       /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial:       019355E492075B1DCAC4A181E4A365DC3DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number:          01CF
Signing time:             Fri 22 Nov 2024 22:01:03 +0000
Manifest this update:     Fri 22 Nov 2024 22:01:03 +0000
Manifest next update:     Sat 23 Nov 2024 22:01:03 +0000
Files and hashes:         1: Syn5pVqduhT5e-dwR9zAK8XggGA.roa (hash: rnMViORx13Xlf499/+4Qklu4MMvKyPvWRnzwfGA6b7Y=)
                          2: T4H58eF8LQ6NI03og6y5mFtke4k.roa (hash: wfGQLfUA9TZ6/QAJmtUMhku+8vaAKSeU5WzYp4PWh7g=)
                          3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: hYerKgGBOi1PoN/LfzraHp/AVf0XD0nqVnB86X8Bojg=)
                          4: dG7QHhYOmZjAjUv6MRhWdFZKvAU.roa (hash: jzF545PpicabBb9DNHKI1q8p+TIGgGXFSRhWrscJ4GU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:92:07:5b:1d:ca:c4:a1:81:e4:a3:65:dc:3d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
        Validity
            Not Before: Nov 22 22:01:03 2024 GMT
            Not After : Nov 23 22:01:03 2024 GMT
        Subject: CN=9bd26b03725a2ae8fb1b3a42c3bac4fae3a67b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:c7:5c:8d:25:96:e7:7c:d4:47:13:ea:45:
                    b6:b2:2d:d4:03:e5:40:dd:48:ba:e2:4f:1f:ac:ff:
                    0d:7e:4f:87:95:97:9d:4f:dd:ae:de:76:11:b7:7b:
                    7e:9e:b7:27:d8:8e:27:1e:13:03:85:fa:f3:dc:55:
                    4c:a3:4f:ef:d9:c9:e6:a4:b5:ce:a5:7d:e3:4c:f0:
                    90:2d:35:91:b7:f2:a1:29:c1:b6:50:5c:50:37:61:
                    70:b6:dd:72:34:34:f1:11:b2:70:f0:4b:bc:52:6a:
                    6f:31:f6:0d:21:61:4f:f2:d8:84:99:2a:bd:9b:72:
                    48:d0:9a:c2:2b:85:00:fc:94:26:89:62:85:7d:e7:
                    fd:33:e1:8d:35:3e:bd:a2:6a:e2:2c:35:f9:5f:09:
                    87:cd:eb:db:89:cd:0f:69:2d:ae:e0:96:91:c6:12:
                    54:f7:4c:73:36:be:6e:cd:53:35:04:15:91:5b:ec:
                    af:4c:84:15:dc:e3:2f:cc:b0:9a:36:b1:79:6d:67:
                    8e:66:69:c4:81:55:76:44:18:6a:d8:b7:c6:14:13:
                    b7:65:a2:d9:13:18:26:7f:5a:1f:a6:09:6e:50:65:
                    70:12:9a:8c:9e:e9:df:8a:3b:0c:9e:4a:37:ad:fb:
                    9c:b1:5d:83:a1:ed:05:8c:01:6b:80:70:29:53:74:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D2:6B:03:72:5A:2A:E8:FB:1B:3A:42:C3:BA:C4:FA:E3:A6:7B:83
            X509v3 Authority Key Identifier:
                keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:36:1a:9a:6c:5f:d4:33:28:68:26:14:ed:ba:6a:26:99:
         1f:1a:eb:c1:6a:3c:58:79:2f:80:bb:18:2a:e3:f3:a8:6b:bf:
         19:9c:66:53:f0:8e:50:90:e3:91:1b:9a:68:78:93:9f:fd:81:
         18:64:cb:ce:b0:73:93:78:d6:72:ef:64:55:23:89:d8:c9:93:
         2d:2f:46:d8:46:fe:66:50:44:b4:15:92:b8:a5:2d:8d:7e:42:
         5e:af:4d:f0:92:8b:12:21:ec:7b:72:50:b3:01:aa:ab:bf:c3:
         35:b2:02:de:27:e4:c7:fb:17:ff:f2:7b:37:70:e2:b8:aa:b4:
         de:6a:48:be:e8:99:04:5d:9e:15:7e:24:57:f2:cc:f5:9e:34:
         33:55:ac:5f:ed:7c:4c:d7:d9:03:1a:a3:8d:54:8a:e8:39:0a:
         8d:58:82:35:e4:be:4e:11:38:9e:62:71:02:25:0b:06:d8:84:
         71:dc:45:c4:81:9c:99:3b:07:ac:45:ea:37:43:cb:14:fc:3d:
         d5:26:fd:e2:2f:67:59:98:23:b0:67:63:11:fd:5a:a9:bd:6c:
         1a:00:9f:ae:93:4b:94:4c:d4:56:39:52:32:1b:a8:a8:bb:e5:
         9a:0a:12:e8:bc:fb:73:78:10:d5:0c:c2:93:69:3e:25:7c:d8:
         64:6e:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:18 2024 by rpki-client on console-fra.rpki-client.org