Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File:                     ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier:          3FEeZvlMAO+v6CcDPpXzqpCwiYjjfMXYWpeGEyYOXIQ=
Subject key identifier:   9D:78:DB:FE:FE:C6:3C:29:2D:5B:39:A5:66:E0:C8:40:0E:87:FD:78
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer:       /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial:       019355081736B8044EA4C7BBE3EB6F081E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 18:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:13 +0000
Files and hashes:         1: 1-2wi3eAdAgV2HdbOuqsXnFmpc7Q.roa (hash: vYDBw5OZVflt4DFmKQKl6NMfi67TRtxvgvVvi+dTA1Q=)
                          2: 9bzfDXSE2VCQU1Qu_AkNADSKS6k.roa (hash: +DC0ju+z6/p8bUJNpAd+K6MZu7wvibTiHnumppRrf9w=)
                          3: JNkH4PfespyzF77Q2WBKCCUajV0.roa (hash: sJFEluEdThuvfhPLb/qQHWxrYTrnyeXGsEGg7cNFFqo=)
                          4: L0JyOOvymbxgbWlaEf2fWxHIRMk.roa (hash: 11n2v63K7pR3fURYaC8lqlou9ayPhZL1RVP4NQEugVE=)
                          5: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: d64XE9S5VoidaA/SV62gqHW+lJKqXpuctGLkYsKXVlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:17:36:b8:04:4e:a4:c7:bb:e3:eb:6f:08:1e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
        Validity
            Not Before: Nov 22 18:00:13 2024 GMT
            Not After : Nov 23 18:00:13 2024 GMT
        Subject: CN=9d78dbfefec63c292d5b39a566e0c8400e87fd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:22:a7:b0:04:a7:4a:89:d9:87:10:b4:68:
                    fe:06:6a:f5:07:28:d2:99:d9:c4:5d:85:00:ac:14:
                    1f:dc:22:9e:ee:23:27:60:9d:71:6c:4f:0e:40:c6:
                    d6:f9:7f:f5:e9:2f:16:b3:12:c2:e9:26:6c:a7:70:
                    7b:2b:8c:8d:1b:41:51:a7:d4:63:0d:fa:74:0e:f2:
                    a1:80:34:07:cd:d6:6b:42:a7:73:85:04:75:ec:be:
                    63:dd:0a:1b:97:0b:3f:23:f2:23:3f:95:f8:cb:18:
                    f3:97:91:71:2e:3d:c7:ae:da:09:91:bc:3d:6f:97:
                    73:76:d3:7a:96:87:50:1d:07:c2:3f:45:e4:fa:6f:
                    7e:25:ad:6a:bd:96:87:74:af:00:14:63:c4:25:65:
                    b2:ea:bb:38:3d:50:6d:39:be:1d:53:08:13:24:24:
                    2a:f9:96:49:36:46:62:00:89:00:39:9d:76:a8:fd:
                    59:11:15:19:d1:3a:c8:c1:ad:76:47:3e:bc:3a:17:
                    47:e7:51:8c:e2:21:e1:d2:fc:3d:64:c7:83:86:d3:
                    1b:a3:8b:ee:c2:a3:9a:eb:2f:e9:99:e0:f0:46:c8:
                    d5:0d:a1:cf:cb:4b:ee:94:db:4f:fe:8d:7c:25:41:
                    dd:69:9f:89:ad:6d:33:55:d8:09:30:a5:71:b1:a6:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:DB:FE:FE:C6:3C:29:2D:5B:39:A5:66:E0:C8:40:0E:87:FD:78
            X509v3 Authority Key Identifier:
                keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:43:95:b9:52:ab:3f:35:b3:ec:71:da:8d:00:a4:fb:2b:f7:
         fc:e4:6f:4d:36:2f:55:18:db:7e:84:5f:31:5f:53:09:e1:1a:
         8e:5c:2c:ca:c7:a9:46:27:7e:ae:11:fd:85:42:8d:7c:39:31:
         8d:02:4e:0d:e0:0c:86:54:b9:79:24:c7:02:1a:50:44:99:0b:
         3e:a5:e3:d9:9e:c0:a7:96:36:2a:94:bc:f1:0c:23:3d:e2:f7:
         06:d4:6b:53:81:58:52:14:32:93:94:5e:ed:07:b4:48:1d:68:
         17:38:30:52:53:91:56:64:88:b2:ac:7f:f7:d1:c9:b8:f3:76:
         24:35:c4:0c:66:76:ba:f4:19:ed:4d:c8:cd:e3:8d:43:fe:d1:
         61:3b:7a:44:44:05:a3:87:4e:89:b2:87:48:7e:b1:11:6c:c6:
         9d:33:55:58:df:d6:32:44:0f:35:ab:4d:4f:0a:1b:e6:e7:ca:
         30:63:04:67:a8:5a:f6:43:3c:e6:3d:9d:92:67:ac:db:56:15:
         d9:09:eb:1b:78:c8:9c:7c:9f:ea:d1:54:77:f2:b7:7c:01:bf:
         55:f6:f5:3e:31:0a:95:ec:34:44:ec:b5:3c:64:80:2b:5e:83:
         cb:9e:c0:1b:6f:5f:73:9b:83:8f:94:16:db:b8:ed:63:48:7d:
         b4:cf:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:49 2024 by rpki-client on console-fra.rpki-client.org