Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          USy4b3WjBaNcewPOuiyhJ0d86xq+M1CjCbi8IgVS5Mg=
Subject key identifier:   E1:1A:43:70:A0:63:14:F4:47:82:B6:64:E1:8F:56:C5:89:46:2A:83
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       019355AD099A83DCCCE25A1CE5987735FBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          03B4
Signing time:             Fri 22 Nov 2024 21:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:23 +0000
Files and hashes:         1: JqjJKREbvHF9hd1dE20YXIhI2PE.roa (hash: 8NS7qdAMJuplv7KjmxvtrdalPyjZMVQJPymF/YewkEo=)
                          2: zPHo0d6hbp1VthZmHYhP0gIaWss.roa (hash: j9CaBLR6FlYWzy0t0B0dBOpSzBO0YQZNonessStfPg0=)
                          3: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: BR/IBd1zeFf9ducYS9n5VzoOc7oXgIZRBw89KdUmAWY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:09:9a:83:dc:cc:e2:5a:1c:e5:98:77:35:fb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Nov 22 21:00:23 2024 GMT
            Not After : Nov 23 21:00:23 2024 GMT
        Subject: CN=e11a4370a06314f44782b664e18f56c589462a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:48:cf:81:a1:bf:6d:b2:da:a5:b7:e4:56:
                    6d:1f:31:79:be:c9:01:2f:fc:ea:9c:5d:11:d4:11:
                    3f:d9:ab:67:cc:f5:12:ca:6e:55:23:38:55:68:f4:
                    5f:bf:ff:82:87:72:e0:98:3a:71:90:ca:d0:e3:83:
                    0e:04:a6:ec:b6:f0:9d:3c:40:8f:c8:dd:a5:8f:8c:
                    dd:d3:37:64:b8:01:ba:4f:0d:d7:44:2b:2b:ca:a1:
                    84:08:91:e9:06:a5:0e:8e:73:e3:59:54:85:e9:dd:
                    ed:83:e6:be:8c:58:8b:72:3e:7b:d3:ed:d9:97:a9:
                    24:1c:b4:6e:7f:86:d0:d3:41:4c:aa:31:fa:54:8f:
                    03:a5:03:52:6f:62:aa:a0:71:e1:4b:cd:d7:d7:5c:
                    e8:7f:08:ac:c6:ad:6a:2c:81:bc:b8:ba:a2:ff:3e:
                    ca:a6:a9:3c:19:50:80:f5:be:1c:7a:49:df:e6:7e:
                    6a:80:62:e9:4e:e5:bf:1f:0a:8a:ba:a9:04:25:0c:
                    6c:7e:5e:6b:1b:c4:80:a3:06:e3:22:8d:02:1e:4c:
                    1b:8e:4e:86:d6:91:59:23:84:56:62:a3:85:7b:7c:
                    12:19:1c:7d:42:78:f0:8b:89:80:04:d6:a2:3a:72:
                    69:87:f5:4e:ca:82:c5:6b:88:97:cc:fc:9a:ff:56:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1A:43:70:A0:63:14:F4:47:82:B6:64:E1:8F:56:C5:89:46:2A:83
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:06:cc:94:83:1b:d9:f4:44:ed:a2:f8:3e:35:b7:35:34:84:
         63:61:62:65:b4:01:6a:3d:60:aa:fb:34:36:f3:cd:da:d4:1d:
         e6:6a:06:09:a0:8b:68:2d:61:55:71:5e:02:ce:c5:53:0a:57:
         30:60:f5:1d:d2:21:6f:c3:a1:e0:f3:1e:12:4f:3a:2a:df:89:
         aa:c7:5c:54:96:64:67:e6:25:dd:9e:fa:93:8a:1a:0a:64:6e:
         6f:44:05:b3:5a:d6:4d:68:ac:ff:a0:67:18:f1:e3:89:a6:f7:
         77:1d:19:d1:38:5c:d0:a2:12:04:d6:ff:0b:d3:9f:76:55:e9:
         d7:86:c5:ae:c3:9f:80:40:98:61:4e:c9:f9:6e:ad:2d:18:59:
         4c:dd:8f:7c:56:a7:be:92:9e:45:c8:33:de:29:40:83:bf:e2:
         76:47:58:6f:60:aa:71:d1:20:e1:be:ed:c1:53:d7:9f:29:b2:
         a2:7e:c5:23:9a:92:e4:07:a5:da:59:50:be:0b:22:2c:c7:e1:
         b4:bf:a9:d9:3e:59:e0:b0:bd:5f:a2:b2:0a:08:7d:87:b2:56:
         e7:44:e5:7b:e7:37:96:ac:f8:3b:b6:c4:85:b1:23:ec:d7:c8:
         51:49:45:e8:88:37:02:95:2a:18:f5:20:5f:0f:4d:7b:0c:72:
         89:8d:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:32 2024 by rpki-client on console-ams.rpki-client.org