Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File:                     ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier:          UWNHIy0sG16YMhzZNf7UjXqDalekIHtkR1h/RYZg+qg=
Subject key identifier:   65:96:AD:23:2D:C3:22:7B:6D:F0:9B:1B:3B:01:B6:20:D4:B6:E1:B1
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer:       /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial:       019356F6B71C740F8DED65ECAD257FB0416D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:29 +0000
Files and hashes:         1: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: KavxcGkirE8ZLOzuQp2FgwF8GPDk78AN8v06XK+n2+s=)
                          2: bGIrSrCHnuVnC425t_QTutvF3RE.roa (hash: mJvyMTHlirkVq1jnxAbBRwZ9RVIlo1Zt6BbUFa9IO2Y=)
                          3: kCluYn7nqoHH4SSOepPfvh-y1yk.roa (hash: nTq6la6myCABttwP6zRbIZ4fLxwO0QnV6q+uhEwUj8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b7:1c:74:0f:8d:ed:65:ec:ad:25:7f:b0:41:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
        Validity
            Not Before: Nov 23 03:00:29 2024 GMT
            Not After : Nov 24 03:00:29 2024 GMT
        Subject: CN=6596ad232dc3227b6df09b1b3b01b620d4b6e1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5b:9b:92:07:e6:50:dd:94:33:e3:34:41:9b:
                    3e:5c:1b:40:37:d0:0f:85:6d:cb:af:21:9a:ec:e4:
                    20:f9:5a:4b:73:c3:57:1b:9f:30:b1:af:f6:38:df:
                    6d:06:93:86:5d:76:e9:68:74:8d:31:46:6e:c8:76:
                    22:5e:60:3a:05:8c:eb:dc:19:ba:aa:d4:4b:c8:c6:
                    0d:54:01:a4:93:68:7c:ed:be:f6:fc:89:75:20:dc:
                    61:61:91:11:5d:2f:25:28:19:2a:8f:5a:47:19:7d:
                    f1:4d:4d:1d:30:00:62:55:5e:0e:a2:4b:cf:f1:05:
                    b9:9d:89:31:b1:41:9f:70:28:5b:67:8a:0f:6b:5a:
                    d0:d5:75:8e:98:6a:28:9d:4d:b7:79:02:24:8c:89:
                    da:09:dd:6a:45:af:f2:a1:41:0a:47:41:46:4d:87:
                    a7:92:10:18:3d:03:1f:5f:3a:57:4b:a1:c1:c8:8a:
                    b0:56:d4:8a:d0:63:cc:b4:47:99:b0:33:6c:c2:e5:
                    a6:1f:d6:e9:20:52:1f:76:77:56:c5:39:0a:78:eb:
                    f8:2a:8a:f9:50:3d:16:60:e1:a6:5e:3d:1f:81:c3:
                    5d:29:bb:32:dd:33:5c:d3:18:b0:2c:79:54:25:4f:
                    9b:d2:d7:89:4b:d6:b0:b8:9a:a4:fd:78:3d:0f:47:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:96:AD:23:2D:C3:22:7B:6D:F0:9B:1B:3B:01:B6:20:D4:B6:E1:B1
            X509v3 Authority Key Identifier:
                keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b4:72:a6:77:99:15:3d:9d:59:6f:21:08:8d:8c:6a:24:89:
         8d:35:63:a9:e2:e5:7b:15:2d:a3:80:42:15:c3:df:c1:b3:9c:
         86:84:d7:6a:3f:e3:bc:96:7d:33:3f:2a:8a:fd:52:75:18:64:
         d4:89:e1:ff:55:83:13:97:d1:ed:1f:12:f9:b1:dc:53:8d:ea:
         54:88:eb:d4:32:18:36:c8:a4:21:97:8d:01:38:3c:84:61:4f:
         f4:8a:fa:c2:77:16:00:b7:61:73:ae:6c:57:3d:b4:0f:b5:e2:
         85:d1:eb:04:76:b1:bb:44:48:06:e5:0d:c3:a1:19:52:51:0c:
         04:e3:f3:8b:6b:77:3d:da:7e:cd:bc:67:57:aa:92:9f:5f:83:
         3f:78:74:dc:ab:70:b0:e9:81:75:28:22:75:84:d5:6d:f2:53:
         3a:74:49:15:83:da:5b:cb:3c:c5:58:f6:2c:88:9f:64:d8:d5:
         58:e0:3e:58:8a:de:98:f3:8f:06:3a:76:c0:8f:76:f6:0c:70:
         f3:66:73:dc:85:50:85:59:97:11:d0:5b:3a:8e:26:21:87:30:
         91:01:35:0a:3b:25:73:1e:fe:ef:bf:37:7b:ff:69:4a:19:c7:
         63:6e:6a:2f:f0:22:84:21:c1:2d:66:cd:eb:fc:05:88:c2:94:
         d5:e2:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:32 2024 by rpki-client on console-fra.rpki-client.org