Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File:                     1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier:          NA02Rw4wneTr/P1m9zf9etIgQtqnPE4OxY3SLwf7DKo=
Subject key identifier:   9D:C7:8A:77:D0:F5:4F:F8:C8:4D:E8:E2:67:43:03:84:6F:96:13:D6
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer:       /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial:       0193550879872742728C958A6915A2E4F239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number:          0C45
Signing time:             Fri 22 Nov 2024 18:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:38 +0000
Files and hashes:         1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: QQqOviE7ahysvlzzmcI8oA463MD9RQoj/NtMbg9czDk=)
                          2: 7NSq62DxzveRiKh-QbHyvq2QHB4.roa (hash: BTKpzLQjbzbghhlp4Nw52SzW+yrw12odGM/6g4X3MSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:79:87:27:42:72:8c:95:8a:69:15:a2:e4:f2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
        Validity
            Not Before: Nov 22 18:00:38 2024 GMT
            Not After : Nov 23 18:00:38 2024 GMT
        Subject: CN=9dc78a77d0f54ff8c84de8e2674303846f9613d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:eb:90:ec:e6:10:c5:be:a4:d6:a4:c0:95:
                    d5:e6:c2:29:47:85:64:4f:0f:da:ce:6e:00:64:19:
                    0d:0a:dc:c3:3a:fd:ad:8a:95:4d:ab:73:66:a4:b9:
                    7b:71:cd:e4:27:96:ea:f5:d3:0b:e1:5c:27:46:ff:
                    70:40:07:1b:db:dd:a8:07:c9:05:64:39:8c:58:70:
                    10:20:94:6c:7e:26:21:cc:9d:e3:80:6e:8b:1e:0c:
                    31:a9:cc:35:21:a6:2c:8b:3b:29:bf:2f:e3:c8:c2:
                    de:1f:61:0a:48:50:8b:19:22:4f:6e:af:2e:20:c8:
                    c0:86:cc:00:a9:9f:43:14:4b:b8:96:3e:6d:68:90:
                    51:9b:ee:b2:63:3f:e2:d6:6f:c5:67:fa:f7:47:4d:
                    f2:ab:b1:c4:57:cd:cb:f9:06:f9:1e:9b:38:f1:42:
                    6a:7a:6c:1a:05:fd:c5:d2:58:db:dc:74:2f:b4:ab:
                    0d:f1:38:8e:49:00:98:39:5c:e3:3a:31:46:ed:5c:
                    b5:e7:fb:38:a7:60:26:6b:85:d6:e8:51:5d:c4:ea:
                    f7:78:38:bc:97:df:eb:95:5d:9b:d2:c6:e3:90:7b:
                    77:b6:4f:a3:ce:8f:06:bc:56:7a:c9:35:eb:1c:ea:
                    77:2f:27:3f:e9:4d:84:99:75:29:cc:6d:9b:51:ae:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C7:8A:77:D0:F5:4F:F8:C8:4D:E8:E2:67:43:03:84:6F:96:13:D6
            X509v3 Authority Key Identifier:
                keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c3:73:a4:7e:1e:12:68:41:3a:a1:ea:1b:cc:b4:0b:bb:12:
         40:1e:6c:d5:ad:4c:e4:d3:ab:39:e2:1c:62:a6:79:43:3c:2f:
         30:84:6c:a4:55:89:f2:c6:46:6e:04:3c:ed:cb:58:aa:b5:d4:
         16:b1:4b:87:b5:35:e0:61:81:75:03:88:ee:e1:2f:0d:db:a4:
         42:6f:91:d1:32:a7:d4:73:2f:f0:5d:43:52:19:d1:43:91:fe:
         56:e6:7d:05:6a:37:c5:89:65:7a:91:4c:05:8a:4c:51:31:36:
         0f:11:60:aa:dc:1c:d9:a5:a2:d0:60:48:52:e6:ca:21:19:54:
         37:42:af:7b:93:b3:42:68:23:fe:f5:98:8f:c2:96:02:0f:96:
         7a:9b:3d:4a:ff:c7:57:55:29:02:4e:8b:5a:3b:3a:bc:55:61:
         68:c5:0d:f5:e2:b5:6a:91:51:81:7d:61:ab:16:cf:2a:ae:4f:
         e2:50:9d:24:d6:62:aa:db:1a:5b:37:f7:1b:bf:3f:85:fd:00:
         98:fd:b3:c3:ba:6c:69:d6:ac:a7:13:3c:83:be:43:0a:41:d6:
         33:34:45:62:83:cf:60:bb:f2:de:e7:fd:3f:54:33:4d:5b:30:
         5d:ce:ec:b6:be:51:63:26:a0:2e:03:4a:30:a0:c6:7a:7f:16:
         9e:d6:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:00 2024 by rpki-client on console-fra.rpki-client.org