Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          zTNLmVp1k9avLbs6W8frizQY5t6qA5S6e52CHLaE05E=
Subject key identifier:   4B:82:45:4C:9E:B4:D1:47:51:F2:7F:67:0C:0F:E9:86:34:66:26:70
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       019352ACA01E0DEF2404C454BC076B21D8CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          0E8E
Signing time:             Fri 22 Nov 2024 07:01:05 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:05 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:05 +0000
Files and hashes:         1: CYiPvrXiDA5WP9aHtlJHSkuRKS0.roa (hash: Tq1/d6zCRvzGSdLQKeBiPOSU9R+LO/ENCLYwG6r9AJw=)
                          2: In7rLnISMOG6zDg8Tw3L7xnnNZk.roa (hash: 6ERjF6s+MI3mdMg4UgVe0qrNBf2TbBxwJUma98PIg+4=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: 3qubtJFeOdai2WYZw/TVR7rE2PzxrS+qHoN/5ektFOQ=)
                          4: q0Uk5ClVTWHxHz2_hqET9KmDDoQ.roa (hash: mvgGdXSJsk/p0bbGP42fNw3FNKrLafML+OfuUnF9WaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:a0:1e:0d:ef:24:04:c4:54:bc:07:6b:21:d8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Nov 22 07:01:05 2024 GMT
            Not After : Nov 23 07:01:05 2024 GMT
        Subject: CN=4b82454c9eb4d14751f27f670c0fe98634662670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:6b:87:0f:00:6a:bd:1f:60:56:bd:80:c9:
                    48:1e:ca:9c:92:3b:97:a6:fc:9a:69:fe:94:53:63:
                    94:27:65:89:c4:b0:1a:83:8a:cf:f8:ea:12:95:40:
                    5b:bb:60:b3:7e:23:a2:6c:11:2e:4d:e0:ec:db:98:
                    9e:92:55:bf:46:fc:02:d8:08:4f:e9:ae:22:c9:17:
                    73:fb:36:40:5b:aa:2f:71:ad:cd:1b:12:ec:07:94:
                    5c:f4:80:a4:de:02:00:74:50:f1:5e:38:89:18:4b:
                    eb:da:8d:e8:17:75:b3:78:a0:cc:8c:da:19:fe:cd:
                    7a:fa:94:2b:9d:4f:19:a0:de:6b:71:89:d2:24:13:
                    55:bc:dd:33:e1:65:07:08:d8:ba:c5:27:16:51:c9:
                    b6:18:9a:7d:6a:2d:0c:d1:5a:b8:fe:b5:4d:b0:84:
                    8a:e0:57:15:49:69:0f:22:a0:08:f3:b4:51:0d:5e:
                    19:c0:45:3c:eb:fe:3e:fc:cd:75:3d:c6:1d:85:3a:
                    29:0c:8e:99:24:94:1e:1d:97:2d:40:d1:6f:73:23:
                    16:00:78:03:50:5d:11:69:d7:ac:de:9b:d4:3b:77:
                    a0:db:bf:5c:c3:1f:5a:db:9e:b1:1a:5d:8a:6b:e0:
                    e3:9c:51:bd:7d:c9:0a:18:48:60:6c:22:d3:87:d0:
                    a3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:45:4C:9E:B4:D1:47:51:F2:7F:67:0C:0F:E9:86:34:66:26:70
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:45:45:79:ca:49:c1:af:ce:8a:e1:8e:a1:9f:73:91:07:
         23:0b:18:c2:04:87:f9:63:13:24:94:87:2d:95:73:c5:94:f9:
         4f:ce:9b:77:68:05:3a:ad:15:1b:1f:c2:55:1c:d6:9d:f7:2e:
         63:9d:66:b8:df:17:ec:26:65:66:7e:81:27:99:48:a2:d6:6c:
         71:b1:f5:6e:a2:09:57:68:bd:fd:51:96:ca:68:80:8f:32:17:
         12:76:b4:6b:ca:fd:4c:70:28:25:7a:d7:ec:bf:00:6d:4b:80:
         7f:ab:41:92:8c:45:6c:0c:0b:00:07:4b:e5:fc:bf:8a:06:9d:
         f7:9a:cd:90:fa:9e:50:f1:47:00:7f:3d:34:13:91:fd:69:66:
         84:2c:05:68:c3:cc:98:41:f5:8c:f9:23:fe:9d:00:66:d8:c3:
         50:fd:b1:e6:fc:ab:11:07:c7:22:3b:06:65:e3:df:67:76:dd:
         b5:38:12:47:bf:13:5a:3f:40:fd:33:7f:4e:5a:70:7a:ae:7d:
         a3:57:79:96:75:8f:c5:f3:a4:1c:fd:d4:3a:e0:2a:e9:0b:ce:
         0b:be:20:3b:c9:40:48:c2:4e:fc:48:39:84:31:94:1b:82:37:
         ae:bb:2d:bf:ee:75:49:d5:31:62:53:c4:c6:ae:bb:4b:e0:5d:
         58:0f:32:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrKAeDe8kBMRUvAdrIdjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5
MGMxNTcwHhcNMjQxMTIyMDcwMTA1WhcNMjQxMTIzMDcwMTA1WjAzMTEwLwYDVQQD
Eyg0YjgyNDU0YzllYjRkMTQ3NTFmMjdmNjcwYzBmZTk4NjM0NjYyNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/hrhw8Aar0fYFa9gMlIHsqckjuX
pvyaaf6UU2OUJ2WJxLAag4rP+OoSlUBbu2CzfiOibBEuTeDs25ieklW/RvwC2AhP
6a4iyRdz+zZAW6ovca3NGxLsB5Rc9ICk3gIAdFDxXjiJGEvr2o3oF3WzeKDMjNoZ
/s16+pQrnU8ZoN5rcYnSJBNVvN0z4WUHCNi6xScWUcm2GJp9ai0M0Vq4/rVNsISK
4FcVSWkPIqAI87RRDV4ZwEU86/4+/M11PcYdhTopDI6ZJJQeHZctQNFvcyMWAHgD
UF0Rades3pvUO3eg279cwx9a256xGl2Ka+DjnFG9fckKGEhgbCLTh9Cj/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuCRUyetNFHUfJ/ZwwP6YY0ZiZwMB8GA1UdIwQY
MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt
ZTAzNGY2NWU3ZjYwLzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw
LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpJFRXnK
ScGvzorhjqGfc5EHIwsYwgSH+WMTJJSHLZVzxZT5T86bd2gFOq0VGx/CVRzWnfcu
Y51muN8X7CZlZn6BJ5lIotZscbH1bqIJV2i9/VGWymiAjzIXEna0a8r9THAoJXrX
7L8AbUuAf6tBkoxFbAwLAAdL5fy/igad95rNkPqeUPFHAH89NBOR/WlmhCwFaMPM
mEH1jPkj/p0AZtjDUP2x5vyrEQfHIjsGZePfZ3bdtTgSR78TWj9A/TN/Tlpweq59
o1d5lnWPxfOkHP3UOuAq6QvOC74gO8lASMJO/Eg5hDGUG4I3rrstv+51SdUxYlPE
xq67S+BdWA8yGg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:17:04 2024 by rpki-client on console-fra.rpki-client.org