Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.mft
File:                     zdvvuo_jwfZoyERDhP5KOp9Nh_E.mft (raw, json)
Hash identifier:          iL10pdyFgu/CDhhj/wJZuHQhiKsneop5vMxZnvNfAnM=
Subject key identifier:   59:E4:43:DA:FF:11:22:0A:09:0B:0F:80:B2:F8:18:2A:8D:9E:AA:CF
Authority key identifier: CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
Certificate issuer:       /CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Certificate serial:       019353F5EA28A81AE059706B55715FC811B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.mft
Manifest number:          0AA3
Signing time:             Fri 22 Nov 2024 13:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:45 +0000
Files and hashes:         1: 7v9KFCSmYjbkbClTBOav2jGPsig.roa (hash: 9AHeh7FMCIF/CBpiS6QIhQdisxb2ftPnnUkW0JJ1L7s=)
                          2: ICFZx8buV13NvzPbHrZ9ckfacKc.roa (hash: K5Z5yLxM8knCLM6EYD6Y20yOvb4Uww7tWqYwqWI0IYU=)
                          3: K7JepbggFw6FHtzzsyCHRx1wgDY.roa (hash: RZ93qjNRsZrojjbElXcs0o7jI/WxonLwtO/bnPfJ39Q=)
                          4: NGODsLdZ5tVyqZ0U0spcYPzQvBU.roa (hash: MkIoJXVsZV20CBynpmqPSE9q89SXeLTUilG1Lb/Dge8=)
                          5: UaLbJJk30tiK6NECrQuIeAhgs0c.roa (hash: YjyIpEJd9G/Cr80XZ8H2u0eNjVlNEvYJQKpFRwgij5c=)
                          6: Yl_O8i6Phgd0ZXpiscHltRWejaE.roa (hash: OTnbhrjrZJfNvY1CssHcnB33u4evkQ6MCiEFQz0p4LA=)
                          7: amjso0MQmioLfkj9pt_TQTg1lLI.roa (hash: gTOUMHapKImOSKuVmzSj5KbXTy+Qk0xWdJxDhvBmBlI=)
                          8: uo9E2UfmyvboZfuNEfniNurBsNQ.roa (hash: nSe2kOSCs6nI8bxg3EmeTgpSlUayoOdARNrvJ9mpHMc=)
                          9: zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl (hash: zCeESCKzySkPmJvMT+4X5H9LGC+ue2f32d8aFWutXog=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:ea:28:a8:1a:e0:59:70:6b:55:71:5f:c8:11:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
        Validity
            Not Before: Nov 22 13:00:45 2024 GMT
            Not After : Nov 23 13:00:45 2024 GMT
        Subject: CN=59e443daff11220a090b0f80b2f8182a8d9eaacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:66:e8:66:8b:03:d4:bf:15:71:3c:c8:34:
                    00:f4:72:49:87:e7:2d:86:b4:1f:ef:fb:7a:57:cd:
                    47:f7:87:85:8e:55:ee:af:f3:de:5e:7d:d1:a7:87:
                    e7:e4:97:11:3b:d4:77:cf:c4:37:32:2f:da:e7:a3:
                    69:79:c8:ba:ea:f3:d0:30:42:90:19:33:3a:ec:6f:
                    42:59:51:ca:65:1d:0c:0e:ca:6c:1a:c9:e4:fb:75:
                    53:4a:2a:89:42:ae:1a:7f:0a:60:fe:da:ae:9b:dd:
                    43:ce:a7:ad:08:17:4b:2a:73:3a:04:78:19:23:ca:
                    19:e7:cc:55:21:a1:a2:b4:2a:c1:41:e6:df:8b:a1:
                    08:fe:ff:1a:f7:9b:e4:e7:8e:f1:2e:88:ce:bc:a9:
                    3a:97:e9:60:cd:99:53:f6:79:71:48:f0:d4:57:1e:
                    f5:23:4b:fd:12:91:ff:3d:84:e7:08:d8:82:48:6a:
                    45:6c:19:51:e7:a9:38:5c:0a:e9:1b:93:88:0e:15:
                    7d:8c:c0:3b:ef:76:1a:45:9d:c0:00:1c:9e:34:1d:
                    d7:b0:d2:3e:11:d5:32:39:6a:de:01:5a:56:b0:51:
                    03:39:9f:8f:93:c9:0f:41:dc:dc:77:f1:6e:00:f3:
                    17:85:90:33:df:c4:11:6d:bb:1f:42:28:22:e5:0c:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:43:DA:FF:11:22:0A:09:0B:0F:80:B2:F8:18:2A:8D:9E:AA:CF
            X509v3 Authority Key Identifier:
                keyid:CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:07:9e:5a:0b:ad:2b:ae:c8:4d:1a:42:7a:2c:5d:b9:f5:df:
         5a:43:2f:48:e5:cd:75:06:2a:a4:3a:55:b7:6a:ad:f4:1e:1b:
         f4:4b:79:49:a5:92:59:40:08:e3:98:3d:83:e8:24:ae:f6:31:
         37:81:f6:6a:4c:21:89:41:49:77:60:f6:55:6a:bd:44:96:95:
         f0:31:87:99:c4:a2:89:fd:31:96:14:12:52:e7:67:5f:15:d4:
         cf:13:5d:47:dd:15:e5:83:42:1b:65:42:a1:88:38:58:d8:75:
         5a:c3:39:29:d9:77:9a:9f:24:83:2d:4d:fc:2f:b2:03:8b:92:
         19:02:cf:d4:e8:30:0f:93:cb:fb:cd:7a:99:57:88:75:ef:7d:
         57:10:17:94:06:01:b6:0b:9e:39:bc:77:e9:79:a5:df:ce:07:
         fd:84:24:47:2e:c1:9d:27:9e:37:4f:5f:63:81:ae:9b:6e:41:
         b0:ab:0b:13:b2:d6:47:9d:b0:14:f8:01:76:7e:3c:d8:f3:0d:
         cf:e3:b5:16:83:6b:9b:71:b3:6a:ed:d5:a5:b7:f1:c8:b1:f1:
         6f:be:fa:29:bb:dd:cc:fd:88:87:bb:e6:54:94:8a:b2:47:41:
         c6:78:e3:7e:a1:45:d6:78:ff:e5:8b:d2:10:e5:b7:b8:c9:0a:
         dc:a1:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:36:38 2024 by rpki-client on console-ams.rpki-client.org