Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File:                     ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier:          X9XRU1qCSczJ9FHT+buk+fdBjzjoxDOxkwm2e9xiiK4=
Subject key identifier:   BF:CF:DB:CB:33:8A:9F:00:4E:D1:EE:17:6A:4C:AC:3F:B0:B7:25:83
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer:       /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial:       01935689126D33C2BAA9D26EB74B93EFA1C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number:          1304
Signing time:             Sat 23 Nov 2024 01:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:43 +0000
Files and hashes:         1: IWauoYmEpj6N8ESc_tuw5Ffyyts.roa (hash: sAOAnqIUoVUa0hvL3w6UftpjebkKRA9n9wzODudi57w=)
                          2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: keeoiNuN/D/jBAYuNM0Q5irDeg0nQiyfPheXl0bpKZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:12:6d:33:c2:ba:a9:d2:6e:b7:4b:93:ef:a1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
        Validity
            Not Before: Nov 23 01:00:43 2024 GMT
            Not After : Nov 24 01:00:43 2024 GMT
        Subject: CN=bfcfdbcb338a9f004ed1ee176a4cac3fb0b72583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:67:44:ea:28:c3:b2:f9:cf:e2:28:1c:d1:
                    d6:08:28:2b:f5:07:8b:01:cb:c1:bb:e7:c2:ed:36:
                    74:f6:ae:2f:66:09:8e:5e:a7:2c:b7:d6:61:ec:10:
                    04:3b:15:10:7c:99:d7:35:c8:27:40:9e:20:31:3e:
                    30:4a:f3:b6:27:2a:d8:a8:a3:f2:72:dd:36:85:16:
                    47:73:dd:19:02:3d:00:69:24:50:92:f4:d0:6e:1e:
                    c0:66:f6:f9:fb:d0:36:39:3c:49:4e:0e:a4:34:11:
                    9d:f9:c8:89:bf:76:b4:a4:70:8a:ae:ba:46:c9:08:
                    ea:a4:28:b7:b3:25:f7:63:34:29:f9:ea:3b:ca:cd:
                    d0:55:c0:66:b4:b0:04:d7:08:b9:c7:e1:34:2d:0b:
                    db:ee:d3:20:8c:10:7d:8b:95:5f:5b:65:40:43:d3:
                    9d:58:f8:a6:97:16:be:4e:30:49:4c:b3:bc:fc:d6:
                    95:72:ee:3c:9e:80:2d:f3:08:2b:e1:08:ae:02:5d:
                    ab:5c:b4:de:a4:f6:6a:d0:d4:9d:a7:fb:7e:fc:2f:
                    57:3a:ea:fe:45:6b:03:05:b2:17:4c:ae:6f:e4:02:
                    c4:da:29:a0:0a:96:52:26:b9:8b:2e:94:2e:eb:f1:
                    81:5c:01:34:29:56:90:4e:72:90:50:b2:6a:80:77:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CF:DB:CB:33:8A:9F:00:4E:D1:EE:17:6A:4C:AC:3F:B0:B7:25:83
            X509v3 Authority Key Identifier:
                keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4c:77:08:e4:82:3b:8e:dc:90:09:7d:df:44:8f:f5:f0:20:
         78:3e:29:8f:fe:eb:a5:56:8a:e8:ac:46:8f:be:0d:f3:6e:83:
         b9:bb:4b:d2:d8:ed:f1:12:b2:69:79:fa:7a:51:05:0f:c0:5e:
         2c:6e:8c:db:25:fc:94:7a:b7:52:9f:0b:36:7b:cb:96:0f:fa:
         53:fe:da:b9:f7:ac:bb:f7:42:a5:2a:28:b7:38:c8:50:cf:15:
         af:5c:d8:c2:51:28:db:8c:26:d1:0e:6d:fe:68:a5:b1:fd:a1:
         67:60:56:9d:f8:ac:ca:6a:69:ed:49:22:16:92:e1:12:13:29:
         be:fb:80:fa:f4:99:73:b8:13:fa:f8:c1:c3:80:61:0f:51:95:
         af:b8:25:b3:32:4c:dc:95:84:e4:b2:42:6e:53:fc:fa:b9:d6:
         d9:34:0e:73:dd:66:12:ff:6c:81:9b:7d:ce:e8:00:f1:be:8d:
         16:88:bc:8e:10:ef:eb:07:53:57:d3:79:d8:10:43:30:67:d5:
         d4:32:80:eb:22:e2:1f:67:e6:fa:9b:f3:1e:6c:28:57:0a:20:
         f7:5f:63:87:f3:39:cd:f5:08:a6:da:4b:d1:c4:40:81:1a:33:
         da:f1:ff:45:0c:7a:8a:54:6d:2a:84:91:9e:b9:ca:79:24:0c:
         0e:12:1a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:21 2024 by rpki-client on console-fra.rpki-client.org