Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File:                     Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier:          OVSEqDjuclNoBCejv3iXhyf8JEzZMp1Ko+vHlzrhI8w=
Subject key identifier:   54:73:48:36:EA:9C:88:DA:B1:03:71:E8:F0:4B:C8:B5:5A:A7:30:A9
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer:       /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial:       01936AEBA97BB13AE6A7DEBFEE82EA901350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number:          0A3D
Signing time:             Wed 27 Nov 2024 00:00:49 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:49 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:49 +0000
Files and hashes:         1: XD2s1aPZieUG4AOMjoNPvtWE2jo.roa (hash: yyKrQoNUprsNO97Eb9WG+ppUaCfJkSqXKK2kQdEbMNg=)
                          2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: lyvUs4RoLQNZT1jVGyN7Wue02nxagFZdmLUewq1OO+c=)
                          3: iFard6KPi6-vl0l4epXsTmCeQNs.roa (hash: OTyPrn7CnG4shUzkYEHV0yck5EUfpEXH8nILgsplKDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:a9:7b:b1:3a:e6:a7:de:bf:ee:82:ea:90:13:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
        Validity
            Not Before: Nov 27 00:00:49 2024 GMT
            Not After : Nov 28 00:00:49 2024 GMT
        Subject: CN=54734836ea9c88dab10371e8f04bc8b55aa730a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:12:ac:7a:49:f5:1a:9a:3e:b3:14:74:f2:
                    d7:64:db:33:b3:fe:a1:cd:33:52:a1:dd:62:fe:1e:
                    4c:cd:0d:8e:dd:d2:38:7e:63:86:55:da:31:c9:6f:
                    19:a8:71:39:73:ed:6a:8d:2f:5e:5d:00:35:10:e0:
                    ac:11:83:e1:83:4f:b2:82:fe:df:b0:67:6a:54:84:
                    ac:e9:52:ed:79:c7:0d:8f:fe:49:fb:43:62:6c:a7:
                    5a:a7:0f:a7:b5:05:ec:2d:18:13:d9:e2:9d:56:65:
                    83:97:f4:12:2e:89:81:77:f6:cd:53:78:15:d2:79:
                    a4:d9:f5:1d:eb:24:8a:62:be:91:be:b3:ba:f4:28:
                    47:74:7a:f1:b5:8b:10:c6:35:0e:4c:49:f2:a6:b4:
                    63:f2:ec:21:90:fb:60:cb:8d:4c:f2:43:11:33:92:
                    22:6b:b8:5f:f6:26:34:de:4f:3d:43:1b:4f:f0:16:
                    ca:6d:02:c3:70:b8:c7:44:fc:37:0f:00:e2:f1:e3:
                    7b:22:bf:33:d2:d5:d8:cb:0c:36:68:ea:97:99:f0:
                    30:fd:d6:3a:91:cf:a5:e3:36:5c:4e:0a:5b:01:de:
                    ba:87:3a:ff:d6:32:3b:64:ab:68:3c:11:27:5e:1a:
                    2e:9a:06:2d:67:f7:56:9d:89:55:f2:c7:59:8a:cc:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:73:48:36:EA:9C:88:DA:B1:03:71:E8:F0:4B:C8:B5:5A:A7:30:A9
            X509v3 Authority Key Identifier:
                keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:76:47:7c:30:49:dc:ff:be:2d:52:9c:b5:ba:74:0b:ca:16:
         9d:89:ea:88:43:20:04:2b:84:0e:b9:70:c1:04:dc:9f:9e:f0:
         aa:ea:54:92:18:2c:64:d0:cd:b1:c5:35:4a:d2:8b:1f:b4:5f:
         93:b0:7b:58:b6:51:64:0f:c1:b6:cb:49:21:91:27:22:87:b1:
         ba:bf:b9:cc:86:b1:99:28:ed:60:e9:73:a5:ad:eb:c1:1f:9a:
         a0:73:86:10:b5:21:d0:99:17:c8:2c:d9:f4:33:ef:93:c9:e3:
         a7:db:3d:ee:d2:96:3f:a5:6e:d7:5a:dd:ff:a9:4b:e7:41:e0:
         16:65:a9:5e:c2:d4:c8:02:a8:53:d5:62:d9:5e:08:a0:a8:62:
         68:94:b4:4f:d8:45:c8:fb:56:24:b9:20:6d:b9:d5:89:72:cf:
         f9:2e:54:7c:ff:2b:87:ce:45:8d:07:e8:38:52:6b:03:a0:9a:
         be:0b:0d:58:2a:0f:04:e5:66:25:69:46:3c:17:53:02:8b:af:
         4d:ab:1a:12:80:ba:7f:9b:09:0c:0b:2f:8c:fa:0b:92:35:9c:
         67:c5:24:f6:bd:85:ff:d1:a0:0e:a3:13:0e:fc:0e:8a:42:35:
         7e:0e:a7:17:36:57:3a:0a:96:c9:50:0b:59:8b:cb:c9:ea:fd:
         16:c8:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:25 2024 by rpki-client on console-ams.rpki-client.org