Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File:                     zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier:          O0AsbngbJvveI577NO/3YLuxdDGNo7E6yDuA6OyHpcY=
Subject key identifier:   2C:BF:32:3D:92:8C:92:A7:57:4C:3E:5D:66:B5:C9:DE:81:99:C2:D1
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer:       /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial:       019356F66C2EEA8447B5218BD9F58045A063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:10 +0000
Files and hashes:         1: tP-gAboXIN_dOcXTjLDM6rtzLWE.roa (hash: yhgkm5V2qbgk9cLP8LCu1A21wezn5xKcbq90bxrbA5o=)
                          2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: y7N3ZMKgqDruWNPVnNkdq6NadpLI7cyd6ELgeLkLpAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:6c:2e:ea:84:47:b5:21:8b:d9:f5:80:45:a0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
        Validity
            Not Before: Nov 23 03:00:10 2024 GMT
            Not After : Nov 24 03:00:10 2024 GMT
        Subject: CN=2cbf323d928c92a7574c3e5d66b5c9de8199c2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:89:7f:fc:11:1f:a5:88:df:ac:95:5e:1a:
                    30:b9:7b:e6:ba:91:62:c7:8b:d3:00:b0:e8:cd:0e:
                    80:ba:2a:e5:be:45:df:08:ea:67:6d:64:33:8a:1a:
                    dc:7d:f6:83:09:85:02:7a:85:71:ec:77:c1:51:2c:
                    8a:f6:4d:70:92:83:67:ec:bd:2c:aa:b6:8c:9f:d7:
                    45:09:6f:c9:48:73:5b:b6:89:41:1f:64:54:98:c7:
                    68:34:66:72:40:e1:e8:e9:b0:e5:05:a8:ea:8d:c6:
                    37:b3:49:23:75:9d:02:d6:22:09:f5:0e:8b:8c:15:
                    eb:44:9c:19:89:98:04:bf:1b:11:7e:c1:87:c3:32:
                    2c:dd:51:e6:dc:e0:7d:2c:dc:64:ae:1b:cf:5b:2c:
                    43:2c:cc:d2:b2:33:d6:88:86:ba:4a:c7:51:1b:a8:
                    9e:3d:a0:fe:c9:da:2d:58:46:38:9e:ed:f2:d2:93:
                    15:07:2d:13:52:cb:52:b5:0f:8e:c9:e0:ed:ca:dc:
                    14:f7:bf:bc:d0:6d:a7:b1:5d:24:4a:d4:88:a0:f7:
                    b1:a0:53:f4:e4:86:ce:f0:59:59:6e:eb:3d:90:ff:
                    0c:c3:7f:89:46:4a:6d:24:c4:65:b5:44:ad:3f:0d:
                    e3:cd:9a:20:97:9e:f7:27:2b:ed:0f:83:cc:15:ef:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BF:32:3D:92:8C:92:A7:57:4C:3E:5D:66:B5:C9:DE:81:99:C2:D1
            X509v3 Authority Key Identifier:
                keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:97:e5:76:8c:e5:18:5e:22:68:22:20:16:1b:4e:52:5e:
         fa:25:8a:a2:5c:da:10:52:c1:03:ad:64:cd:af:12:e4:5e:e5:
         d6:74:9a:2e:d1:ad:34:d5:6c:79:00:68:c1:c1:31:ac:5c:f3:
         a0:28:a6:1c:25:da:1b:62:10:58:b4:43:76:58:16:a4:a2:e7:
         51:11:77:e7:c2:fa:c3:15:bb:67:86:97:22:02:24:25:69:c5:
         cc:b0:58:27:0e:7f:4d:89:8f:5c:2d:eb:74:90:f0:ea:b2:52:
         38:d7:ea:e0:82:34:51:b6:5b:ec:2c:d7:75:ea:eb:c0:db:14:
         70:35:11:72:68:94:27:81:8a:71:61:c8:1c:e6:dc:a2:b8:60:
         c0:8b:c4:9d:7d:62:0e:11:67:df:66:65:37:26:ae:f9:f8:67:
         74:8a:63:3c:b3:92:a4:0b:1e:12:d1:9d:3f:8b:fe:69:58:bf:
         cd:0b:01:cb:c6:40:3a:55:66:fa:00:91:9a:0c:99:95:fb:9d:
         f3:de:7a:52:40:eb:51:b5:81:a6:a8:1c:f2:1c:91:99:8a:0c:
         b9:d1:6f:bb:6b:eb:e4:82:f5:3e:f2:38:b2:6f:af:df:90:91:
         59:be:c4:24:c1:d4:21:dc:88:08:6a:68:28:0d:be:40:33:02:
         ab:73:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:02 2024 by rpki-client on console-fra.rpki-client.org