Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft
File:                     zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft (raw, json)
Hash identifier:          ydm08krozNTyWnVvmXpveDE4TOFqbluKZabmosNWtuw=
Subject key identifier:   34:75:BE:74:D2:32:0A:C2:11:73:37:EF:0C:FF:C4:BD:91:BE:5A:CF
Authority key identifier: CF:3E:43:BE:E2:71:18:24:39:5A:39:C9:14:18:DE:EA:4C:1F:34:7B
Certificate issuer:       /CN=cf3e43bee2711824395a39c91418deea4c1f347b
Certificate serial:       0191FA7E0EF4EE1D112A2EE66C3ACDDE23AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zz5DvuJxGCQ5WjnJFBje6kwfNHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft
Manifest number:          014F
Signing time:             Mon 16 Sep 2024 11:00:50 +0000
Manifest this update:     Mon 16 Sep 2024 11:00:50 +0000
Manifest next update:     Tue 17 Sep 2024 11:00:50 +0000
Files and hashes:         1: Qzvu7PtIl1Hwru4XOoi3Ryg2E3Y.roa (hash: nz5/E4Uk4pl2lKGbKU/CwfwYfs16n7NbnztN54IVwGc=)
                          2: zz5DvuJxGCQ5WjnJFBje6kwfNHs.crl (hash: gAn887yjyvQZ/nyBuqj2ewkbkGMUVFUTeuyAIaPaoeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zz5DvuJxGCQ5WjnJFBje6kwfNHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:0e:f4:ee:1d:11:2a:2e:e6:6c:3a:cd:de:23:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf3e43bee2711824395a39c91418deea4c1f347b
        Validity
            Not Before: Sep 16 11:00:50 2024 GMT
            Not After : Sep 17 11:00:50 2024 GMT
        Subject: CN=3475be74d2320ac2117337ef0cffc4bd91be5acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:e9:e5:00:3f:c4:de:44:f0:bb:60:bd:95:
                    48:60:1f:92:79:d0:b8:1b:0b:d8:6e:3c:45:2b:b6:
                    9e:8e:99:9f:fd:8e:8c:ce:cc:7b:67:91:c6:b7:65:
                    c6:0a:7d:1e:99:0c:b6:34:5f:fc:57:c5:4a:b7:ae:
                    23:34:c0:74:24:74:16:62:76:4d:81:ab:45:da:9e:
                    fc:0c:0b:7b:a3:7c:28:bc:7b:bf:46:39:70:fa:72:
                    06:f7:53:fc:0f:d2:8b:de:84:0f:a3:9c:56:c5:fc:
                    aa:64:9e:e2:66:01:b3:bd:9d:40:fc:e5:55:97:1e:
                    de:34:9c:29:92:6e:a4:1b:2d:7c:8e:b6:c1:99:15:
                    5a:81:cb:41:87:ae:ea:0f:94:ca:9a:ed:a5:c4:c8:
                    88:08:bb:fd:c9:ee:5d:55:55:f8:fa:96:98:49:3a:
                    a2:a3:0c:c3:6f:42:44:e1:11:fc:4f:88:be:e2:05:
                    62:d4:ee:e8:70:0d:56:81:cb:ba:74:b7:97:c4:c0:
                    7f:ab:13:df:ac:df:10:34:c1:b8:a5:18:52:3b:d2:
                    f5:02:1d:33:e4:fc:4a:c8:f8:26:dc:11:7f:03:1b:
                    15:da:d8:c9:40:a4:b1:45:b6:3d:bf:81:70:60:b5:
                    ed:2f:33:4f:2b:71:6f:bc:78:26:57:62:8a:a6:49:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:BE:74:D2:32:0A:C2:11:73:37:EF:0C:FF:C4:BD:91:BE:5A:CF
            X509v3 Authority Key Identifier:
                keyid:CF:3E:43:BE:E2:71:18:24:39:5A:39:C9:14:18:DE:EA:4C:1F:34:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zz5DvuJxGCQ5WjnJFBje6kwfNHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3a:72:0a:54:db:af:d2:0a:0b:05:19:cc:de:24:80:c9:f1:
         b3:70:6c:b0:38:1b:7d:ab:69:29:d3:80:bf:0d:55:cd:f2:68:
         4d:ca:00:0c:91:05:92:5d:fe:ec:00:22:21:f2:3e:02:4b:28:
         7f:92:9c:73:34:1e:f3:6d:b0:c0:eb:f6:54:2b:53:f0:a0:13:
         9f:b4:e0:30:48:f5:6c:a5:c1:0c:23:fe:fe:4f:f7:f0:92:0f:
         cd:8c:f1:72:de:39:ba:46:19:ce:5a:6f:f7:e8:7c:45:76:2e:
         11:30:93:5c:ee:32:55:46:8d:0e:88:7b:e8:21:67:46:84:e5:
         b8:d1:3a:26:6b:be:f3:cc:c4:f4:d4:38:44:8c:29:ba:3f:d6:
         26:58:7d:7a:a4:fe:3a:92:07:c3:aa:de:9b:e5:54:ac:cd:c0:
         c0:2b:5a:9b:88:8c:36:23:3a:53:90:45:1c:68:35:a4:15:91:
         59:e1:95:26:be:e1:2d:af:ca:da:5d:42:2f:de:51:c2:3a:b5:
         55:88:0a:67:46:c7:3a:b8:aa:9f:4d:67:36:cf:73:49:76:c7:
         67:15:17:24:c7:c1:1f:be:d2:71:e4:d1:60:fc:2f:be:2f:ed:
         a7:9f:e0:43:c5:ad:e1:ce:05:e2:c7:ff:c3:d0:c6:1f:44:93:
         04:3b:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:17:00 2024 by rpki-client on console-fra.rpki-client.org