Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File:                     zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier:          w5RhUPeuXlMZvQvt29c4OxSQh58P/Kzix2LBCG8ttk4=
Subject key identifier:   DE:31:35:DF:8E:19:02:2D:AC:25:B0:7A:F1:78:A4:D0:0A:9B:01:D2
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       0193572DED1493A21E080DCC28B715022580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number:          10B1
Signing time:             Sat 23 Nov 2024 04:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:47 +0000
Files and hashes:         1: dl-m_Gf9P9_RzrBSs90rS5zcn0U.roa (hash: 70WZFo64eRdtbnvYLgNcjAvEUcUgmK3h+OXsnDFiGNk=)
                          2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: jS/wVXhhwRd0SUBfexC3ufGMR8+bDQp2myIe9vqhbwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ed:14:93:a2:1e:08:0d:cc:28:b7:15:02:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Nov 23 04:00:47 2024 GMT
            Not After : Nov 24 04:00:47 2024 GMT
        Subject: CN=de3135df8e19022dac25b07af178a4d00a9b01d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:00:a2:83:9b:94:22:e9:e4:95:20:0e:ed:
                    a4:f8:4d:45:a8:ce:e9:ef:68:14:5f:1a:d1:44:8b:
                    c4:2e:54:67:a9:bd:aa:4f:87:7f:6a:5b:32:ea:56:
                    0a:09:c8:6f:22:8a:6e:e4:85:bd:20:19:55:8c:b6:
                    9d:a5:5f:0e:97:f8:59:3f:78:59:43:a9:d9:48:60:
                    10:ae:e8:17:c7:af:ac:6d:dc:4d:04:e1:14:8e:88:
                    5b:c2:01:5b:7b:29:11:17:fa:9b:20:9f:c8:8e:42:
                    0f:41:7c:41:88:cc:a1:74:05:dd:d7:2f:05:00:b2:
                    00:89:5b:bc:e5:27:dd:64:13:26:2c:19:43:92:4f:
                    65:1e:82:87:4c:ba:42:b3:ca:98:59:20:7d:eb:cd:
                    f2:99:79:7a:a0:8e:63:38:2d:7f:89:72:5e:5b:f0:
                    fb:92:a5:ac:60:18:5f:8f:54:f1:76:6b:7c:cf:89:
                    10:39:ca:9a:45:f5:b3:0a:fd:d3:dd:95:35:2f:2d:
                    57:59:68:42:7e:11:e8:3b:f5:4e:d9:30:37:af:42:
                    6b:84:95:eb:60:73:2f:43:dc:3a:2f:87:88:91:48:
                    55:c0:df:22:5c:77:bd:78:4b:f3:bc:5c:41:90:f0:
                    68:5d:e0:f7:95:f0:19:c2:16:89:6e:70:16:98:fa:
                    8c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:31:35:DF:8E:19:02:2D:AC:25:B0:7A:F1:78:A4:D0:0A:9B:01:D2
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f5:2f:f1:1e:20:09:fd:7e:72:b3:20:01:71:ef:14:0f:09:
         75:84:c7:c3:0d:a3:bb:0c:41:c6:64:49:7f:a1:a9:16:9a:43:
         d7:b9:dc:05:47:65:39:ae:38:bb:c9:18:5f:41:96:c9:e9:5f:
         51:b4:95:10:a3:7f:d4:1d:5f:0e:6e:74:6d:2c:0d:10:a5:de:
         ab:5a:c9:31:f7:6f:88:95:21:85:56:27:6d:b0:a2:4d:0d:c7:
         8a:3f:fc:14:5b:c2:48:69:84:13:e3:f3:05:df:30:39:3e:42:
         f2:16:f2:6e:9d:87:38:83:6b:ae:ff:76:87:8c:11:04:56:50:
         6f:61:fe:d2:5a:cc:5d:d2:5e:fe:e9:94:bc:bf:c7:9f:86:f9:
         14:41:25:b1:0c:fa:78:b8:7f:88:79:43:59:7e:96:b6:36:7a:
         7b:40:13:b1:51:9c:a5:48:3e:cf:53:db:c7:c6:ae:40:1e:66:
         84:25:f4:d2:28:09:f7:1a:4c:f3:dd:f2:06:2a:91:b1:68:8f:
         d9:e0:03:f5:de:36:30:81:14:a7:96:91:58:03:a6:11:96:c7:
         14:fa:8e:4d:63:f3:11:9d:e4:ee:73:4d:3c:97:8d:67:d4:ba:
         2b:af:a4:e6:c4:54:11:75:a6:ff:58:aa:78:a0:0d:05:53:64:
         0c:17:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:04 2024 by rpki-client on console-fra.rpki-client.org