Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File:                     Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier:          FMWDl0faa8OwhTmN8DuVa4LPhAKMvv7++8lg1Cz/6vg=
Subject key identifier:   B9:CC:E6:7C:E2:33:EA:3E:1B:07:B4:07:37:06:99:DE:E7:37:B3:07
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer:       /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial:       019258B18F2EEA732A4078B3FCEBBA5AB8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number:          12EC
Signing time:             Fri 04 Oct 2024 18:01:24 +0000
Manifest this update:     Fri 04 Oct 2024 18:01:24 +0000
Manifest next update:     Sat 05 Oct 2024 18:01:24 +0000
Files and hashes:         1: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: q6RDqbZwfC+Ho2wG0CUhyO2JB4S/uNSTyA1Dm9IxCwc=)
                          2: hxF9Kc48XB1vNWhyTNi12TiTQsQ.roa (hash: D9Lyzwp70wAX0waLujEUTdmYlZzUvEUrMuUuP+3z5zo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Oct 2024 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:58:b1:8f:2e:ea:73:2a:40:78:b3:fc:eb:ba:5a:b8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
        Validity
            Not Before: Oct  4 18:01:24 2024 GMT
            Not After : Oct  5 18:01:24 2024 GMT
        Subject: CN=b9cce67ce233ea3e1b07b407370699dee737b307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:68:4f:60:c7:d1:3e:64:83:51:22:67:48:
                    14:f1:a4:d9:fe:42:80:c9:f0:ad:d5:50:6d:f6:74:
                    24:68:10:39:2c:10:cc:b2:90:8d:74:80:b5:a5:6b:
                    93:96:7c:d4:15:b2:2f:e3:5f:01:87:b1:8a:2e:66:
                    fa:79:dc:ac:64:c5:b9:3f:c0:91:8a:cd:dc:f8:43:
                    21:49:92:84:5c:ba:dd:50:3d:b1:5f:8d:6f:2a:52:
                    87:9a:7d:ca:60:66:dc:f8:a2:81:81:b7:73:8d:36:
                    b3:19:8c:a8:4c:50:5d:3e:7e:73:f5:fe:d2:45:b6:
                    48:ba:03:eb:d8:21:29:51:ff:cf:4b:e8:61:ec:70:
                    18:6d:e4:52:d5:aa:7e:15:13:27:c1:6a:01:06:90:
                    40:5b:04:9a:f1:64:cc:b9:d2:3b:08:ec:5f:de:63:
                    f9:95:49:3c:a6:76:9c:33:23:94:6e:84:e2:be:78:
                    ac:ac:ac:0d:be:c2:b9:01:27:62:ea:1b:1f:ef:ac:
                    61:ed:e2:2d:3a:85:24:d9:8b:80:ff:61:ce:e0:cb:
                    29:4f:91:6c:bb:b6:e6:1b:e4:d5:6a:17:71:81:14:
                    82:6e:d6:a3:20:65:d9:1c:e6:78:9e:96:09:63:24:
                    67:2d:78:0b:a3:4b:41:04:51:52:ac:79:2b:2e:35:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CC:E6:7C:E2:33:EA:3E:1B:07:B4:07:37:06:99:DE:E7:37:B3:07
            X509v3 Authority Key Identifier:
                keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:fa:65:d9:d8:a7:0f:4c:e5:f1:a0:12:5c:18:79:1d:5d:
         b6:01:a1:01:1b:11:1e:40:ea:58:0e:03:e7:b7:49:4a:d0:7b:
         9d:e6:57:13:29:ef:38:ce:cb:1d:54:dd:a9:e1:f8:4b:e2:55:
         5c:66:95:be:e8:e7:f4:3e:9b:8a:e5:04:eb:cd:23:fd:a0:a2:
         f4:0d:05:17:3b:42:c0:12:ff:55:31:49:d9:44:a5:4a:8f:a6:
         17:13:39:a4:7e:f2:7b:72:fc:86:8d:0b:c3:dd:2f:71:22:1b:
         52:b3:e9:b3:fc:ed:15:8a:71:91:e6:7b:ce:e1:15:20:d4:46:
         75:d6:67:47:13:fa:e5:e3:8e:e3:8c:13:68:58:ad:2c:14:33:
         08:a7:a1:b3:34:bb:8d:30:c2:c1:9e:be:de:37:b0:c9:ef:f5:
         33:81:22:67:fa:36:88:c7:66:d9:21:7e:de:14:a7:9c:3f:61:
         4c:0c:07:28:bd:95:2e:1b:bc:a7:80:f9:4a:f1:bd:63:4f:26:
         22:cc:b6:39:f2:e2:42:c7:f2:77:74:4e:74:c8:e4:7b:7a:ce:
         12:c5:50:37:b2:6c:3f:a6:e0:00:83:96:55:d8:d3:e1:f2:86:
         80:e4:d6:d8:0c:95:7a:85:16:9b:8e:65:f2:5b:80:18:27:f8:
         35:33:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 00:00:35 2024 by rpki-client on console-ams.rpki-client.org