Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File:                     z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier:          Jx8PcA2lDUPJjNnxypS6nRw5R/+sq59KJfUthtgWYJg=
Subject key identifier:   9F:54:8E:1B:59:BE:47:CE:84:46:BF:51:18:AE:7B:BC:FF:CC:12:0F
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer:       /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial:       019369D99CA440B4E3515B51E730ECDA37A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number:          0B2A
Signing time:             Tue 26 Nov 2024 19:01:29 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:29 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:29 +0000
Files and hashes:         1: C-nUdNwj2tk44oXG0HnlL84BUow.roa (hash: /8DkYI83MeWX+uVUnpcdCdW7iEHSL/JDZvDpDZzxNec=)
                          2: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: taL/lQhdH+Wz0WlyjH4Tt92OIUn225saORX/xs8A49s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:9c:a4:40:b4:e3:51:5b:51:e7:30:ec:da:37:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
        Validity
            Not Before: Nov 26 19:01:29 2024 GMT
            Not After : Nov 27 19:01:29 2024 GMT
        Subject: CN=9f548e1b59be47ce8446bf5118ae7bbcffcc120f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:aa:c0:64:56:55:a1:07:58:24:00:e4:49:
                    20:05:56:5e:cf:38:7b:5b:b2:85:62:37:c4:bf:8d:
                    eb:f8:59:38:48:46:46:83:8e:46:1f:1b:df:e8:40:
                    c3:d0:15:39:d7:ba:ef:4a:65:56:fe:01:72:ff:12:
                    8c:14:17:64:62:e8:27:7e:9b:b9:eb:23:11:22:74:
                    7e:9a:fe:38:5f:89:56:47:cf:37:9c:82:06:a0:91:
                    2c:ff:0e:84:31:e6:98:d8:f0:09:34:5c:2b:e0:28:
                    b2:30:fb:3b:40:2a:bc:a7:e0:04:ec:d1:a8:82:c6:
                    3b:d6:42:da:32:1d:b4:92:74:8a:f6:6f:f3:5d:4b:
                    60:ec:09:3e:aa:79:a3:47:79:16:a8:6e:02:50:26:
                    8f:4a:74:1c:ce:20:8a:aa:ac:87:a0:c9:43:6e:6a:
                    1e:fd:68:17:ef:95:b1:b4:d8:c5:76:4b:2a:92:02:
                    c0:0f:88:00:26:02:f6:19:26:ff:3b:14:6a:68:64:
                    51:20:d4:82:08:d4:32:39:02:06:de:af:2f:30:08:
                    d2:86:27:ad:af:60:a1:aa:a5:e1:a0:c3:a7:91:38:
                    40:c9:47:5d:75:86:ef:2e:0b:c5:a1:f7:36:33:cb:
                    34:3f:0e:ae:db:4e:a5:01:73:b2:d7:4d:45:61:c5:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:54:8E:1B:59:BE:47:CE:84:46:BF:51:18:AE:7B:BC:FF:CC:12:0F
            X509v3 Authority Key Identifier:
                keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:f0:45:15:e8:3f:44:2a:40:54:b9:b3:dc:22:0d:41:50:
         26:03:80:fc:8b:14:d4:c5:f8:6c:eb:29:ed:13:5c:19:99:b4:
         61:4a:7d:e2:15:8e:e4:6e:64:61:95:4b:78:62:94:b0:56:89:
         8a:59:f9:3b:8f:3d:75:1d:5e:2d:c7:29:01:9e:b9:0c:95:f5:
         4e:cb:76:42:8d:59:47:69:42:c5:57:1b:51:eb:c9:c4:0c:4c:
         0b:62:c7:5a:74:69:e8:ec:7d:1e:52:7b:69:cf:04:8a:93:0e:
         e7:2c:af:91:b4:7a:78:60:f6:50:f3:c2:3c:9a:88:45:ba:12:
         b6:7a:50:b4:64:01:6a:7d:c8:6d:c0:a7:61:ba:af:97:39:11:
         2d:d6:33:c5:b2:3a:a0:d4:d1:94:01:03:c9:03:f0:8b:82:63:
         7f:5e:85:2c:b5:c4:96:7e:9e:be:51:55:b9:13:30:e8:85:dc:
         c8:8b:2f:35:25:a0:10:26:aa:a2:0a:50:e3:c1:5a:20:09:0a:
         f2:02:40:b8:8a:81:05:72:d2:bf:c8:28:0f:91:2e:a3:1c:cd:
         0d:f8:d2:60:5d:e3:e1:f5:84:93:55:35:b6:c5:b2:0a:e3:47:
         ae:cb:79:7e:f5:df:77:e8:1e:75:04:a2:4c:df:b5:f7:d8:d3:
         2c:a1:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:24 2024 by rpki-client on console-ams.rpki-client.org