Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File:                     1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier:          o1AJUpwHRpssBDRnCrZ9+18xNrFjRVE77dgfhbjobA0=
Subject key identifier:   A5:9C:65:82:A6:DA:25:5D:64:94:D3:4A:41:65:48:7A:6F:4A:C7:60
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer:       /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial:       0193579B8351FB2DC779654B4041519FC22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number:          1142
Signing time:             Sat 23 Nov 2024 06:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:29 +0000
Files and hashes:         1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: z/jNPNEQLK09swfc+GnF27pBSYjtKdk/MkQlxVd3Flk=)
                          2: DTZEw1jX7B29mdCIUG0LJTFpus0.roa (hash: a/3mi267IrO9AMeqjJQDqhD8zBQoyOkW5lVmh4PMt9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:83:51:fb:2d:c7:79:65:4b:40:41:51:9f:c2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
        Validity
            Not Before: Nov 23 06:00:29 2024 GMT
            Not After : Nov 24 06:00:29 2024 GMT
        Subject: CN=a59c6582a6da255d6494d34a4165487a6f4ac760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:59:1a:61:41:de:71:a5:0a:85:96:22:66:
                    c0:15:85:88:42:e4:c4:bd:7b:13:f1:4c:2f:70:94:
                    72:8d:6a:86:7e:ba:da:11:fd:b4:27:d7:49:76:d4:
                    ff:83:b7:fd:16:b6:92:9d:73:d8:5e:08:03:5f:e2:
                    bb:a1:25:e5:32:5d:ca:15:d3:4f:0d:96:d3:48:bc:
                    7e:02:fa:29:1f:50:9c:ae:4b:3c:43:27:af:b6:d4:
                    13:39:0b:9f:84:1f:dc:f6:c7:d8:f0:84:e4:1d:16:
                    f0:58:f4:02:62:60:6a:69:a6:a8:a1:3a:c9:db:8d:
                    f0:44:16:39:18:34:ac:ea:e9:8d:2c:48:8e:fe:e6:
                    d1:5a:2a:c5:9d:54:a4:ca:68:ad:6e:95:61:3e:76:
                    ef:d6:e0:c9:69:83:2a:a7:10:db:67:e3:12:70:1b:
                    21:b0:e9:41:2b:a4:94:59:54:85:e1:be:ac:84:6a:
                    6d:16:f0:68:c2:c0:db:c5:48:fb:8f:9b:1a:b2:f7:
                    b8:31:d9:4d:1d:a3:06:ea:dd:f2:d8:58:4c:d7:c3:
                    a4:01:06:51:f5:bf:d0:67:06:58:b3:e0:7f:49:8c:
                    b2:e9:ab:03:f5:9c:5e:3f:c6:7b:a1:2e:6a:a8:0e:
                    68:c8:4d:0c:ca:33:e6:d6:5f:4e:19:2d:98:c9:92:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9C:65:82:A6:DA:25:5D:64:94:D3:4A:41:65:48:7A:6F:4A:C7:60
            X509v3 Authority Key Identifier:
                keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:bc:63:de:db:00:49:55:2a:1f:83:24:e3:53:0c:de:96:61:
         ff:dc:3f:e9:65:7e:4c:df:4e:18:a6:9f:65:dd:bc:95:d5:5f:
         8d:00:3c:70:b9:a9:dc:96:1e:6e:53:98:7f:8e:20:f8:5f:a4:
         2f:8a:7d:2c:ff:e4:5b:03:56:71:62:1c:f6:f4:c0:98:b3:d0:
         b6:c5:02:3e:91:5f:eb:e6:1f:78:3a:57:b7:7b:c3:78:4b:ca:
         08:56:ea:05:07:44:cd:32:72:29:73:e5:e1:c4:9a:a0:19:f9:
         d4:b4:4b:66:ae:4f:04:bd:95:d3:ec:c4:11:79:f8:d3:4b:2c:
         bf:bf:5e:58:16:83:b1:c2:70:c3:99:87:c6:9f:37:9b:2f:f9:
         1b:70:f4:4c:91:b4:82:0e:41:37:4d:ad:6f:17:27:34:39:41:
         90:29:78:5b:f6:d0:bb:38:69:15:45:ae:cd:c6:f7:42:9f:87:
         ca:d2:47:99:73:6f:a5:ce:ff:03:f3:fa:51:7f:50:34:ef:fc:
         29:90:02:a0:3f:52:5d:32:56:cf:21:2f:8f:d1:4f:d7:39:01:
         4b:8a:98:b0:f3:32:f4:81:a5:84:c9:40:65:a1:f6:f8:06:5f:
         b0:6b:0f:25:6d:e3:9c:1c:d1:f0:d2:25:cb:f7:4e:d9:e6:59:
         90:c1:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:54 2024 by rpki-client on console-fra.rpki-client.org