Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File:                     ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier:          JenP3CEQOk1O6B2sJf4UbzpsptWYcFCLfUQDuGHH4x8=
Subject key identifier:   97:76:31:AC:3C:5D:99:2B:35:AD:51:AC:2C:48:D7:EE:1A:FB:B6:24
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer:       /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial:       0193628D44EC17F28A900E5C914A0A097EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number:          02F0
Signing time:             Mon 25 Nov 2024 09:00:45 +0000
Manifest this update:     Mon 25 Nov 2024 09:00:45 +0000
Manifest next update:     Tue 26 Nov 2024 09:00:45 +0000
Files and hashes:         1: Gr26Mk1HQvGp3sVLrdIySyl84Gw.roa (hash: l7vPbrDP3DPCxNMH1aCFH8VseOI0/L6hinP/cqhZgRc=)
                          2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: nQvhKUb0laFDGOulXJnWsbinWOgo1wIC0Av6Q1vLu2g=)
                          3: b-KWuIeEguBwQR2O757y41PQWdM.roa (hash: VbIxyqHuCj0AADHbwPa4LF8FzoMbhXX6g+lSJGRrqcA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:8d:44:ec:17:f2:8a:90:0e:5c:91:4a:0a:09:7e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
        Validity
            Not Before: Nov 25 09:00:45 2024 GMT
            Not After : Nov 26 09:00:45 2024 GMT
        Subject: CN=977631ac3c5d992b35ad51ac2c48d7ee1afbb624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:f0:3f:0f:d6:9a:f4:38:53:46:20:35:22:
                    cc:0e:f9:c6:82:89:28:94:90:02:d0:3f:3d:c1:bc:
                    50:e1:82:7e:5a:5b:90:1d:ac:be:cf:77:5f:f7:2e:
                    f0:23:fd:bc:43:20:c4:eb:e3:5d:1f:75:81:a1:ba:
                    15:43:8b:84:4b:5c:4d:04:09:0a:2b:fc:95:55:60:
                    07:65:2f:99:97:25:54:1c:90:76:3a:d1:a9:9c:48:
                    cd:dd:20:43:1d:bd:c6:b5:2b:00:66:03:99:96:52:
                    06:cc:6f:bf:46:e8:df:f8:ff:c4:7e:3c:61:6f:b9:
                    b5:94:58:60:46:8b:b4:b1:4c:76:e5:99:df:49:5b:
                    90:44:be:ab:4d:aa:1f:ce:53:6c:95:ca:5b:61:23:
                    85:f7:5d:ec:97:a8:9e:9a:a1:34:79:09:43:e2:c6:
                    c6:98:11:51:6d:fe:29:84:e9:81:81:2e:50:9d:f0:
                    26:63:b1:63:a4:b4:d4:ad:ac:5d:d0:1a:06:a8:5f:
                    40:04:92:6c:9d:3d:b5:a1:ae:a4:ca:a2:49:1f:07:
                    e7:e0:55:0d:e3:f2:83:9f:0e:ee:50:6b:5f:41:42:
                    a4:af:f6:34:59:62:f3:38:b8:29:1e:53:d2:2d:f5:
                    fb:1c:50:21:f3:cc:73:64:53:26:eb:17:d0:20:f3:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:76:31:AC:3C:5D:99:2B:35:AD:51:AC:2C:48:D7:EE:1A:FB:B6:24
            X509v3 Authority Key Identifier:
                keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:44:bc:fd:87:d5:5e:a6:ef:e9:68:c4:df:d7:0d:44:aa:86:
         ff:4b:e5:e6:16:5b:6f:7e:7b:48:f4:b3:3e:0e:b6:6a:44:e0:
         28:28:16:11:3e:fa:9a:22:04:d1:56:46:4a:81:be:28:a4:e6:
         83:b3:e6:35:48:b4:ca:f9:8f:be:30:20:d6:1c:a0:11:e9:5d:
         7a:14:47:fd:51:ca:42:ed:22:d4:df:f0:23:1f:66:38:e7:c3:
         c6:15:54:bf:8d:7a:97:ef:ae:92:db:d1:ca:e4:2f:46:fe:ad:
         eb:a5:da:36:0e:04:4a:fc:a6:b8:61:cd:e3:de:1e:2a:79:6a:
         24:b7:1c:27:75:2b:94:17:5b:af:c8:ac:84:da:fd:71:67:c4:
         ca:41:33:79:b1:63:8e:68:37:da:59:1f:5d:86:29:97:fb:da:
         06:b8:fd:5c:3f:84:f4:9b:f8:0c:c7:58:06:dc:88:3a:ef:48:
         c0:17:da:d5:74:0b:39:4f:74:2d:c6:f8:b6:5e:27:42:32:3b:
         f1:6d:a3:7a:81:c8:ad:1a:28:54:7a:e0:d6:fe:4f:ad:88:a6:
         94:f5:8c:37:6d:97:cd:f5:be:ac:0e:9f:3a:16:e8:f7:76:f0:
         cb:0d:e6:56:78:2b:0f:a6:e8:1a:c6:0a:ff:70:ac:a6:48:7e:
         4d:a8:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:48:53 2024 by rpki-client on console-ams.rpki-client.org