Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File:                     _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier:          J3XFN0LroLJshVN5V4L177QYkjgTuATsvex7POjengU=
Subject key identifier:   80:B4:B7:14:C9:8D:53:09:33:6C:2A:EB:3F:58:E0:18:1B:FD:20:53
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer:       /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial:       01935387D9B393A02C098B743C4EF907C2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number:          015A
Signing time:             Fri 22 Nov 2024 11:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:32 +0000
Files and hashes:         1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: dBgr8/U7goQOnH/pVMnJrovvle1QY9zCAkvcDVmMyJo=)
                          2: c4wvkMwuKsC24dUJqKCOfzLsw5U.roa (hash: eW0iXNFXUwKprxjEO7MVkMxN91unqsE9oMqztGcfaBg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:87:d9:b3:93:a0:2c:09:8b:74:3c:4e:f9:07:c2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
        Validity
            Not Before: Nov 22 11:00:32 2024 GMT
            Not After : Nov 23 11:00:32 2024 GMT
        Subject: CN=80b4b714c98d5309336c2aeb3f58e0181bfd2053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:a2:a1:72:96:2c:d1:3a:d1:32:20:c4:92:
                    8c:81:f5:e0:47:41:98:76:c6:b2:5e:4e:a0:c2:74:
                    5f:5e:f2:00:e7:64:3b:07:d3:a9:10:1e:d2:49:05:
                    4e:45:40:b5:27:3b:05:06:0a:01:bf:52:7e:da:6d:
                    24:7c:08:1d:39:09:b6:9d:2c:a3:66:6e:29:08:ee:
                    bc:26:2f:2d:fd:f2:b5:48:8c:05:04:b6:c8:aa:8e:
                    70:a9:4a:ac:0d:36:43:1b:b9:7b:c9:ca:45:5a:db:
                    30:dc:03:9c:a7:c3:82:da:37:89:cc:64:11:ec:9c:
                    71:b5:9f:49:79:7f:bf:37:65:ec:0c:01:dc:98:de:
                    ea:a7:59:ba:f2:96:69:d8:9a:a7:0d:e9:1a:f3:60:
                    4e:c0:3a:44:8f:ac:d9:1b:7d:58:00:ab:93:a8:f7:
                    f7:53:d0:ac:96:74:44:14:e8:2c:52:ba:c0:af:4b:
                    c6:09:5e:bf:cb:02:5b:fd:88:b1:2d:73:af:d9:5f:
                    9a:e2:ff:3f:ef:41:82:2a:c6:18:a1:90:33:46:ca:
                    11:63:14:8a:e5:e8:e0:1f:7c:ab:76:e0:a3:3e:d9:
                    fd:24:37:02:df:8b:02:1f:92:77:b0:02:4e:21:e4:
                    d8:41:bf:27:c3:34:f6:e0:1a:41:8d:6c:a9:5b:f4:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B4:B7:14:C9:8D:53:09:33:6C:2A:EB:3F:58:E0:18:1B:FD:20:53
            X509v3 Authority Key Identifier:
                keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:a2:c9:a1:64:6a:d1:eb:90:10:06:5c:95:0d:53:4d:0b:
         87:2d:c0:8b:b4:55:5f:74:a8:35:5f:aa:dd:f2:43:5c:48:d4:
         31:6c:32:82:31:7d:23:81:68:f9:aa:fa:9c:53:c8:71:4d:2e:
         35:59:67:d7:92:7a:39:78:b5:b2:c7:b4:be:7e:13:c4:f1:1b:
         28:b9:a3:c2:90:38:f3:81:4c:5b:ec:8b:13:6e:c9:37:f6:c1:
         79:e6:bc:42:c8:14:28:49:9c:8f:55:3e:4d:14:be:70:7a:3f:
         dc:bf:26:d1:3d:4c:38:3c:ca:9d:f6:57:2b:ae:9d:35:a6:75:
         9c:4f:90:9b:30:59:da:a2:f8:01:75:27:44:36:9c:08:01:8c:
         91:c0:57:75:23:88:17:f4:90:f5:8e:d8:a2:72:79:2b:01:b5:
         b3:50:e7:87:ab:96:d6:18:93:07:59:d3:f5:69:67:6d:46:3a:
         df:30:6e:bf:16:34:5c:b6:8e:0d:d8:42:0c:7e:86:df:c7:9e:
         18:2b:d0:7a:61:c4:1e:8e:0e:8d:01:cc:a9:df:78:f1:ba:4e:
         03:69:5c:6a:3f:d3:1f:d0:c8:f8:8c:ae:88:a0:da:05:76:a8:
         14:a9:bd:be:68:6f:ce:3d:3b:c7:c6:d5:52:35:69:d7:9d:58:
         6f:cc:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:17:10 2024 by rpki-client on console-fra.rpki-client.org