Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
File:                     zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft (raw, json)
Hash identifier:          nmygTpstudf3OVLDYm/As42a50a6A6UjFXbskT9SZNQ=
Subject key identifier:   4C:6C:44:0D:C5:0A:83:6C:5A:E8:E6:B9:93:4B:D8:52:55:C7:31:70
Authority key identifier: CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Certificate issuer:       /CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Certificate serial:       0193568A29EAD6ACD7361D767F6E2A48477C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:55 +0000
Files and hashes:         1: Z7TptFWPnd0k4XqtfPlth6oScLk.roa (hash: HzAEbhb8cVoFnWDIpvhwEtv1K1yld4BAIWWKrcXVTKE=)
                          2: zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl (hash: I4GJ+MnT0ANhz2OEb/voEFOUflCBmJX8zaCGZJWh6eg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:29:ea:d6:ac:d7:36:1d:76:7f:6e:2a:48:47:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
        Validity
            Not Before: Nov 23 01:01:55 2024 GMT
            Not After : Nov 24 01:01:55 2024 GMT
        Subject: CN=4c6c440dc50a836c5ae8e6b9934bd85255c73170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:55:fc:ff:20:98:97:35:b2:08:0d:a4:a7:
                    87:dd:3e:60:05:e5:5f:68:2c:28:c6:b2:70:91:15:
                    cc:a9:36:e7:dd:7f:9e:15:90:aa:f4:48:78:2b:a5:
                    9c:1f:94:c6:b5:b7:70:4e:7f:05:18:34:20:ae:07:
                    b9:a2:ab:0d:c8:72:60:94:4d:94:fd:48:b3:88:6d:
                    40:2c:06:13:ac:cf:dc:bf:d6:14:74:9b:53:32:13:
                    4a:9e:c7:2c:9a:86:cc:f0:ce:12:d8:99:80:9b:a8:
                    9d:3f:dd:9e:d9:fd:2a:eb:66:9b:ed:0b:1c:7b:fb:
                    c8:a4:86:e6:26:bb:af:6f:0f:ee:8b:78:d4:f0:0b:
                    64:b7:9a:57:d7:49:a6:a0:ec:7f:dd:f7:e8:0a:07:
                    8a:44:d5:1b:a2:0a:08:ab:94:b0:eb:59:93:08:59:
                    2f:d6:37:3b:7d:13:37:20:4d:54:84:46:b7:47:f7:
                    bf:3b:c7:99:52:94:94:30:b8:35:ee:00:e2:7c:2b:
                    40:76:89:e3:51:bc:e0:fd:59:25:1e:07:0b:0a:a5:
                    07:40:3e:9c:ff:1b:fb:64:a6:9e:db:62:e7:4e:44:
                    fa:cf:e0:70:2d:b0:47:b3:ff:d9:cc:13:fe:69:ef:
                    3f:5a:c0:a3:7b:f9:20:12:91:cf:65:07:4a:4d:3c:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6C:44:0D:C5:0A:83:6C:5A:E8:E6:B9:93:4B:D8:52:55:C7:31:70
            X509v3 Authority Key Identifier:
                keyid:CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:b6:58:9d:79:68:41:0a:e4:4e:9e:ff:43:f6:1f:5e:3b:
         3b:d0:33:44:1f:b8:5e:62:d1:d4:73:de:33:1d:e5:9a:bf:b8:
         6b:d3:b1:77:37:2f:d7:b8:f8:1d:e8:e8:8d:74:72:86:39:5f:
         c7:36:4d:c1:0b:ff:f8:d6:7c:40:93:e8:85:40:4d:80:52:60:
         a8:49:e5:4a:fd:37:57:51:ca:f5:c0:66:a2:fc:1f:1d:c8:fe:
         12:fd:be:67:80:c2:19:19:20:56:ab:2a:8d:78:a7:55:bd:52:
         12:7b:e5:41:22:da:a5:36:31:0d:d3:46:d8:6b:55:6b:76:11:
         14:14:06:6a:8b:0e:43:9e:22:3a:81:d5:fa:51:9d:95:13:47:
         61:3b:77:26:ac:cc:aa:c8:2c:2c:ac:c3:13:0d:10:98:07:f8:
         56:2b:0f:4e:2b:92:c8:4b:0b:53:74:2b:b3:74:48:f5:9a:1c:
         24:3c:2b:76:b3:e9:49:76:16:e4:a5:b1:fc:c4:4d:0c:7d:a3:
         60:3c:75:ad:0d:11:f6:e2:d5:fd:4a:7e:f0:6a:af:e5:27:bf:
         c4:bd:67:80:21:ec:f3:b4:4f:92:6a:ee:9a:82:e5:16:f3:43:
         45:f2:5e:83:5e:f8:cf:45:43:0e:93:40:bd:d4:3e:02:fa:58:
         43:7c:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:21 2024 by rpki-client on console-fra.rpki-client.org