Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File:                     Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier:          N9XYg+mhxCyyArMb9VVu2qLHbsWsmd89/vGY0yHYKms=
Subject key identifier:   F1:29:93:E1:50:34:D6:D8:BA:B7:67:63:2F:00:4A:B4:35:61:A0:70
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer:       /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial:       019351D0755C543E7985EF28D9D3F88DE580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 03:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:36 +0000
Files and hashes:         1: 305FkwySpbWhHKCQkDNN9w3SVSo.roa (hash: r1MZPxSTH3oxjiPzBo0HfZzppFXDF4xNUL5R6gg4RLM=)
                          2: 4ivpBlzDaXdB0WUyAitckQO6x78.roa (hash: 11/OX3G71vhdCWYNVoa3ohu1kgZeT6k5y5PH6GTm0/E=)
                          3: 5nKd1dN_mJvBwaccZccTNDnXn4w.roa (hash: ByixUQEpYGRJ5I+xpPJxDkwcibKV2YAxc9kEr0JcWfA=)
                          4: C8ia9jHzJUaakWVOvCT2v2wMRSY.roa (hash: l5WSPtenq8aURsPAc1Vgn0IBfgcAELePFJa+YLPocOM=)
                          5: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: HHwUFQajmJ5jBGTbQ6xzru+v8ILG/Uks13FdaxlNgLU=)
                          6: mm4fQ3xOmABtRbqLE_PG_QAOCTc.roa (hash: WG0B+r71TY5vEJdlpgXtSR1GojPWJdww0lM6nLPmR4k=)
                          7: tuaXfVv6T2RYJGz0xck7bKRCaXM.roa (hash: C7u8uB4rkqDgM0+K753ek1mOvgxp15EfrPj3HA8dt8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:75:5c:54:3e:79:85:ef:28:d9:d3:f8:8d:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
        Validity
            Not Before: Nov 22 03:00:36 2024 GMT
            Not After : Nov 23 03:00:36 2024 GMT
        Subject: CN=f12993e15034d6d8bab767632f004ab43561a070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:69:3c:f1:94:3b:6a:55:7a:9d:8c:a4:98:0a:
                    54:74:79:2f:b9:54:c5:37:7e:05:bb:15:44:4e:8e:
                    f4:52:67:63:00:4a:39:0d:4b:6c:1e:16:8b:5d:f4:
                    25:a3:b7:6c:14:dd:c5:01:24:a0:a8:31:32:36:06:
                    9d:fd:a1:84:a6:c5:11:09:bb:26:43:ea:b0:9e:99:
                    bf:7d:66:d1:f1:02:60:07:51:fe:6d:d8:50:4c:ba:
                    f2:32:b9:35:02:70:5d:67:2e:68:54:b3:5e:70:d3:
                    c5:91:bd:e5:02:69:e8:e1:45:16:57:6d:d4:3e:e4:
                    83:04:ce:26:36:22:0e:71:63:76:23:fa:19:26:cd:
                    51:1a:22:24:50:88:5a:b2:4e:e0:5b:a5:b8:3f:29:
                    6c:17:88:36:6e:08:63:d7:59:2d:3e:b8:48:55:f3:
                    43:7a:8d:d1:0e:39:0e:03:c5:00:c0:30:08:fa:03:
                    f6:bc:09:e0:b6:4a:4a:c7:6e:47:a7:90:69:5c:e0:
                    dc:0a:35:ab:49:8c:dc:69:b0:51:40:16:9e:7e:ec:
                    1d:cd:6e:af:2b:ac:98:f5:ea:d6:81:13:67:42:ee:
                    ae:40:7f:22:5b:e2:bb:ac:25:e5:1e:52:34:e4:c3:
                    b4:13:dd:cf:2d:e5:25:8a:4c:35:e3:78:5f:9f:09:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:29:93:E1:50:34:D6:D8:BA:B7:67:63:2F:00:4A:B4:35:61:A0:70
            X509v3 Authority Key Identifier:
                keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:77:f7:eb:c7:e2:ee:50:10:98:07:da:32:17:9c:40:8f:b4:
         09:f2:3d:d4:c4:be:6a:43:5c:2c:3b:58:27:af:3d:30:e0:ed:
         5e:78:33:23:e9:81:2f:79:ee:1d:57:75:45:b4:46:7b:30:1e:
         bf:60:49:cf:9e:9d:29:dc:54:c5:c0:7f:50:0e:32:70:75:51:
         32:a8:54:06:57:7a:6a:26:f1:56:9a:59:e5:f6:44:c0:4c:59:
         e5:59:f2:52:63:21:d5:ae:74:d9:71:03:08:ea:05:63:1a:cb:
         ae:f9:7b:eb:f7:9b:ea:6d:91:6e:25:b4:bc:34:6c:f3:26:9a:
         9b:52:33:4d:11:d7:3e:4e:13:8d:ae:2a:85:5b:f6:3a:d9:67:
         39:0f:92:f5:de:61:f7:35:e6:04:b1:46:82:db:d2:b0:17:62:
         01:23:b1:2e:72:ff:f1:39:0c:98:ae:c5:1a:8a:2f:e9:a2:c7:
         8c:92:3b:91:6f:74:de:56:e0:90:49:e3:00:85:11:24:2c:5a:
         ba:4b:bf:04:3a:88:0f:2a:87:99:91:89:d1:8c:8c:25:24:43:
         ac:eb:e4:19:b3:a1:85:37:38:2e:c6:0e:40:03:51:5d:a9:3c:
         f9:70:08:54:f7:3f:dc:3c:0f:8a:2d:c5:16:b2:68:8f:fa:f9:
         73:37:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:12 2024 by rpki-client on console-fra.rpki-client.org