Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File:                     zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier:          7jwtV1PwVmLaTKvJ1tNg9IgqL5+M/6lItk0raW7XjZI=
Subject key identifier:   E0:B0:FE:05:D5:38:F8:B6:8F:37:1E:82:5D:B0:CA:D3:EE:A2:71:57
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer:       /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial:       019352AD9AF95BE37919962031122F02DD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number:          07D3
Signing time:             Fri 22 Nov 2024 07:02:09 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:09 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:09 +0000
Files and hashes:         1: wAWdT2b-Mo0p43eH13Oc9Nb-vXI.roa (hash: saFKoBQJKoTjCE1VttiJGx/rV5j5vAfPADVNJLNG2CI=)
                          2: wCnljZVm6ObMHpXp7IzD8ioTc_k.roa (hash: Kgho8j1ime9o41D3pl2F4T8Y8+mgzpAMna7Q+M21J/U=)
                          3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: GZ6OXCabs+LhiXey6LuVtViNCt4i3SkT11AmyBFWlSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:9a:f9:5b:e3:79:19:96:20:31:12:2f:02:dd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
        Validity
            Not Before: Nov 22 07:02:09 2024 GMT
            Not After : Nov 23 07:02:09 2024 GMT
        Subject: CN=e0b0fe05d538f8b68f371e825db0cad3eea27157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:ad:c4:3a:7d:f1:dc:27:62:dc:fd:09:1e:
                    62:e8:70:95:a1:9e:f6:8e:2e:6e:8d:e9:98:cc:b1:
                    4e:d8:78:65:17:ee:53:4a:ea:f4:71:db:a7:11:83:
                    73:8b:a3:14:07:61:f6:a6:9a:d2:dc:e5:c0:6d:04:
                    02:ff:75:2d:47:09:45:57:37:55:47:d8:c5:a8:d4:
                    49:a9:9d:fb:26:df:d4:aa:45:77:eb:a0:16:23:91:
                    ab:21:77:5e:fd:6a:3a:f7:b2:d0:ae:03:44:38:76:
                    09:5a:7d:56:02:92:7b:a9:e7:17:0b:b9:fa:a2:21:
                    c0:14:73:b0:ba:26:ec:e5:31:20:37:17:84:3c:56:
                    2d:39:ee:7d:d7:40:38:11:39:38:32:da:f6:ab:70:
                    52:41:47:0c:d3:4c:69:f0:f3:49:c0:21:b8:6d:30:
                    b0:8d:fc:db:03:c5:55:7a:b8:29:15:b4:d0:85:54:
                    5c:2b:73:00:e7:5e:41:bf:be:f8:59:13:83:d2:cb:
                    b1:24:99:6a:07:de:74:0a:86:4f:e2:b8:02:d0:53:
                    41:73:b1:f4:29:1e:0f:c7:0c:bc:59:53:97:6b:87:
                    2f:fe:1b:b9:84:53:92:e8:e8:0b:86:90:0c:6d:b9:
                    55:df:f2:3c:30:65:96:db:a5:32:fe:1c:33:82:d6:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B0:FE:05:D5:38:F8:B6:8F:37:1E:82:5D:B0:CA:D3:EE:A2:71:57
            X509v3 Authority Key Identifier:
                keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7c:f0:db:e2:72:ac:9c:6a:7b:f1:5a:9d:06:f7:51:1d:45:
         10:89:8a:e8:ed:a9:24:33:7e:17:75:f7:72:a2:53:ad:a4:93:
         c1:0a:b9:ec:ac:6c:3d:a7:bb:8b:6b:01:c2:07:68:04:0b:de:
         34:c4:2a:74:43:1d:e7:02:79:e2:67:8a:ae:2f:c2:20:a4:9d:
         1d:90:25:3a:18:e4:f7:76:2c:f6:7b:fd:12:cc:4c:b7:8b:17:
         d1:22:b3:72:17:5e:09:2c:f4:92:7f:e1:4b:32:84:c7:1c:c1:
         62:27:ab:cb:0e:19:fc:3f:61:02:ab:d4:34:98:84:a7:cd:0a:
         fa:63:57:8d:3a:95:7c:e0:d8:46:88:a9:c4:c8:c6:f6:59:c5:
         97:7c:eb:3c:fe:2e:aa:64:82:09:b3:58:34:bf:c6:a9:6f:03:
         3b:a0:fe:32:6f:d8:36:95:8f:6f:68:3f:16:71:4d:8c:85:9f:
         4e:4b:34:db:db:89:88:a3:b6:c0:8e:58:a6:87:6c:0f:2d:34:
         61:5e:59:9f:40:05:8f:8c:0b:2b:2a:1a:89:10:04:02:0e:88:
         0e:72:46:76:45:9c:f4:91:7a:22:6b:35:b9:95:fe:21:10:a2:
         17:4c:35:34:90:d8:bd:22:78:b2:cd:53:53:19:ea:49:89:63:
         15:1a:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:11:03 2024 by rpki-client on console-ams.rpki-client.org