Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File:                     Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier:          sLN44OzbegEJlNDNl5CK3kc3wXIuiswB4SwLRP7nHcw=
Subject key identifier:   26:0A:5A:8D:5F:A0:5C:B3:62:E3:58:AF:C0:49:DF:FF:AA:52:4E:C3
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer:       /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial:       0193568A6EDA4AE9B92291E118F6C7EFA2E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number:          0985
Signing time:             Sat 23 Nov 2024 01:02:13 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:13 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:13 +0000
Files and hashes:         1: 5dRUaiAbsApMZZU9uQV5VnD0O2o.roa (hash: /fA3RLFbDZSvplf/CZpKN1BPjI7I85ymUxR5JWCXbT0=)
                          2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: Wu7oa7e7ct0karJWc2QZoEEWS03Obvqr48I2DVomlRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:6e:da:4a:e9:b9:22:91:e1:18:f6:c7:ef:a2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
        Validity
            Not Before: Nov 23 01:02:13 2024 GMT
            Not After : Nov 24 01:02:13 2024 GMT
        Subject: CN=260a5a8d5fa05cb362e358afc049dfffaa524ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:b8:71:cc:10:23:1f:42:8a:9e:c3:fc:36:
                    9d:70:1b:f7:e4:63:b5:a6:95:ba:bc:c1:be:08:86:
                    f3:72:29:a6:bf:ea:26:0a:94:d7:89:8a:c7:9d:e0:
                    09:ae:5a:90:07:ed:31:c5:e7:72:62:02:cb:b0:ab:
                    55:ad:0f:39:cf:e2:ab:dc:32:32:fe:31:82:27:34:
                    5e:1e:c5:48:19:eb:da:b5:0a:2a:27:e4:e1:3b:02:
                    0b:d8:e0:31:d9:86:16:79:09:bb:93:90:cc:f6:64:
                    63:87:9f:07:c0:72:f3:84:a5:32:54:6f:b5:30:8a:
                    e8:4d:8d:08:b3:31:9e:f3:82:ed:d7:67:8d:4a:5b:
                    b0:f7:e8:a6:22:50:3f:1a:f4:be:36:9f:c8:9e:76:
                    34:c5:3d:da:b8:7e:46:1a:47:f2:d5:c7:87:05:3e:
                    a7:31:d5:c3:48:dc:ab:cd:ea:11:84:53:e9:a3:b6:
                    b7:06:c6:f2:85:5d:8c:30:0c:c8:83:8f:ff:fd:98:
                    dd:bf:be:be:d8:5e:da:67:07:bb:e6:db:36:5c:61:
                    be:0b:7a:ce:a0:ec:7f:a4:5c:22:1f:ea:99:24:06:
                    5c:12:f5:d8:ec:98:c4:1b:82:c2:fa:a5:54:8a:ce:
                    0b:06:be:c9:97:a0:c1:51:cf:df:72:6b:d5:15:59:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:5A:8D:5F:A0:5C:B3:62:E3:58:AF:C0:49:DF:FF:AA:52:4E:C3
            X509v3 Authority Key Identifier:
                keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:fc:e1:35:55:8b:29:98:83:77:e1:84:7b:b5:0e:0a:bd:
         39:98:db:28:46:80:03:13:64:82:ae:42:7c:17:21:a4:15:b8:
         85:f1:e5:47:af:56:e1:06:e0:f5:81:d9:6f:09:61:d2:c9:18:
         e6:ba:a8:f3:0c:fc:e0:53:90:60:92:2f:25:f4:b8:3f:b9:ce:
         e9:16:bf:78:49:de:87:80:4d:42:f5:50:91:33:dd:be:64:06:
         4e:05:b5:3f:6b:f7:a3:a4:2a:bc:0a:3a:a7:71:b3:a1:d9:2a:
         31:32:8c:4c:6e:a0:ca:03:1b:a9:6a:e4:66:99:66:ca:13:f1:
         dc:cb:7a:5c:23:dd:f7:e8:6d:bd:a0:dd:f0:c2:c6:aa:16:b3:
         87:b9:27:e8:43:3f:e5:93:f5:e3:90:cd:e8:f0:f8:10:1e:f2:
         62:23:77:cb:b8:7a:c2:d9:3d:4d:2e:ed:16:e2:fc:d6:cd:d3:
         a4:37:c2:bc:1e:53:85:eb:5e:b5:4b:01:07:33:f7:82:c7:0c:
         fb:ae:97:98:8f:a6:22:92:cf:7d:94:f5:0d:d5:3c:a9:56:38:
         51:c0:ab:30:25:c2:fe:98:ae:dd:1f:5e:de:4b:d4:af:b3:76:
         32:91:61:93:7e:c7:c0:30:82:e4:01:94:da:3f:f2:f5:5c:ca:
         0e:a4:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:28 2024 by rpki-client on console-ams.rpki-client.org