Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File:                     Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier:          5RlO+Dy4+6IRpLJu19nGPeIms+kvjhhAVHZgEvKiaeM=
Subject key identifier:   4D:AB:57:FB:34:4E:D2:D8:AE:5B:54:0B:BA:F1:3E:BA:7F:FF:76:8C
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer:       /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial:       0193568A8D97AB6C7C4D3D39C9055ADADCA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number:          04B9
Signing time:             Sat 23 Nov 2024 01:02:20 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:20 +0000
Files and hashes:         1: 4h-M6IlNh5x7sHvS0XWLHMyIoRw.roa (hash: 5KV2XjNhXDoHWzp/cBmG/gcbyFWYrnZxlCeVbPhWF1A=)
                          2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: fhNHWQhCxyZ10p6EhQqR4Ne5HdrysYJZepXU7UyfBJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:8d:97:ab:6c:7c:4d:3d:39:c9:05:5a:da:dc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
        Validity
            Not Before: Nov 23 01:02:20 2024 GMT
            Not After : Nov 24 01:02:20 2024 GMT
        Subject: CN=4dab57fb344ed2d8ae5b540bbaf13eba7fff768c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:e1:59:ce:18:ef:57:03:ac:b1:4f:03:3b:
                    8f:3d:a3:8f:55:cf:e5:6b:9f:ea:dc:b8:c9:92:35:
                    d0:2f:47:b9:01:ac:e1:39:3b:04:06:59:61:46:71:
                    7e:f4:ad:9f:7d:f7:8b:d1:72:5d:e1:46:db:47:b2:
                    f1:fb:fc:13:e3:80:74:4e:50:15:6b:a2:5a:67:65:
                    d6:f6:75:67:e5:e1:df:d7:3c:c2:4c:25:f7:96:2b:
                    73:2f:d5:e2:97:dc:4f:c7:53:c7:03:92:e4:ad:6c:
                    97:b6:21:b5:88:a8:14:17:87:d4:44:92:eb:32:c4:
                    49:dc:47:de:e6:36:e6:28:ff:87:77:01:da:1f:48:
                    a7:b3:81:42:9b:53:9a:27:9e:0b:ea:76:5d:94:97:
                    90:d2:61:6f:91:85:e9:0e:a8:a7:95:02:ba:8e:d8:
                    d4:ef:2d:05:6f:9b:72:9e:5a:b9:f8:fa:dc:b9:db:
                    9b:d0:6a:46:0d:e3:c5:bf:e4:cf:3f:16:9a:f2:a5:
                    d3:53:ce:7c:c4:85:68:44:b3:eb:ce:d7:ed:e1:68:
                    e5:a8:16:ab:e2:5a:40:8e:b5:85:56:2d:fd:09:a3:
                    0b:c6:5c:de:38:10:5b:14:8f:0e:83:7a:43:0e:c2:
                    97:1e:ba:e9:e4:d3:a0:97:8a:81:40:ef:1a:8e:bc:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AB:57:FB:34:4E:D2:D8:AE:5B:54:0B:BA:F1:3E:BA:7F:FF:76:8C
            X509v3 Authority Key Identifier:
                keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:4b:39:84:8e:12:64:39:bc:a4:3e:85:b0:70:ad:c6:f3:
         44:b0:83:01:c4:ac:85:af:f9:60:18:37:f2:99:76:64:18:90:
         8e:90:5c:e4:eb:a8:fa:a9:24:b4:2a:aa:0a:53:10:43:02:70:
         f6:79:09:53:94:15:44:c2:3d:aa:79:52:ad:87:c3:82:2a:7e:
         d6:90:f5:9e:61:7b:a1:19:e6:16:a5:31:80:02:69:a9:09:13:
         9e:8f:29:0a:bc:98:3b:27:c4:c5:77:f4:d6:da:85:b1:df:69:
         dc:35:81:25:2f:f6:43:73:40:16:0b:0c:35:6b:eb:03:ff:13:
         23:5a:78:f0:fc:61:0b:98:0f:78:c6:33:b3:e1:df:3a:57:ca:
         20:4a:1c:3d:c3:56:12:c7:32:ed:6a:ba:c7:40:3c:10:55:e0:
         da:6e:88:5b:2d:2e:04:1a:31:27:d8:c3:ea:07:09:24:95:d2:
         a4:75:d9:2f:0f:99:f3:df:10:6b:cf:79:ab:d8:6f:9b:e0:4a:
         b8:52:e8:cf:ed:cb:19:c4:bf:f6:c2:37:eb:ec:9f:cb:a0:65:
         ef:8b:19:ee:3d:7b:85:e4:47:f0:a3:92:74:f1:2d:26:c4:0c:
         05:da:8c:89:7b:2a:4a:12:bd:84:89:98:f8:78:c6:19:ea:79:
         5e:7d:ae:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:15 2024 by rpki-client on console-ams.rpki-client.org