Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          qFYGTjystND+mClxKjQIbcpbNgVm40+cubPliA7wGOo=
Subject key identifier:   69:A9:2C:96:3C:EE:B3:32:73:B4:94:A9:16:63:E0:5F:8C:80:D1:C3
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       019355AD81B7B514AEB3B9A5C3A5CD23A8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          02AB
Signing time:             Fri 22 Nov 2024 21:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:54 +0000
Files and hashes:         1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: iRKoadEyY5JCcqBfE+4Be/GjeWljUEur8M54KnqMoL0=)
                          2: qOSR6aXYIPm7EQ8PcHTCr9Z-yQg.roa (hash: 2bXqc/Z8GJiOAOsv9jjnuGCz4i/2yhAS0oCaLcgIotY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:81:b7:b5:14:ae:b3:b9:a5:c3:a5:cd:23:a8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Nov 22 21:00:54 2024 GMT
            Not After : Nov 23 21:00:54 2024 GMT
        Subject: CN=69a92c963ceeb33273b494a91663e05f8c80d1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:64:94:cc:43:d5:d5:da:72:62:03:bc:27:
                    d7:ae:98:b5:ce:39:80:f3:90:53:03:13:dc:c7:e0:
                    d0:e8:a4:0b:80:4b:a2:f8:c5:6c:93:91:ff:ea:26:
                    d4:9c:9a:a3:7e:51:f2:d5:fb:92:fc:58:91:2c:b4:
                    34:16:a7:09:c8:fa:73:2f:c9:2b:94:3e:b1:78:39:
                    98:9d:45:f8:34:18:91:65:5e:50:55:58:d9:f6:93:
                    2b:fb:29:33:c3:6c:28:e2:8e:73:5f:23:e0:67:a1:
                    92:e5:bd:7b:62:2b:94:58:4c:ab:b4:56:09:1f:5e:
                    62:d3:d1:6d:5e:45:26:05:ce:e5:24:f5:4c:83:f9:
                    01:8c:df:10:93:a3:b4:46:77:5d:84:b2:b7:99:59:
                    10:10:1b:fb:b9:1a:f7:ad:15:88:c1:51:a9:b9:5f:
                    71:de:b9:78:7e:17:c3:6a:44:5f:2f:de:b5:86:cc:
                    dc:a0:0f:34:19:41:71:f1:dc:8a:7f:55:7c:fa:2f:
                    da:9c:63:4c:e8:a6:5e:e7:59:7b:b2:85:d4:c4:28:
                    e6:86:7e:61:0e:de:10:dc:39:32:ea:5c:81:0b:1a:
                    86:bd:51:c9:25:ad:c8:4b:b9:a1:c1:fa:8d:58:2a:
                    b8:34:47:d9:a9:5d:1d:aa:a5:07:63:f7:45:70:3f:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:2C:96:3C:EE:B3:32:73:B4:94:A9:16:63:E0:5F:8C:80:D1:C3
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:91:98:67:11:63:d5:10:c0:0f:5a:dc:30:e9:d7:f4:20:
         ad:56:f8:1b:9a:6a:78:70:6e:9d:13:ee:09:a7:21:63:f0:31:
         18:ba:b4:e5:4c:95:69:fd:76:3c:8a:46:5a:6d:d7:e7:b0:6f:
         ff:c1:04:98:4a:95:b5:21:0d:14:53:ea:35:fd:bc:fa:e0:ef:
         56:e1:6f:ec:10:42:8a:09:d3:69:2f:90:b5:8e:66:7d:d9:38:
         4f:79:51:30:41:0f:ba:a9:10:a2:c6:31:83:b4:90:4a:c3:52:
         0b:38:e9:e9:e7:fa:7e:83:a2:59:2d:50:2a:83:49:67:70:a4:
         b7:64:83:17:36:b1:0c:01:d7:a9:c2:b8:ee:69:6c:ac:52:f4:
         30:da:4c:01:15:0d:0b:d4:89:ff:de:3c:61:1c:87:05:8d:d6:
         6f:fe:70:d1:1e:52:82:09:d8:16:8b:24:42:6b:b5:fb:c0:cf:
         0e:93:db:3e:b5:1a:12:c5:a1:f1:6d:84:df:8d:5f:21:af:b7:
         e3:1a:1f:c2:cd:cc:6b:62:4d:f6:d9:55:86:1b:18:82:21:b1:
         12:41:51:1e:42:81:e1:f3:cd:15:03:a0:11:e9:45:12:49:db:
         14:d5:cb:09:07:ab:2a:3a:10:5e:3a:4d:51:5a:2e:52:03:87:
         74:c8:a3:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrYG3tRSus7mlw6XNI6j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2Njg5MDg3ZTc4Nzk5MDkxNjg3OGRiMjBkNTU1Njg0YzIy
Y2Q5ZDUwHhcNMjQxMTIyMjEwMDU0WhcNMjQxMTIzMjEwMDU0WjAzMTEwLwYDVQQD
Eyg2OWE5MmM5NjNjZWViMzMyNzNiNDk0YTkxNjYzZTA1ZjhjODBkMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/VklMxD1dXacmIDvCfXrpi1zjmA
85BTAxPcx+DQ6KQLgEui+MVsk5H/6ibUnJqjflHy1fuS/FiRLLQ0FqcJyPpzL8kr
lD6xeDmYnUX4NBiRZV5QVVjZ9pMr+ykzw2wo4o5zXyPgZ6GS5b17YiuUWEyrtFYJ
H15i09FtXkUmBc7lJPVMg/kBjN8Qk6O0RnddhLK3mVkQEBv7uRr3rRWIwVGpuV9x
3rl4fhfDakRfL961hszcoA80GUFx8dyKf1V8+i/anGNM6KZe51l7soXUxCjmhn5h
Dt4Q3Dky6lyBCxqGvVHJJa3IS7mhwfqNWCq4NEfZqV0dqqUHY/dFcD+vcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmpLJY87rMyc7SUqRZj4F+MgNHDMB8GA1UdIwQY
MBaAFGZokIfnh5kJFoeNsg1VVoTCLNnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMt
MWU3YzE3NzI4YjUwLzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMtMWU3YzE3NzI4YjUw
LzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaiRmGcR
Y9UQwA9a3DDp1/QgrVb4G5pqeHBunRPuCachY/AxGLq05UyVaf12PIpGWm3X57Bv
/8EEmEqVtSENFFPqNf28+uDvVuFv7BBCignTaS+QtY5mfdk4T3lRMEEPuqkQosYx
g7SQSsNSCzjp6ef6foOiWS1QKoNJZ3Ckt2SDFzaxDAHXqcK47mlsrFL0MNpMARUN
C9SJ/948YRyHBY3Wb/5w0R5SggnYFoskQmu1+8DPDpPbPrUaEsWh8W2E341fIa+3
4xofws3Ma2JN9tlVhhsYgiGxEkFRHkKB4fPNFQOgEelFEknbFNXLCQerKjoQXjpN
UVouUgOHdMijYw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:24 2024 by rpki-client on console-fra.rpki-client.org