Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File:                     zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier:          0uxM1e5WbwuzPYrQHlTsbR1u5kOfzPqCD+sgsQNucvQ=
Subject key identifier:   41:D3:1E:F1:70:73:1D:11:8F:BE:A3:0D:DF:BD:30:D9:CF:55:A5:38
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer:       /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial:       019356897E3ADEF80AE447DA97251860A5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:11 +0000
Files and hashes:         1: 7QUyNMwUCfUEjIYKr_VcJT9AjFU.roa (hash: kOOvXEjEnaiNXRGKHlzwxLygxsOtFCWF+oJ94Aa2Cg4=)
                          2: nhcnNBDUFPzCBrEN2Solnkm7AqE.roa (hash: 6PvCSFTzYfoW60wSLreDHIp65dobawP7ylMF2UVCSNY=)
                          3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: tzTrntcA92392Shut4x/+3k9KIVuido6YvDKtEEE2ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:7e:3a:de:f8:0a:e4:47:da:97:25:18:60:a5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
        Validity
            Not Before: Nov 23 01:01:11 2024 GMT
            Not After : Nov 24 01:01:11 2024 GMT
        Subject: CN=41d31ef170731d118fbea30ddfbd30d9cf55a538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:05:30:70:fa:01:41:81:92:8a:a4:95:7a:
                    09:ec:9d:c2:a1:52:8b:5f:4e:62:a6:6f:7c:88:a2:
                    9b:2d:e1:9a:52:26:ea:a2:8e:17:8c:c7:f7:ef:3e:
                    37:d7:09:a8:bd:37:40:24:22:39:84:60:31:88:5e:
                    cf:ce:1e:30:a8:ab:96:8a:f0:e4:61:0f:05:7b:48:
                    ca:73:d4:1d:d4:47:63:e5:70:a3:47:55:4e:c3:5d:
                    bd:7d:13:2e:7c:a0:12:04:c9:39:74:00:7e:cf:e7:
                    23:dc:69:0b:eb:32:2a:c3:54:d0:f9:51:ca:d7:a0:
                    f1:11:43:27:c8:9d:6a:14:17:35:d9:19:b7:61:6f:
                    4b:32:06:14:7c:e8:42:eb:61:ad:ca:f1:f8:46:26:
                    e1:3d:af:18:f6:7b:d5:c6:1e:59:a3:42:2f:ea:be:
                    c6:39:2e:f4:66:8f:00:3d:03:3e:88:c4:a4:47:14:
                    86:c7:76:ef:2d:6d:0d:dd:37:e4:a6:cc:3e:fb:95:
                    23:52:ae:32:8d:32:db:ef:e7:5c:47:1c:9c:84:c8:
                    03:31:ac:3d:5d:0f:c0:f0:f6:03:e6:b3:38:98:81:
                    63:55:13:64:14:50:a5:84:aa:66:c5:29:44:ee:71:
                    65:2c:73:c6:35:f3:1a:2a:cd:9e:43:17:52:c9:60:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D3:1E:F1:70:73:1D:11:8F:BE:A3:0D:DF:BD:30:D9:CF:55:A5:38
            X509v3 Authority Key Identifier:
                keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:82:c5:37:10:95:96:cb:46:27:1d:39:97:f0:e6:44:8f:10:
         a5:d5:59:8e:6c:db:5f:5e:83:a6:e0:50:2e:5f:ef:6d:f6:30:
         a9:a6:d2:ba:c7:a9:c9:bd:5b:8b:4b:12:ff:48:cb:30:06:81:
         8a:50:46:a9:b3:71:74:48:d2:96:44:fb:d6:3a:ad:14:49:bb:
         dc:c5:8e:3b:6e:3d:95:65:d1:6a:07:35:b4:e8:04:4f:0a:ce:
         65:6b:89:3c:ab:16:3a:cd:b4:fc:71:d5:83:fe:5e:72:88:76:
         11:36:e8:44:e0:07:0d:f6:61:75:ca:20:fd:00:e5:32:0a:bc:
         17:55:5f:2b:28:86:27:a2:fb:56:d3:77:cb:d5:c5:f9:f2:82:
         f6:f4:50:0b:f8:31:d7:c3:cb:0e:2c:84:e7:34:38:eb:d5:bf:
         10:a5:65:6d:65:18:10:dd:5d:86:5b:0c:16:48:b0:7e:b1:8a:
         6f:7f:d6:17:65:a2:3e:01:ab:91:b0:9d:d3:9d:64:62:62:ae:
         54:be:3f:fb:b9:0b:9c:3c:bb:c5:48:fe:ef:ab:25:32:d9:ca:
         71:6d:7d:2b:be:5c:7e:eb:25:12:aa:ad:0d:fc:72:44:75:87:
         7a:25:0d:04:ac:f2:dd:c2:02:44:e3:83:c9:7d:37:16:61:b6:
         fe:41:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:15 2024 by rpki-client on console-ams.rpki-client.org