Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File:                     ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier:          hFBof4oia1qimWDsaPSwNPRZqFr5J12GwZGBsS3RpFA=
Subject key identifier:   2F:04:C1:43:CF:B3:05:61:62:9C:04:A7:E1:CA:62:34:B8:04:7B:60
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer:       /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial:       0191FB22D4BD9BC950BDB608C79BDB2D96DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number:          0137
Signing time:             Mon 16 Sep 2024 14:00:49 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:49 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:49 +0000
Files and hashes:         1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: htbXCz0UA9FRLX61ttC0EDEUmoqMpcqUW2xzfY5CJd0=)
                          2: ieonFT5TOnSAzKbpQfurbnfxz9s.roa (hash: Nc+JFRbKcRjAMnv9vDZ93xnsHe0VezQCPPKJSl8EPR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:d4:bd:9b:c9:50:bd:b6:08:c7:9b:db:2d:96:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
        Validity
            Not Before: Sep 16 14:00:49 2024 GMT
            Not After : Sep 17 14:00:49 2024 GMT
        Subject: CN=2f04c143cfb30561629c04a7e1ca6234b8047b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:de:fe:1f:1a:94:91:94:3a:a8:68:f7:fe:
                    06:a8:04:38:26:d5:fd:03:52:ed:86:0e:ef:ad:b2:
                    8e:4d:63:93:39:89:f3:0c:58:9d:c4:8d:fe:27:fa:
                    2c:5e:6a:ed:10:59:a6:ba:9c:77:39:43:c6:f9:ab:
                    0f:42:89:81:9a:01:b0:bc:0c:65:64:fd:07:f4:27:
                    7f:f0:41:ac:40:35:4b:c7:90:f6:e3:d0:a0:4a:63:
                    22:5b:f9:50:e8:f9:0a:6a:cc:15:ae:bd:5b:4e:0e:
                    ae:c8:77:12:ad:e1:78:00:07:71:6c:8f:4f:85:16:
                    af:ce:5c:72:d3:c4:60:e5:ef:ac:ed:30:92:fe:88:
                    f8:c4:85:3c:0d:5e:5a:f2:21:60:a6:e3:9e:58:cb:
                    f3:e3:7f:1c:4a:0d:83:70:89:01:35:86:6f:b5:72:
                    38:fc:a8:a3:09:23:5c:b0:bc:41:85:b4:d3:8c:e1:
                    6c:ed:df:df:f3:0a:d3:ce:09:13:c7:90:b1:3b:c5:
                    03:cf:85:9f:3f:66:f0:89:21:0a:b5:32:3a:d2:3a:
                    17:28:1c:a4:3c:a9:1d:bf:8f:9a:13:ff:4e:0e:7b:
                    dd:79:63:d8:a3:28:73:22:c8:e6:8e:ec:04:76:a8:
                    cb:c1:0c:e6:16:7a:ca:f5:5f:98:89:48:bb:ee:ab:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:C1:43:CF:B3:05:61:62:9C:04:A7:E1:CA:62:34:B8:04:7B:60
            X509v3 Authority Key Identifier:
                keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fe:2c:22:72:71:fb:0d:ef:5d:22:ca:c1:f0:2e:52:f6:92:
         cd:64:b7:d8:5b:69:a9:5a:bd:10:60:a5:e4:35:61:a2:96:34:
         56:63:66:68:c8:4d:52:36:f1:9f:c1:3e:1d:a0:a1:f4:ff:df:
         86:ca:46:6b:41:c2:94:a8:03:ad:f0:f2:da:a8:47:f9:59:b6:
         68:66:d4:b9:16:63:45:18:a6:28:15:f6:c9:c8:d7:1e:63:2b:
         a6:52:a6:c9:31:69:be:ef:56:d4:d1:17:91:e0:43:f0:d7:c5:
         21:15:7b:bf:d3:e2:05:3c:29:b2:97:3c:e7:49:43:2f:76:cd:
         65:17:38:fe:65:f6:58:1a:c2:ab:7d:39:4b:84:b5:4c:50:b7:
         09:db:8b:3a:62:35:8c:e9:77:6f:e3:61:d2:25:5f:48:74:4d:
         42:1d:70:07:b9:17:61:e2:09:f7:95:45:96:3b:b6:3d:f2:d8:
         c3:29:1d:5b:e4:09:97:6f:f7:e1:a4:1f:43:34:79:f5:71:92:
         8c:2a:0e:9d:17:02:12:2c:47:95:83:40:82:87:7a:0d:1d:76:
         c6:fa:39:4f:42:ef:eb:78:f4:b6:88:19:d1:e0:73:8c:db:56:
         95:a7:c8:67:c5:fe:9c:5c:52:a9:67:a7:51:41:0e:51:0e:d3:
         b1:9a:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:34:11 2024 by rpki-client on console-ams.rpki-client.org