Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File:                     Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier:          0K4GOfn4QdkBY9wiGWaX0A7IlgpJg+AcqZVPKmGupRY=
Subject key identifier:   5D:63:F3:17:3F:DE:03:BF:0A:A6:23:D3:20:1D:20:3D:3D:D2:5A:5D
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer:       /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial:       0193553F4C99A47E89473F6186853332D441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number:          0F02
Signing time:             Fri 22 Nov 2024 19:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:31 +0000
Files and hashes:         1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: 3XYtyBxcsVW08EECqNi0vgdzDfo6Do5Ov99w/ofYQkk=)
                          2: hRniPKDMNH8bGieMKO10BwYZS3E.roa (hash: NQH7zxziEjSw1+Bnv/+5p/BxYuRG0RhKVk6eFL3K7hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:4c:99:a4:7e:89:47:3f:61:86:85:33:32:d4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
        Validity
            Not Before: Nov 22 19:00:31 2024 GMT
            Not After : Nov 23 19:00:31 2024 GMT
        Subject: CN=5d63f3173fde03bf0aa623d3201d203d3dd25a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:0f:94:28:ac:66:2f:c0:de:7c:29:cd:de:
                    0a:f2:17:84:64:0f:af:fb:e2:24:c7:5e:23:a5:2b:
                    48:48:86:88:66:cf:8b:6a:a0:2e:ab:1a:3e:e8:83:
                    3c:0c:c3:40:57:7f:c1:15:22:9a:b4:eb:06:5f:ab:
                    56:17:f3:a8:88:5f:a2:75:0e:83:fe:cc:d1:68:41:
                    92:0e:5d:b4:23:15:0f:92:b0:4d:4d:00:23:01:fd:
                    9a:e4:90:3e:06:3b:40:2a:bd:74:50:e8:ae:4c:cf:
                    69:3f:06:72:44:5e:23:c6:08:31:70:4f:e5:59:79:
                    49:70:aa:da:e0:81:ee:c5:e3:d9:16:10:ef:7a:aa:
                    a0:af:6e:a4:4f:e6:70:d4:b2:ef:0d:99:bd:6a:a4:
                    95:ee:f8:e0:a4:b2:ff:ce:34:c9:fc:6d:07:e5:e6:
                    72:a2:01:9a:5c:68:81:0b:a8:9e:fc:b2:dd:c5:b8:
                    35:96:25:70:e5:b5:7c:17:c2:f7:f6:79:a8:18:a5:
                    1b:72:60:90:71:85:1f:15:b1:1e:b6:13:f3:6c:a5:
                    17:67:82:cf:e3:8a:25:e3:66:1c:c3:f3:cc:57:64:
                    73:09:2c:aa:ed:c6:52:08:77:e7:1d:e4:5b:5a:9d:
                    3f:82:71:09:0d:8e:68:d1:85:43:8e:43:f3:bc:46:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:63:F3:17:3F:DE:03:BF:0A:A6:23:D3:20:1D:20:3D:3D:D2:5A:5D
            X509v3 Authority Key Identifier:
                keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:f5:f1:79:6e:e6:f5:de:d6:7b:85:13:43:81:42:b6:24:
         aa:3c:ee:00:78:2f:5f:80:df:d4:d6:bb:ee:0b:2f:f3:d3:59:
         bd:60:5a:f2:59:61:aa:5f:01:42:84:8f:48:ae:c6:7b:c3:6b:
         5e:f6:0a:9a:b0:05:48:0a:f9:b1:8f:84:db:76:46:76:69:0a:
         7f:df:b3:0a:f2:14:bc:7e:1b:58:fe:99:9e:33:0d:a5:a5:08:
         d6:96:f5:2e:09:12:e3:63:13:e8:5b:bc:87:56:60:1f:be:f1:
         1f:a9:d7:a8:71:1d:0f:14:eb:bd:59:ad:fa:61:e0:96:19:4e:
         fe:50:0f:e7:0a:99:79:21:28:e6:0a:69:c8:5d:0f:0b:e5:65:
         b4:fe:18:77:46:bd:f9:f3:ef:78:79:f3:3a:02:58:c6:dd:97:
         27:ee:b1:01:c4:fb:8b:67:31:40:0a:d9:19:16:e6:85:e0:27:
         9e:a1:a6:7e:45:1c:ce:82:4a:2c:1f:bc:e9:b1:70:db:d8:8b:
         39:15:66:a8:03:c1:56:0e:07:3e:fe:b7:cf:72:0b:47:58:a4:
         3d:8e:c6:ee:40:3e:b4:bd:c0:ac:74:26:78:6d:01:86:55:ca:
         cc:41:15:f9:40:a7:00:25:9f:c4:68:2c:db:97:58:4e:3f:0b:
         6d:cf:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:30 2024 by rpki-client on console-ams.rpki-client.org