Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File:                     2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier:          ZIJml7VcdXXyboZZnR0Uon5ZsZVxzzAReDLJX4H2ZM4=
Subject key identifier:   54:0C:51:2F:D0:D9:DB:73:F1:FB:AA:22:ED:D5:AA:42:03:63:79:DF
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer:       /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial:       0193587725DA0F15E86979AAE5A0263C29D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number:          0425
Signing time:             Sat 23 Nov 2024 10:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:23 +0000
Files and hashes:         1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: 5i/kvT2CSuVrSpJzuyW/693E+gvqeMUUeNKIM/TSLH8=)
                          2: DayVRFh3CwZvXHH4l5fLy1c998Q.roa (hash: U6C0w0H4glmiG6n4OvVDBbAPPdhMaC+VnHRa+5WANKA=)
                          3: US0rLrhy2Q9wuK38v9eJ_CG69ok.roa (hash: JvWW5sk+1LarD/JYX6mE6AsWIbWCXM7oHLMNo5Nw7ww=)
                          4: jErvgUF6v4KAPkF-z4-vNsv9dO8.roa (hash: pkQVmVGqNGLcMm5h/66JMYUYnXu5RnIZzzQNMDFUkjU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:25:da:0f:15:e8:69:79:aa:e5:a0:26:3c:29:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
        Validity
            Not Before: Nov 23 10:00:23 2024 GMT
            Not After : Nov 24 10:00:23 2024 GMT
        Subject: CN=540c512fd0d9db73f1fbaa22edd5aa42036379df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:ab:cd:e8:2c:5e:c9:31:7d:d0:8b:66:4c:
                    53:c9:3c:6d:c6:b1:e4:4a:6e:98:d1:a0:e9:b8:fa:
                    d4:45:43:c8:9b:4b:22:34:a4:bb:14:66:9f:35:c1:
                    76:11:45:73:e7:ba:a1:bb:a3:b0:2b:59:2c:61:31:
                    3e:60:1e:45:ba:f0:2c:37:15:d2:50:b1:31:2f:0d:
                    74:91:cf:85:52:a6:77:f5:c6:5a:72:07:47:51:a3:
                    3a:e3:7b:3a:83:64:9c:07:c1:7a:cc:21:20:78:67:
                    33:cd:67:1d:68:aa:5b:85:7d:a5:7a:ed:59:03:74:
                    0a:8e:59:6f:f4:93:cf:56:d6:80:b5:7e:d3:97:f3:
                    db:4f:0e:d6:a0:0a:35:1c:78:1a:4c:45:91:ad:1d:
                    e5:fa:f9:4d:98:1b:57:6a:61:13:05:a7:6e:c6:15:
                    28:a0:99:e7:84:45:41:8c:8a:b0:2e:da:97:8f:9f:
                    71:9f:20:12:26:27:1d:2c:6b:b7:94:c0:86:5e:08:
                    ac:68:00:ab:f2:8d:45:8b:2d:30:8f:a8:11:68:d6:
                    25:16:66:fd:00:2d:b2:48:72:56:49:eb:54:16:3c:
                    70:e3:46:b8:89:fa:e4:b4:b0:03:da:90:d3:00:cb:
                    c5:57:bb:a3:61:dc:90:25:d8:ca:2c:46:93:8c:a9:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:51:2F:D0:D9:DB:73:F1:FB:AA:22:ED:D5:AA:42:03:63:79:DF
            X509v3 Authority Key Identifier:
                keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0e:f0:62:32:22:e4:35:d4:84:e6:a2:20:13:c4:9a:ab:ba:
         d4:a9:61:fd:c0:94:ab:15:9f:e7:e9:2d:45:ce:b3:99:23:9f:
         82:22:c0:4f:0a:61:ee:7f:fe:65:0b:21:b4:42:cb:76:02:54:
         82:9b:a7:1e:62:fc:4d:98:5b:8c:d6:1a:96:6d:d2:75:aa:61:
         7d:ef:7e:43:8d:c8:c5:a9:23:cc:b0:58:86:90:8a:c2:7c:3d:
         28:57:b2:d1:07:57:5f:33:eb:01:35:68:12:66:9a:b7:fb:d9:
         c2:56:31:8b:75:7a:38:0f:c4:bd:da:69:85:54:72:7a:bd:d5:
         c4:87:6b:42:b0:be:9a:22:05:a4:9c:3d:c9:b8:70:36:51:26:
         37:0b:3b:54:11:53:7f:9b:9f:1c:b0:36:25:78:72:f0:14:77:
         c9:8c:d4:44:b6:50:41:b4:1c:88:79:08:db:b5:0a:75:2d:d0:
         76:0a:7a:6f:7f:88:83:06:6e:68:ff:20:79:92:22:3e:89:1f:
         ce:ef:c8:66:ee:cb:bb:7e:4e:83:f5:77:cc:0b:b6:4f:94:1a:
         52:55:1b:60:30:e3:fc:40:5b:17:9d:88:74:15:96:18:66:76:
         18:4b:22:61:83:d4:19:05:54:bb:94:33:10:03:69:da:78:33:
         ca:af:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:52 2024 by rpki-client on console-fra.rpki-client.org