Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File:                     Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier:          2a2pgljxcgZX9s3fIT3mJTyvsVevJJEX+/dyAcxhKD4=
Subject key identifier:   BE:95:64:57:DC:D7:B8:68:85:5D:74:0A:3B:5A:48:F4:F8:19:17:CB
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer:       /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial:       019364B21F09EA0E63257D26B5D25BCF286E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number:          1377
Signing time:             Mon 25 Nov 2024 19:00:15 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:15 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:15 +0000
Files and hashes:         1: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: YtEkfMu/U3f5eDTsXRhqGCnpMdNBdT/W7oB2Hg5h8V4=)
                          2: dXXJ6mnIWEWJtg-BUQDxFWkIgTk.roa (hash: ROqLEc6El4HvEo3h8b4C7uWrpKnjm9fYAljpd3e6JBQ=)
                          3: vv_nmRF-gDvmP2LkFvZKYL0dFJ8.roa (hash: r5iAPLyGmNYKc6uqXiqNuwy910WBoAe6izao5SEsqOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:1f:09:ea:0e:63:25:7d:26:b5:d2:5b:cf:28:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
        Validity
            Not Before: Nov 25 19:00:15 2024 GMT
            Not After : Nov 26 19:00:15 2024 GMT
        Subject: CN=be956457dcd7b868855d740a3b5a48f4f81917cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:74:29:c5:40:ea:97:83:db:b8:1e:b9:bb:
                    c8:e4:6b:8b:8f:7f:17:eb:03:43:f1:6e:b1:b9:22:
                    34:dd:72:87:d7:12:3c:05:e6:a5:8b:52:17:ba:2e:
                    c7:0d:12:ad:b6:04:2b:3e:ed:55:eb:97:0a:21:96:
                    37:51:ce:a7:dc:d2:6b:11:87:84:60:e4:d8:92:5a:
                    7b:a7:c8:c6:06:7c:d7:3d:f0:02:51:c3:c5:3b:db:
                    25:3f:56:c9:9c:79:34:3e:d0:bb:0c:23:61:f8:62:
                    76:be:e2:8e:88:5b:f8:fd:cf:4e:d5:88:17:ec:7e:
                    cc:5a:d3:13:36:b8:32:a6:b9:11:5b:9e:eb:7a:78:
                    13:6b:84:05:2b:bf:45:fd:1e:55:d8:5c:a9:9e:24:
                    28:c1:c3:1e:de:2b:d8:26:d0:c9:2c:18:3c:a1:81:
                    74:fb:f0:48:1b:95:3b:f4:df:69:d3:d8:d1:f9:1c:
                    f5:3d:1d:79:53:c5:37:62:87:6e:cf:89:ff:a4:9a:
                    0d:17:f6:1d:63:df:78:7c:5e:97:dc:92:13:e7:40:
                    d2:d9:18:e4:02:8d:34:76:ae:85:c5:0d:73:6f:a0:
                    32:1d:bc:9f:e6:56:3f:fc:5d:d5:a4:6a:2c:bb:33:
                    fa:8a:fc:ed:05:6e:94:87:9e:10:94:db:0e:14:55:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:95:64:57:DC:D7:B8:68:85:5D:74:0A:3B:5A:48:F4:F8:19:17:CB
            X509v3 Authority Key Identifier:
                keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:7f:c9:79:95:ba:3c:8c:d3:45:f5:25:00:a3:81:c1:fc:
         15:18:23:c0:89:94:96:23:d6:8c:94:54:2a:4b:e3:29:b1:69:
         f4:5f:3b:4e:e8:95:87:7b:b4:6e:51:22:30:e6:8e:36:80:87:
         4d:4c:83:a9:7b:36:b7:cc:fa:fd:9d:44:06:90:37:e7:52:42:
         03:fd:e2:9e:99:04:e7:78:85:fd:2b:bd:f5:55:70:f9:2a:d4:
         f6:a5:62:ae:5b:1a:a2:96:21:3b:25:ba:31:08:7b:78:63:65:
         0c:be:dd:58:43:f4:43:b0:b1:ee:69:bb:08:f6:ca:30:38:cd:
         d0:a5:46:84:24:7e:a6:e9:ae:7f:ac:12:f9:e4:7a:0f:d8:eb:
         4d:42:92:e7:8d:40:8a:53:17:09:97:ea:78:40:e9:49:57:d8:
         87:d3:5a:99:b9:58:cc:3c:b3:8b:73:37:4a:61:3f:5e:85:25:
         e4:9d:15:79:81:68:df:67:8f:fd:a2:d7:cd:d6:e7:f8:e2:0b:
         db:dc:5d:ec:51:0e:e0:5f:77:4b:f4:16:e2:8a:a8:6f:39:80:
         9a:9a:cf:19:f0:51:ed:b9:67:43:54:82:62:34:6d:73:8c:0f:
         3d:b0:5a:7a:36:0e:bd:34:c8:65:5a:7e:af:b8:d4:16:38:a4:
         0f:d8:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:04 2024 by rpki-client on console-fra.rpki-client.org