Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File:                     zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier:          blpx1/wsAtJGrnoCbgCCCB4mWMDmcIUkYqfQh1xQdE4=
Subject key identifier:   C5:5D:68:9A:03:19:64:E7:15:A6:FD:BD:FC:51:04:63:83:37:11:84
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer:       /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial:       019365FD8F14E3806640DB5CC56B3947A02A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number:          1309
Signing time:             Tue 26 Nov 2024 01:02:16 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:16 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:16 +0000
Files and hashes:         1: Gg6oisODn2qTRlYfJ5GXCjCwAjI.roa (hash: ZvhQWlrWAOHGJkfGnTRwDVkkNCW5DQDDMDZroYNA1JI=)
                          2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: EK3zudg4rQZNV4EfEPD7KJ+1oQ10H3vEt8jRbnHmSK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fd:8f:14:e3:80:66:40:db:5c:c5:6b:39:47:a0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
        Validity
            Not Before: Nov 26 01:02:16 2024 GMT
            Not After : Nov 27 01:02:16 2024 GMT
        Subject: CN=c55d689a031964e715a6fdbdfc51046383371184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:86:e5:94:6b:62:c0:8b:ac:91:74:92:3c:
                    1a:04:eb:6c:e9:33:58:71:25:5b:43:b0:af:92:f2:
                    d6:a8:48:b8:13:1e:d4:9a:84:f9:02:5d:b2:a9:ec:
                    d4:c2:7c:fc:a4:f3:e8:2b:1d:22:35:cc:14:70:98:
                    96:13:5c:7e:e0:ec:7d:fe:91:95:1a:9d:d8:89:fe:
                    ec:44:4a:73:ef:75:d7:fc:f2:c0:1d:93:f5:f3:50:
                    94:62:94:ce:c8:3f:e9:17:60:46:de:fd:66:73:73:
                    6f:a7:3e:d3:21:c8:04:8a:80:e0:bb:b1:7e:d0:2b:
                    6f:ed:d0:78:ff:c5:29:9d:0a:c3:15:f4:a9:53:06:
                    e4:12:8a:ee:57:66:ce:8e:f9:5f:4a:50:3e:40:4f:
                    af:05:8d:da:60:12:a3:6f:68:70:fa:8d:7e:c9:82:
                    bd:58:ba:92:91:76:3d:76:c4:6a:5b:f2:37:4f:a1:
                    42:74:7c:f2:5c:39:17:be:e5:e9:ab:75:3c:4c:75:
                    bc:8a:ea:73:ea:cd:eb:59:3e:48:21:a1:bb:3f:22:
                    20:1e:f1:4e:7d:6a:eb:26:a6:86:91:d8:29:1b:23:
                    dd:7c:ef:81:96:a7:70:dc:02:2e:b6:93:41:5c:67:
                    35:21:1d:29:a1:81:d0:33:a4:95:77:8d:b8:d7:b3:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:68:9A:03:19:64:E7:15:A6:FD:BD:FC:51:04:63:83:37:11:84
            X509v3 Authority Key Identifier:
                keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0a:52:d7:f1:88:bf:0b:98:da:10:19:a8:ae:4a:ca:85:ba:
         f4:cb:32:e3:29:3c:32:1d:1a:1c:96:05:d8:78:5f:6e:1b:f2:
         de:82:b9:84:33:78:fd:1d:6a:f6:38:b3:1c:46:7c:16:75:9d:
         ce:64:b9:d1:72:7e:b5:17:b7:a6:29:4f:12:ab:df:d9:e1:00:
         0c:29:81:10:f7:b6:a1:78:5f:2c:27:c5:6c:ef:d9:75:c0:bd:
         f5:3c:21:4e:14:ad:1e:fa:84:6e:4f:03:af:55:ed:6b:a7:44:
         18:37:c3:cd:1b:66:b0:cd:72:aa:f2:a2:13:b6:bf:2b:0e:0c:
         2c:62:0b:88:65:ca:66:34:12:69:12:56:b0:26:82:fd:7b:52:
         e7:7d:ba:ff:b7:ad:a4:99:83:b1:72:f6:79:ef:bc:b2:0f:fb:
         14:62:4f:0b:92:cc:88:f4:3a:01:e6:ea:66:cd:cb:5a:cc:b2:
         54:d9:81:27:30:8d:25:77:f0:73:39:81:38:2c:1c:5f:50:46:
         fc:66:1d:4f:a6:95:03:04:d3:75:6e:bc:0b:34:64:64:c8:85:
         10:9c:26:c7:fa:05:1c:f0:61:94:0a:84:a7:88:f3:a3:00:af:
         31:8f:6d:28:e2:da:f1:45:6a:fd:44:e7:40:ea:25:6c:de:22:
         be:39:9a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:45 2024 by rpki-client on console-ams.rpki-client.org