Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          TTB6AbLnyhrtciQOnJnA/+zcySC+AYkAFVoJ9RjnKVI=
Subject key identifier:   0C:CA:58:D3:AE:1E:96:F6:79:4A:88:58:10:2A:0D:6B:0C:95:A2:57
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       019355AD498C5F7BC301258CE915DCF32155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          02F3
Signing time:             Fri 22 Nov 2024 21:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:40 +0000
Files and hashes:         1: CA35m5WMms6O4W7e8D9YzEtsByw.roa (hash: RzdQ07EUmt3nlteAn7Hu19bqZoX53PQtupROg6ghhdg=)
                          2: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: FF9rSgnAv9C3n9Inb8x47rsUpup1/y7sFfCrKRiKThM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:49:8c:5f:7b:c3:01:25:8c:e9:15:dc:f3:21:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Nov 22 21:00:40 2024 GMT
            Not After : Nov 23 21:00:40 2024 GMT
        Subject: CN=0cca58d3ae1e96f6794a8858102a0d6b0c95a257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:25:1b:47:3b:21:e0:34:1e:e9:74:e5:67:
                    0c:fb:2a:20:ef:61:b0:1a:01:d7:f1:e7:dd:61:bc:
                    49:41:dc:47:71:ab:58:f0:18:79:36:a1:3a:df:1a:
                    3c:88:84:0a:db:bb:0f:4d:ac:5a:8f:13:66:47:b6:
                    c3:1a:97:05:fd:bd:6a:c5:7d:a7:8b:04:d4:7a:bc:
                    98:25:fa:6f:6a:37:d5:c3:ed:1c:17:4c:17:cd:db:
                    48:14:84:be:a2:85:3b:41:de:39:e1:1b:45:40:3d:
                    50:a3:3a:96:a0:f6:1c:8a:9e:ed:e7:da:f6:9e:66:
                    f3:0b:e0:95:34:ed:10:13:80:7e:29:ac:39:9f:b0:
                    4c:65:53:54:40:4e:08:33:cf:77:a6:50:5a:33:6a:
                    2e:77:52:c2:24:a7:8a:0e:f2:8e:21:82:9a:82:6d:
                    9c:3c:6c:3b:eb:56:9c:d6:0b:7a:2f:ab:81:7e:eb:
                    91:fa:f0:af:e2:b3:46:c6:66:49:90:fd:13:3b:b4:
                    a4:4d:6d:b0:47:03:a8:b1:b1:a7:1a:26:d3:59:90:
                    4c:aa:85:24:72:3e:10:b5:e9:fb:ec:7b:64:dd:f3:
                    c7:f6:c3:12:93:4c:7e:9c:94:7f:04:1e:55:a1:9d:
                    e6:84:3a:85:f2:db:30:a3:1d:7e:e0:38:1e:e3:80:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:58:D3:AE:1E:96:F6:79:4A:88:58:10:2A:0D:6B:0C:95:A2:57
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:75:6f:09:6a:3f:7e:ea:72:78:19:59:ab:26:de:94:86:
         f4:41:74:99:74:cf:fd:13:45:a7:3f:b0:f6:b8:28:76:41:2e:
         3d:4e:2a:71:0c:33:2f:51:32:43:0b:6a:00:81:77:02:cd:73:
         c0:a7:bd:35:3a:06:5d:70:46:5c:71:20:8f:00:cd:f2:80:2e:
         92:f1:68:b9:10:34:91:8d:5c:9d:f5:bb:53:b9:43:1e:d9:45:
         39:33:85:6b:07:c9:83:66:70:28:05:a1:e4:6d:91:23:5d:3a:
         35:1f:84:b6:e2:df:2c:7d:90:30:99:63:64:94:78:c5:7a:49:
         ef:f6:54:d2:c7:f9:b9:6a:99:7e:ac:32:16:08:d4:53:39:bf:
         ba:6f:ca:f5:88:92:cf:2e:7f:53:80:7b:9c:a9:b6:e7:d9:2a:
         e7:ec:5f:11:d0:77:25:fa:09:01:b6:e7:f4:4b:b3:d5:44:41:
         b4:2a:c7:f3:34:8a:2c:40:8a:19:12:78:91:12:b9:80:fe:73:
         c2:ce:eb:48:d8:7e:91:c6:d8:c0:b8:72:96:f7:a4:b2:78:d5:
         59:2f:cb:35:e8:b1:89:62:d6:97:2d:ac:76:15:89:e0:c5:13:
         72:6b:66:9c:81:77:7a:37:c1:e0:b9:8e:7a:93:c5:e4:df:5d:
         22:6e:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:58 2024 by rpki-client on console-fra.rpki-client.org