Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File:                     ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier:          72HwpjpH5p7lzSTvAOlhvjIOAAiiR2MPIQtt0kvoDpI=
Subject key identifier:   76:63:C8:05:3F:3E:91:ED:34:95:0B:A1:8B:AC:E1:F8:45:EC:09:16
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer:       /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial:       0193568A0578B02744BBACA6F501ED0CC811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number:          0E33
Signing time:             Sat 23 Nov 2024 01:01:46 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:46 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:46 +0000
Files and hashes:         1: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: lz7YhFLufgGcqHmcDTHYUm0jDSG5hI5WdXZD8rfuu24=)
                          2: pKyhzomAnC4gjUYBSVNTdEO9zNk.roa (hash: lSEOeHgNn3a6yPc7y5AX0bH4wkjngdV3F1cZgfaxj5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:05:78:b0:27:44:bb:ac:a6:f5:01:ed:0c:c8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
        Validity
            Not Before: Nov 23 01:01:46 2024 GMT
            Not After : Nov 24 01:01:46 2024 GMT
        Subject: CN=7663c8053f3e91ed34950ba18bace1f845ec0916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:3d:9c:1a:c2:fa:ff:35:37:14:d1:2a:35:
                    4c:89:b0:9a:8c:21:fc:9b:18:9c:34:c5:9f:ec:54:
                    be:ab:c3:f3:bb:35:e8:20:ad:4f:8d:e9:53:74:33:
                    7d:5a:5d:6e:f4:3b:2e:8a:81:3d:a0:a0:f9:ea:68:
                    69:7f:af:45:b3:41:b8:e3:34:01:1c:c0:e5:62:af:
                    fa:8c:e5:41:b5:83:e3:87:6f:74:6a:1a:fd:a1:d2:
                    96:7d:ad:02:df:19:8a:e1:a0:c3:bb:d5:ff:74:c5:
                    f2:02:70:dd:ec:f6:12:67:c6:eb:5d:c7:0d:a8:0f:
                    b5:d3:ac:c3:21:c4:ee:b7:26:69:72:cf:28:ce:fb:
                    37:73:9f:57:69:36:b1:f7:49:be:ff:ec:d4:0c:c2:
                    a1:2d:4f:fc:61:26:20:04:df:99:96:99:00:d9:94:
                    53:e7:51:d3:90:13:8b:ab:15:b2:ac:c3:e1:63:62:
                    1b:48:72:78:f8:ed:92:ab:cf:9c:79:60:29:89:85:
                    80:60:02:96:67:d6:76:fd:54:81:44:3d:ee:5a:5e:
                    76:83:59:d8:a9:c1:92:a6:de:4e:de:1b:1a:3c:ad:
                    f2:f8:6c:6d:64:82:72:47:00:53:82:c8:5f:78:23:
                    70:50:4d:b9:85:09:e4:a3:f9:db:b4:27:01:cf:d3:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:C8:05:3F:3E:91:ED:34:95:0B:A1:8B:AC:E1:F8:45:EC:09:16
            X509v3 Authority Key Identifier:
                keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2c:f9:67:40:01:b8:5a:98:32:93:a3:6b:ac:97:71:db:14:
         26:98:90:ed:91:83:7c:2d:4f:4a:d2:6e:c2:f6:09:17:6c:3e:
         f6:98:eb:bf:a8:65:4d:a5:43:16:00:12:87:82:5f:4b:6e:65:
         5b:33:d0:2e:3c:0f:38:6f:b2:f9:2a:7a:02:95:9f:70:1a:7c:
         7e:27:34:f3:76:bc:64:8e:85:90:22:cd:0d:23:27:83:71:89:
         f7:d3:db:b1:28:d6:08:9f:55:52:b9:61:55:8a:34:3f:08:5e:
         71:8d:a9:94:da:85:8f:3a:95:4e:43:56:c5:83:78:1a:0e:01:
         55:4d:a0:b1:2d:78:0a:d8:45:98:e7:79:70:58:8a:15:24:01:
         24:ad:40:cb:c9:2d:ab:df:c5:eb:f9:90:41:c8:13:14:2d:1a:
         68:bf:cf:e9:65:bb:72:e1:f7:11:97:e1:f3:58:38:2a:fb:6a:
         bb:73:72:db:ae:b5:87:f9:19:62:8f:7d:a8:17:84:de:61:90:
         21:1a:ed:7e:58:b6:81:29:09:05:45:ba:bd:40:3a:38:57:a2:
         e1:99:da:2c:86:d7:f4:10:15:e3:15:9a:85:77:d2:9f:c3:b0:
         2f:40:5d:cf:19:48:b9:11:47:6a:8f:29:41:d0:e5:d8:25:94:
         ca:6e:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:20 2024 by rpki-client on console-fra.rpki-client.org