Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          DKdp5jHR/+tZ/H+Fin1YwXeUDwCW3J7Aauzlg8eUbY0=
Subject key identifier:   1D:D9:2E:91:9C:FD:3A:47:9D:B6:F1:97:F4:38:DD:A8:53:D5:1E:54
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019355AD4EE3893BFA3CF74630DB8C17F729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          0400
Signing time:             Fri 22 Nov 2024 21:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:41 +0000
Files and hashes:         1: 1-U2H3s0T9sHETNkKUrLvGBp5aOI.roa (hash: fpaySC9/fbYR5AKJYHZUTpCj9BD1XHQl0MjLaQ3FfQ0=)
                          2: F_aLpoAt-c6GtAKeNPc_0E_KcPE.roa (hash: +onK5pEiiOlMECKsI0k6PzUOUKnip1tKRVqX1bI87YI=)
                          3: K_mL5gW5-Drkg7stxwzSUadDskM.roa (hash: QGv+S4T8Vvzxume6KRtqqMaItPFAOn604W/lSWw/Yic=)
                          4: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: FU+wGK9f2gZANvdKqzQvCCCPSEd6WSNa3rJikULb6V4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:4e:e3:89:3b:fa:3c:f7:46:30:db:8c:17:f7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Nov 22 21:00:41 2024 GMT
            Not After : Nov 23 21:00:41 2024 GMT
        Subject: CN=1dd92e919cfd3a479db6f197f438dda853d51e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:78:92:e4:fd:6c:d1:ea:54:39:e8:dc:0e:
                    d1:45:f6:f8:d3:66:5a:45:d0:84:ce:2c:7d:39:c2:
                    42:3c:ec:c5:ba:8c:5e:f4:bc:7a:4e:81:14:f8:a6:
                    10:a4:f3:01:cc:2e:0b:a0:b3:16:89:6f:6f:7b:91:
                    85:d8:0d:ac:a8:14:79:4b:9c:3b:38:93:d1:98:dd:
                    f7:2b:cc:c9:0c:ed:d6:c3:db:5c:5a:59:b3:07:ea:
                    95:43:c0:ea:d6:75:76:de:fb:da:73:9a:cb:0d:34:
                    80:5b:e4:ec:a5:0b:c3:8f:98:7b:b6:f0:b1:d3:5e:
                    39:49:74:3f:6f:1a:6e:99:4a:63:a7:67:bd:a1:4c:
                    fd:be:12:9a:be:73:24:4d:36:52:0d:aa:e2:59:64:
                    fe:94:1b:68:6d:36:db:9e:90:f6:70:5d:d9:74:d5:
                    2c:45:e1:eb:17:ec:ee:87:b6:9d:90:31:cf:84:0b:
                    d0:51:81:fc:fb:bb:03:e5:0f:4d:73:10:80:8e:b3:
                    f6:f1:a0:66:da:22:b3:10:2a:42:07:15:3d:65:01:
                    31:56:8f:1e:d2:af:d7:76:ea:0c:78:ba:d3:66:0f:
                    76:91:e3:6a:bb:e3:77:0a:84:42:d9:24:35:d2:b2:
                    7e:ae:7b:36:82:5c:98:70:fb:3b:d2:8a:43:f6:17:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D9:2E:91:9C:FD:3A:47:9D:B6:F1:97:F4:38:DD:A8:53:D5:1E:54
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:22:00:c3:37:b9:d2:13:ff:53:7f:db:f9:8a:20:35:31:c3:
         77:82:05:62:3e:ec:20:ae:24:c4:a2:cf:13:06:e1:5a:4e:7f:
         9d:8e:3f:66:53:a8:e2:eb:01:25:bf:51:da:2d:64:a2:9a:97:
         29:3f:bd:00:39:da:b0:65:31:25:ec:22:b7:3e:f9:87:db:8f:
         7e:c7:f9:4c:77:8d:0b:44:c2:fb:f5:92:8e:22:56:3b:02:ad:
         aa:5c:ca:4d:51:a1:bd:7b:6d:75:1b:91:eb:28:42:1c:2a:dc:
         bd:75:ab:51:68:c6:84:32:bf:de:29:c9:6f:27:0e:5c:17:93:
         19:57:63:94:46:ab:5b:c2:02:10:3b:c7:57:5a:d6:96:f7:dd:
         53:88:26:48:62:bb:0c:00:57:83:38:40:14:4a:c2:71:03:78:
         37:b1:27:bc:e1:54:4f:a6:65:6f:40:4f:c6:c9:7d:50:d4:55:
         5b:b3:63:37:1c:be:37:c9:f9:0c:6f:52:b7:d8:30:03:bf:8d:
         db:90:82:7a:9e:19:0f:19:c3:9c:9c:38:a9:f0:f7:ba:f2:ff:
         a6:de:1d:ad:95:03:7e:a3:5f:43:54:7c:05:36:9c:38:b5:1a:
         be:76:a9:11:50:52:24:5d:30:aa:3b:1a:58:83:55:00:ca:18:
         a7:65:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:26 2024 by rpki-client on console-fra.rpki-client.org