Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File:                     zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier:          VWgXOLLCdi9ignASIKfiR3C/DfdyOzZTlxxVJfRohoU=
Subject key identifier:   DA:BF:9D:23:24:2F:E2:F1:92:68:4D:10:51:70:D4:D6:B0:16:E4:E2
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer:       /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial:       019239CB0EA1AB3ED2A9B9D21D41DC3492FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number:          02B2
Signing time:             Sat 28 Sep 2024 18:01:01 +0000
Manifest this update:     Sat 28 Sep 2024 18:01:01 +0000
Manifest next update:     Sun 29 Sep 2024 18:01:01 +0000
Files and hashes:         1: JMLzvJmu_dcEsW9-eLZ404ZLejA.roa (hash: lfKbRxpOs/10xX7azF90O/RFzoluuZp/iI6K2i4pDiA=)
                          2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: R3rVT3vwnc3w9c/T6MF5t70YbPlS9e5YSqkyS38R9NE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:cb:0e:a1:ab:3e:d2:a9:b9:d2:1d:41:dc:34:92:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
        Validity
            Not Before: Sep 28 18:01:01 2024 GMT
            Not After : Sep 29 18:01:01 2024 GMT
        Subject: CN=dabf9d23242fe2f192684d105170d4d6b016e4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:a3:7e:31:18:31:33:56:29:9a:65:c3:ea:
                    31:ff:5f:85:2a:29:7c:70:86:c4:4f:09:41:f7:2a:
                    2e:35:95:f3:1a:d3:ba:2b:0c:7b:f6:fa:57:2b:82:
                    d5:53:53:d1:84:d0:2a:16:51:96:93:51:22:08:d4:
                    74:1e:ef:41:ff:ce:6c:45:07:51:46:bd:f3:21:b9:
                    a9:e5:55:a7:3b:cc:d2:8f:7a:b7:33:f5:fd:7a:f8:
                    7d:c9:00:f3:2e:79:fa:d3:78:14:6b:ba:e8:31:fd:
                    06:13:2e:1f:95:6d:82:96:78:5b:e4:1e:90:5e:8c:
                    cb:22:dc:cc:97:4e:8e:d4:af:ac:7d:4f:0e:d7:bb:
                    59:f4:24:34:4a:6e:ec:8c:8a:53:09:7d:eb:42:0e:
                    17:d1:53:ab:ad:bc:17:ee:ed:93:44:0f:ac:c9:d4:
                    da:f3:8a:09:7e:41:79:6b:85:d7:56:08:d6:74:58:
                    cd:ef:ed:bf:11:d1:53:3b:e3:2e:06:83:8a:c8:58:
                    34:12:55:dd:59:1a:84:f6:3f:c5:9d:d3:52:fe:cc:
                    41:a4:30:90:7c:32:fc:9f:64:66:d3:68:48:05:97:
                    75:d7:b3:6d:04:bd:84:17:75:ce:1d:cb:2e:8d:2e:
                    84:44:d7:a8:de:9e:b6:d5:04:51:ab:de:53:fe:30:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BF:9D:23:24:2F:E2:F1:92:68:4D:10:51:70:D4:D6:B0:16:E4:E2
            X509v3 Authority Key Identifier:
                keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:74:12:4a:b6:77:da:3a:b4:71:8e:e6:f4:51:17:6f:b5:ab:
         74:87:49:74:62:db:5b:91:4c:91:d4:42:8f:fb:55:66:b4:97:
         64:fb:f8:5c:ac:29:15:58:e0:41:dc:0c:01:33:ce:6c:57:79:
         4f:c7:3d:4f:95:f6:d5:8c:24:0f:73:f9:89:f0:5d:8f:87:15:
         5f:48:33:f5:9e:7d:81:b9:10:3c:4f:d9:ed:60:db:1b:5b:6f:
         5f:cd:f0:67:41:3a:ad:00:f1:f6:f6:c3:aa:a5:88:64:cc:f7:
         37:2e:ef:82:2f:1a:14:2a:40:ca:c8:3b:83:ec:65:79:65:07:
         3f:a3:f7:10:3a:e2:fc:8d:31:10:79:b7:e0:88:2e:b5:2b:ee:
         df:db:91:75:0b:e2:02:cc:56:ae:93:73:c6:b7:28:21:a2:97:
         38:f9:68:b8:2d:26:2d:5f:e8:37:66:8e:93:a3:a2:90:b2:cb:
         fb:ae:52:9d:a1:01:06:d5:3e:82:98:d3:9e:96:31:ae:ee:90:
         a8:03:55:9f:64:42:cf:0f:c9:08:01:cd:86:ce:61:3b:d3:47:
         79:36:de:83:76:ae:12:e0:2c:df:e8:8e:c3:5b:4e:73:2e:7b:
         3b:54:24:29:e4:16:ca:49:17:8d:32:b6:b0:4d:76:19:f4:e3:
         b3:4b:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:24:47 2024 by rpki-client on console-ams.rpki-client.org