Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File:                     z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier:          cEgn3KzT6zJ9j7QnIqpDc2IdE9XBqBmMHoffGMGsXlw=
Subject key identifier:   B0:02:BB:22:08:29:24:71:B7:A4:4A:5D:B3:62:54:CF:92:97:62:5D
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer:       /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial:       019358405191B8F4753FE6E2B0901327D8A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 09:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:30 +0000
Files and hashes:         1: nKcQpxn7zhxqOoTayzhE5kPjYWg.roa (hash: AGzJgeV4vfJUzvcXgXicB0Z1c91G8tUy8JVQon+034A=)
                          2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: FnXn/jeNsJ6NJUUJjKjrWbc8sVDy0B0g3MDBqFDIP1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:51:91:b8:f4:75:3f:e6:e2:b0:90:13:27:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
        Validity
            Not Before: Nov 23 09:00:30 2024 GMT
            Not After : Nov 24 09:00:30 2024 GMT
        Subject: CN=b002bb2208292471b7a44a5db36254cf9297625d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:5c:c5:19:1d:2b:0f:14:11:7f:36:ba:b3:
                    4e:cd:9b:79:62:85:5d:03:0c:92:9f:0b:ec:f8:97:
                    56:d7:2b:69:bf:de:c4:63:33:b0:b3:88:f1:ab:9f:
                    ac:23:6d:6f:42:9a:da:3b:d2:54:8c:27:2e:f7:af:
                    4e:0c:b7:0b:b1:cc:53:56:63:ac:33:25:f0:47:6c:
                    8d:ba:ef:6c:e6:f2:5b:43:7d:ab:4c:be:fa:bb:4c:
                    9f:f5:94:10:2f:d6:12:09:7e:09:62:83:82:06:24:
                    db:97:8b:81:ab:76:1f:97:89:77:e6:62:23:7e:88:
                    b2:6a:63:83:ec:0b:aa:b6:3f:6f:6c:f5:44:14:17:
                    60:be:fb:97:ec:9c:ab:75:4f:fc:32:c9:af:47:98:
                    76:ce:67:8a:25:6e:2f:15:4f:ed:04:85:65:59:86:
                    a7:4c:0b:a0:2a:8f:05:67:24:c1:08:fb:5a:df:3b:
                    2d:46:28:fa:ed:c2:a6:76:f5:90:63:bd:6b:a9:57:
                    62:d6:1b:c1:13:b8:fa:01:b6:8f:ad:fa:23:ba:8f:
                    b8:02:dc:f4:c9:1d:be:c8:f2:ca:2d:b7:d2:22:7b:
                    c7:73:eb:5e:6f:b1:21:0f:62:2d:ab:e0:e9:37:d0:
                    cc:2f:e7:ac:fe:96:be:58:50:04:95:92:fa:a6:d6:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:02:BB:22:08:29:24:71:B7:A4:4A:5D:B3:62:54:CF:92:97:62:5D
            X509v3 Authority Key Identifier:
                keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:99:e7:f9:43:10:76:45:f4:0a:e4:27:ee:f4:b6:73:44:
         54:b0:6e:52:da:bf:fd:be:47:cf:f2:c6:30:2d:fe:17:fe:d4:
         01:29:7d:f8:76:83:f8:87:69:48:af:b3:ca:76:34:3d:2c:44:
         d3:9a:85:8a:84:6a:61:59:0b:3f:76:b1:c4:00:dd:58:de:76:
         40:7c:a7:8a:ff:3d:4c:5a:06:30:73:53:66:cb:7c:ea:88:8b:
         c2:fa:c4:58:84:63:62:9b:4d:1c:6d:bb:b4:59:7b:ba:7f:5d:
         67:0a:a6:57:38:be:d6:32:47:74:0f:9c:da:8a:a9:97:84:9a:
         0e:4e:32:7e:e8:0e:e2:d2:ff:8e:e1:58:84:9d:78:14:21:84:
         e4:79:89:71:22:f1:b0:9e:f4:86:72:76:12:a9:4a:2e:1f:19:
         2e:3e:c5:72:6a:f9:db:df:e3:da:0b:5f:c3:32:94:f2:58:0b:
         9b:ef:bb:79:3f:8b:ab:b2:e6:8b:2a:c1:22:c4:76:a2:a1:93:
         16:1c:47:ea:ec:d5:e9:00:52:dd:11:e0:2a:b3:d3:80:24:74:
         bc:88:ad:95:b2:26:52:6e:b1:5f:5b:0d:3d:df:fd:85:3f:66:
         18:3d:93:9d:9d:ed:d3:0e:f8:80:19:76:fd:b8:19:33:5a:cc:
         de:eb:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:28 2024 by rpki-client on console-ams.rpki-client.org