Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File:                     ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier:          lhtgkvtjLZ2WTKwrOWpm1UJNOU8sCygQFO2chrhlObA=
Subject key identifier:   33:BF:5B:4A:FF:31:CE:E0:71:79:A0:99:F0:8E:00:BA:AA:F1:89:37
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer:       /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial:       019356890F7223BE62B42A26139D1808D382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number:          07D7
Signing time:             Sat 23 Nov 2024 01:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:43 +0000
Files and hashes:         1: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: yMUol/rRsbab/n0N7YJ+7IWIxXjHW67d3u/AIQzBbzY=)
                          2: a4nVjj6OI8DjTRM5WFPGHhbpk10.roa (hash: r5qKTwt3b8F9/RSnDsAQtquGACsOF5+j41JQ16fdLus=)
                          3: j0IWSfbYP13OJmoHZTjGFvChNuE.roa (hash: jt9I3VP2cPp8UGACV3NIGtGH41UwO07mMfCngUYARQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:0f:72:23:be:62:b4:2a:26:13:9d:18:08:d3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
        Validity
            Not Before: Nov 23 01:00:43 2024 GMT
            Not After : Nov 24 01:00:43 2024 GMT
        Subject: CN=33bf5b4aff31cee07179a099f08e00baaaf18937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:e0:20:e4:3e:dc:40:fa:60:50:8a:47:74:
                    2a:4a:c5:ec:f3:ed:7a:ec:61:9c:ee:c3:4b:c0:38:
                    7d:c4:24:9c:cc:09:97:12:dc:d1:dc:7f:d4:37:f3:
                    09:f9:d2:60:66:fc:c1:1a:e1:5e:e7:20:6b:4c:85:
                    f6:ba:05:ef:f4:fd:36:fb:67:21:1f:0d:7b:85:fc:
                    90:19:0a:4e:f7:a4:f6:73:30:33:f2:f7:92:a4:9e:
                    e0:06:75:b1:a5:bb:46:d3:15:5b:8f:8b:a3:27:f7:
                    a4:84:e6:9c:f4:79:8d:70:c8:b3:ad:f7:b1:a8:96:
                    bb:6d:a1:fb:40:9e:3f:83:25:f3:fc:b3:7d:0a:8d:
                    91:e5:67:62:bd:7e:8e:b3:c7:29:cd:13:f6:1a:48:
                    b4:33:e9:56:af:ef:91:b7:b0:a5:4e:e5:12:1e:b7:
                    15:30:a3:63:5f:b3:ac:4a:53:6a:8a:6c:ee:4a:e8:
                    a8:9e:eb:db:4e:b1:32:ab:da:b4:02:7e:d6:21:c4:
                    52:d2:ec:10:ea:31:54:54:b8:a4:72:fe:3b:68:42:
                    bb:3e:61:51:5e:cb:54:5e:f1:c4:aa:12:a0:38:7f:
                    71:de:86:f5:89:50:cd:0f:52:e1:ec:03:b7:20:00:
                    ce:dd:af:d5:17:87:87:58:dd:ca:3f:d1:8f:35:01:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:5B:4A:FF:31:CE:E0:71:79:A0:99:F0:8E:00:BA:AA:F1:89:37
            X509v3 Authority Key Identifier:
                keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b1:6d:17:a8:11:c0:dc:3f:77:b5:5f:ad:4d:33:57:c2:73:
         15:f1:87:ea:52:c9:76:dd:63:94:8f:8c:34:7e:9c:a9:ca:0b:
         5f:b5:d2:d1:a8:62:03:9c:7c:f2:66:14:d3:a5:45:9a:05:a6:
         60:a4:8d:97:d3:1e:26:27:e3:c3:de:2d:0f:d8:f3:d0:54:9f:
         cb:59:ab:92:aa:32:77:7a:d6:54:f1:b5:30:7d:37:9b:71:23:
         8e:60:2c:06:a6:2c:09:75:bb:6c:ac:e1:58:b3:0e:85:4c:9c:
         cb:45:b1:57:03:aa:4f:17:00:b5:7b:3c:36:9f:7a:da:c9:63:
         ba:61:40:cd:19:0a:57:a3:14:6a:ca:30:a8:62:9c:6f:57:e2:
         1a:fb:cc:e0:01:98:42:66:34:e2:5e:b0:48:9c:54:47:99:82:
         4d:f9:fd:ec:18:b4:62:57:25:84:65:6c:28:35:13:24:eb:18:
         81:d6:11:ad:4b:a3:a6:11:c1:78:33:cc:64:60:56:59:9e:9f:
         f4:dd:ff:6e:42:ed:2a:6c:32:4d:7c:85:02:b9:27:95:c5:66:
         3d:c2:60:65:0d:e9:cd:d0:fc:0a:d6:f7:2b:e2:8e:0f:7b:c9:
         82:a1:61:01:01:c3:5e:f5:23:38:ba:32:eb:b0:22:e9:69:b9:
         44:b2:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:26 2024 by rpki-client on console-ams.rpki-client.org