Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File:                     ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier:          X9/w0O/YA2eieWDyn9UbmskGQ0dJ0R8ChshwNXQWnZ0=
Subject key identifier:   F3:B7:C2:C2:BE:F0:01:C9:6C:0B:9F:4C:CC:00:4E:7F:C2:CB:68:F8
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer:       /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial:       01936AB47C286BB80111C2DF3CFA8708A761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number:          0E6A
Signing time:             Tue 26 Nov 2024 23:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:33 +0000
Files and hashes:         1: 5iAv7QWA5NMfwHWi5y1iJjBfwUY.roa (hash: 0L7zcIsQzAQExt8Ppd8j9ZjtXt0OdZ16Wz2ipROlkqE=)
                          2: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: V/Ow+eJEK1udMYC5okqzORFmtNx7wX+QetwmLlLr+x0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:7c:28:6b:b8:01:11:c2:df:3c:fa:87:08:a7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
        Validity
            Not Before: Nov 26 23:00:33 2024 GMT
            Not After : Nov 27 23:00:33 2024 GMT
        Subject: CN=f3b7c2c2bef001c96c0b9f4ccc004e7fc2cb68f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:d2:a7:4e:24:13:bb:14:23:74:8f:ed:58:
                    19:3a:f5:73:2c:6d:be:f7:32:46:cd:ef:1c:d8:81:
                    42:a0:40:16:b4:ef:04:14:dc:1d:e1:c8:90:76:94:
                    60:21:3b:51:b2:1a:cd:f8:07:19:63:0c:81:c6:ad:
                    25:7d:ca:99:d6:ff:72:7b:72:74:db:b6:46:ab:c8:
                    02:52:93:ea:ee:f9:a7:45:23:23:1c:40:7a:fc:75:
                    08:08:ef:3c:a4:84:79:29:09:dc:4a:72:87:55:a0:
                    15:ea:67:ef:47:91:0b:f5:3c:a4:ef:23:a8:84:7f:
                    fa:85:ca:89:03:1e:30:39:83:a5:a9:76:a3:28:81:
                    b9:0d:70:a2:ed:12:22:ff:49:5f:fd:cd:5c:65:f6:
                    31:69:1b:b8:98:c0:e0:12:b7:16:ac:58:e7:88:21:
                    01:f1:94:ca:47:9f:b1:95:b3:fb:d2:aa:64:89:7b:
                    f0:88:35:b7:f1:ee:18:0c:95:99:cb:ca:f4:98:a0:
                    62:1b:3b:da:49:b3:9c:89:88:2a:60:45:68:9a:fc:
                    11:f3:15:96:9e:46:5c:9f:da:1b:31:8d:8e:51:19:
                    e7:eb:d3:60:be:60:f2:1d:48:c5:ec:07:c2:8f:65:
                    76:30:1a:89:2f:90:92:eb:c2:d2:5e:7e:a2:a3:aa:
                    c8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:C2:C2:BE:F0:01:C9:6C:0B:9F:4C:CC:00:4E:7F:C2:CB:68:F8
            X509v3 Authority Key Identifier:
                keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e8:39:07:f9:3d:15:99:06:77:11:77:be:c2:6f:10:84:89:
         e5:8b:2c:7a:5c:e7:6b:de:41:bd:3a:a8:e1:6e:34:c6:49:a1:
         ab:ba:9c:da:f5:73:2e:a1:5e:6c:4b:43:c1:0c:01:ad:47:66:
         f8:b3:03:ec:c6:66:64:48:21:63:2b:50:58:1e:73:da:fe:91:
         62:c2:61:6d:0b:8c:41:8b:48:c7:f1:41:85:e3:e1:f3:99:90:
         f3:0a:f4:9e:e5:d8:71:70:11:1c:c8:da:4e:b6:5f:a0:07:fe:
         69:0f:0a:9f:86:19:9e:92:d0:fb:80:fb:66:2c:ed:78:22:6e:
         74:75:af:46:54:3b:ef:56:25:6a:e6:00:9f:af:c2:61:1c:09:
         b6:97:90:d6:ad:cc:65:df:ce:fb:49:38:b2:b8:2a:b4:27:f0:
         e0:7d:4c:f0:60:cb:1b:a5:5b:c9:17:33:8a:28:8f:2f:ae:08:
         df:09:50:79:ce:44:ae:9e:dd:e4:85:45:f2:dd:e8:c7:9b:b4:
         b9:84:83:6d:7f:2a:a2:49:80:a6:a3:da:a1:d0:f8:9c:ad:c3:
         71:3f:5a:6f:cf:36:35:60:b2:dd:fd:5e:1d:60:35:77:7f:97:
         eb:ba:ae:59:65:cb:40:2b:77:32:eb:d1:3c:29:28:a5:2d:33:
         69:55:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:07 2024 by rpki-client on console-ams.rpki-client.org