Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File:                     ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier:          jmNbkZltXg5Fsz4IYW+bDUrFqx8q3GKdJTKDTI0VH+I=
Subject key identifier:   55:5D:8F:A2:72:09:6A:D4:D4:FF:CE:D9:AD:CA:4E:A4:A1:B1:67:87
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer:       /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial:       0193576462D22921A879AFF62CBB23C0E95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number:          06DA
Signing time:             Sat 23 Nov 2024 05:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:16 +0000
Files and hashes:         1: Vf9M-SczmQ3vZ3eeTgDHIENgmGc.roa (hash: QRL6YWCOIeLBde+vKvti2RnLZFuyn0+SUGW/y+qPjRA=)
                          2: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: LQ7eN56CiSDn3tlSvOX1IYs24Qnsejt+WESK23z9MR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:62:d2:29:21:a8:79:af:f6:2c:bb:23:c0:e9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
        Validity
            Not Before: Nov 23 05:00:16 2024 GMT
            Not After : Nov 24 05:00:16 2024 GMT
        Subject: CN=555d8fa272096ad4d4ffced9adca4ea4a1b16787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:bb:0d:fd:e7:dd:98:1a:03:73:26:4e:c0:
                    2a:71:9b:40:f4:43:26:5c:c6:0a:8b:3e:be:5a:1f:
                    f8:f0:e5:65:17:94:9e:57:29:9d:b5:d2:13:b5:d2:
                    01:85:b2:83:af:77:02:10:e7:61:5a:6a:ef:01:24:
                    2d:08:28:d6:c2:17:34:51:38:d6:07:86:85:90:a5:
                    68:29:36:6f:ce:99:a7:5d:47:33:0b:97:60:23:42:
                    f1:fc:84:d6:b4:39:6b:8c:06:59:7a:f9:53:13:43:
                    43:f1:8e:32:6c:cd:27:84:a6:21:de:87:68:c8:43:
                    7e:a4:47:9a:22:48:4c:f7:0b:cd:bb:2e:6a:fb:d3:
                    4f:41:97:67:b0:38:a9:bf:e6:e3:84:9e:ed:23:07:
                    99:96:92:0b:13:39:fc:c7:f5:72:e0:7f:ce:22:ad:
                    77:a3:b2:99:bd:6a:ba:05:03:5a:a0:08:bb:f7:f1:
                    9b:89:77:78:1b:36:28:23:90:b3:1f:2c:a1:35:c7:
                    50:9a:c2:c4:6e:63:6d:e3:ea:d2:94:dc:6c:58:5e:
                    c4:67:99:e6:ec:64:64:6d:cd:bb:ce:98:7c:c6:9f:
                    f1:fe:e9:b7:10:8d:bd:a7:91:e9:44:04:f6:7b:0f:
                    9e:20:85:9f:38:c3:cf:47:54:10:15:87:4f:e7:dc:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5D:8F:A2:72:09:6A:D4:D4:FF:CE:D9:AD:CA:4E:A4:A1:B1:67:87
            X509v3 Authority Key Identifier:
                keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:64:7c:db:0e:15:df:ef:91:df:e0:91:7a:78:b2:c5:47:05:
         9d:34:af:a4:b6:26:ae:61:eb:34:72:c7:f9:be:d1:64:cf:35:
         90:d0:7c:b2:41:76:37:3d:a9:48:6a:a8:a0:ad:a8:09:36:9f:
         d3:98:dc:94:b6:52:aa:0d:9f:13:bb:e9:bd:ff:62:2f:2a:37:
         15:f7:58:a9:be:25:85:e0:8f:b6:ec:d9:14:eb:c6:3b:eb:0f:
         32:1d:5a:28:b7:be:dc:fd:cb:a6:83:da:23:18:9b:d0:05:5b:
         43:ce:07:2c:f3:02:da:e9:19:5b:31:9a:ec:b7:84:bb:87:36:
         a5:48:94:61:6a:67:a8:4a:d7:a9:0f:6d:2c:a4:7a:61:e7:2c:
         e7:0a:bb:ab:a3:6b:0b:e5:a5:56:e9:34:3e:0e:2f:cf:45:5a:
         f0:83:68:02:6e:e1:51:36:a6:2d:c9:05:4d:83:d8:b5:31:00:
         ad:2b:2e:e2:92:d9:a1:12:89:2a:ab:bb:a6:20:4a:96:4f:74:
         aa:d2:21:83:49:1d:cd:f3:07:c7:9b:89:17:6b:dc:14:a3:97:
         93:aa:5d:a2:fc:ff:a4:30:ea:04:00:51:e5:d2:c0:d7:37:8b:
         3b:8f:68:d0:fa:73:f3:4d:a2:9a:ce:4c:1c:2d:22:d3:00:ad:
         8e:32:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:22 2024 by rpki-client on console-fra.rpki-client.org