Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File:                     zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier:          BW3kwJxL+8vvqiVFcDuq8VXVQZ3ykZeP8LYgk9k/+uY=
Subject key identifier:   26:23:32:11:C9:7F:E2:BF:F4:B6:C0:D8:F5:D4:05:76:E4:DE:E4:D4
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer:       /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial:       01935A65C1B3D896B5D7213EAB0B861F1884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number:          0D6D
Signing time:             Sat 23 Nov 2024 19:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 19:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 19:00:38 +0000
Files and hashes:         1: 1-8h05c-wk97m9L81JVVxwTFysFo.roa (hash: sb+xxScH5wWLmO3vHL/BOTPZQlitly/UgGDyT5pggJM=)
                          2: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: 5xDmomAuf+2s63xO0UEPVReL7iWP5sv1Ci4Yzv/o9S8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:65:c1:b3:d8:96:b5:d7:21:3e:ab:0b:86:1f:18:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
        Validity
            Not Before: Nov 23 19:00:38 2024 GMT
            Not After : Nov 24 19:00:38 2024 GMT
        Subject: CN=26233211c97fe2bff4b6c0d8f5d40576e4dee4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:b9:01:0d:70:db:7c:ba:d6:6a:5a:b0:42:
                    d2:28:5c:5c:b4:5e:60:df:d2:8a:e1:89:92:6d:3d:
                    1e:7c:66:aa:67:6c:db:ca:26:b6:8e:32:4e:f3:f5:
                    e0:b9:84:19:9a:1c:29:fe:cd:5c:a5:18:73:07:21:
                    c6:b6:c8:a1:9a:97:16:af:e1:f6:6a:88:6b:d3:cc:
                    7c:c5:c0:14:86:f5:f5:37:21:ca:d1:32:ef:dd:05:
                    5a:f8:94:59:67:0a:a9:d5:4f:75:13:df:75:22:ff:
                    50:8e:a2:ee:c9:33:06:99:7f:b0:e9:3c:b8:16:7f:
                    1e:5d:4d:8a:92:37:d4:0d:e8:52:f2:13:b9:05:5a:
                    2d:c5:ab:de:9f:4a:a7:a0:1c:b3:ea:b6:3d:eb:1c:
                    6a:29:68:49:8c:6c:3c:25:5d:4b:05:f8:26:d7:28:
                    08:e3:d3:5b:03:cd:0b:f1:ca:15:c9:3c:76:15:b0:
                    09:ca:42:58:ec:b4:05:b4:3d:fb:fd:91:73:b3:1d:
                    60:82:91:08:62:dc:21:a3:6e:0c:c3:da:44:b9:1e:
                    a9:23:92:fc:d2:d6:8c:8b:9e:c8:68:7f:16:9b:6b:
                    a8:01:be:47:71:a5:16:99:4b:97:55:a7:9c:51:32:
                    06:0f:8e:d4:67:1c:c0:18:11:8c:e6:85:29:04:e5:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:23:32:11:C9:7F:E2:BF:F4:B6:C0:D8:F5:D4:05:76:E4:DE:E4:D4
            X509v3 Authority Key Identifier:
                keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:47:49:e1:79:a1:a1:5e:c5:bf:15:c2:83:5b:1c:cf:f1:
         75:15:aa:17:c2:05:66:6f:4e:12:6f:1d:71:5a:cc:2f:d2:42:
         03:a6:b5:77:89:12:20:ea:c3:07:a4:65:f1:68:a4:04:94:1a:
         9e:bd:4e:68:c7:42:8f:c4:a4:55:fe:67:48:71:47:51:57:68:
         28:a0:a2:68:81:93:6f:0e:17:c7:ec:0a:71:05:75:0e:4f:a7:
         ad:2b:87:8b:17:06:e9:bf:4e:c7:a4:73:e7:26:0d:c1:79:c9:
         a7:12:a9:ca:a9:4d:85:77:55:79:55:48:37:c4:36:98:77:5e:
         a8:9d:87:76:98:71:c6:9f:a1:66:94:5e:54:34:0e:7b:9f:ac:
         c8:88:65:7b:5d:e6:7c:f7:1f:de:50:ac:0b:d9:a4:ac:ad:3d:
         1a:fe:f6:f7:3f:77:78:6d:15:23:b4:fc:12:3e:1d:60:1b:d0:
         02:aa:3e:e8:09:36:90:20:3d:42:f2:53:3d:e2:07:38:d6:a7:
         b2:f8:5b:70:ec:49:d4:c9:24:10:30:94:38:72:25:8b:8e:93:
         df:7d:4f:50:a4:88:04:63:58:a5:b9:96:b2:9d:54:33:b6:2d:
         c5:ee:d5:05:8f:07:ef:a5:a4:43:97:a0:1d:e0:6d:3f:92:55:
         69:22:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:57:10 2024 by rpki-client on console-ams.rpki-client.org