Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File:                     Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier:          LJXrt2nBd7ajMt38aAZMSFDpXjUqqmu3el0vCmkeIek=
Subject key identifier:   67:C7:D2:3C:72:CD:AE:EF:75:7A:33:9D:BE:00:99:5E:FA:65:73:6D
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer:       /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial:       01935878C483A062BCFCE32912C41FAC902D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number:          026C
Signing time:             Sat 23 Nov 2024 10:02:09 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:09 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:09 +0000
Files and hashes:         1: WV5sxYOT_2xZGV6d5cq__8Cn_3E.roa (hash: hE8IUBPB2DZKwoVTyIgYHhgu80x43ZKEKab23ceM224=)
                          2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: 6kTpXyvqqEp2dcGg6SSPBX6uOSbgS0V+X6K6heAJlbM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:c4:83:a0:62:bc:fc:e3:29:12:c4:1f:ac:90:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
        Validity
            Not Before: Nov 23 10:02:09 2024 GMT
            Not After : Nov 24 10:02:09 2024 GMT
        Subject: CN=67c7d23c72cdaeef757a339dbe00995efa65736d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:82:c2:70:f7:59:fc:86:56:06:57:05:25:
                    1b:94:2d:db:c0:8e:30:2c:ff:5a:45:24:df:31:42:
                    68:0d:c5:05:84:b3:f6:01:3c:77:df:65:98:3c:6a:
                    51:45:60:10:3c:dd:d8:c7:9f:06:fb:46:63:70:1e:
                    7b:01:19:bf:54:1d:a1:27:d5:e8:65:69:f2:a4:ae:
                    c5:92:00:be:e1:3b:50:27:75:f5:0b:57:20:7b:09:
                    7a:44:28:b9:d4:b0:b6:18:2a:93:67:87:57:2a:67:
                    95:10:c4:8f:84:8f:a2:cd:78:d6:b3:a1:fc:41:44:
                    7e:8c:de:a3:a8:81:9a:58:4b:db:1b:17:61:c5:9a:
                    43:fc:40:f0:6c:05:64:97:cf:df:45:9d:78:8c:5f:
                    dd:95:f1:b9:91:89:25:1d:68:4c:8d:51:8d:11:9d:
                    93:35:10:61:c4:86:a3:1e:2a:4a:22:f7:e0:29:dc:
                    4e:26:17:8e:d1:23:29:8a:2d:b9:f0:89:4a:6b:b5:
                    c2:87:ae:e3:9a:32:3a:11:36:a2:35:76:af:d2:18:
                    16:e2:48:2f:d6:8f:bc:4a:31:b6:90:c3:b6:7b:a0:
                    86:75:33:81:11:25:fc:87:cb:8d:82:2b:c0:9a:c1:
                    69:d3:66:97:23:24:56:d7:60:65:63:a7:d5:b1:a5:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C7:D2:3C:72:CD:AE:EF:75:7A:33:9D:BE:00:99:5E:FA:65:73:6D
            X509v3 Authority Key Identifier:
                keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:12:0d:65:0f:22:e2:e7:52:e9:34:f3:a9:77:9f:10:0b:47:
         b2:59:c1:11:7c:05:7d:5b:7f:7b:25:ff:49:0b:bf:bb:d2:a5:
         87:90:bc:c0:e0:18:8a:20:6f:fb:79:15:eb:2a:6f:50:f3:6c:
         aa:28:7e:bb:7f:db:58:93:dc:6d:ac:70:c8:8b:ee:ab:9e:a7:
         79:6c:24:16:f3:4b:b1:8b:b8:9b:c4:30:a0:f0:84:12:82:95:
         84:07:12:7c:a1:8a:86:de:82:10:48:c3:52:7f:52:ba:26:fc:
         12:56:10:c3:2b:76:a3:ba:78:df:46:90:12:61:35:b9:a4:c8:
         18:89:bf:10:15:5e:48:33:49:d1:e9:47:e9:3b:31:4a:62:c2:
         58:0f:10:26:2f:e1:fb:59:99:96:1c:7c:6b:58:d5:94:4d:21:
         ed:29:ca:89:b4:46:c2:9d:22:ad:de:e5:32:7e:60:52:39:bf:
         f8:47:7b:01:0b:3e:2d:9b:8e:74:af:fa:b6:b8:8d:f3:29:30:
         22:53:48:ee:69:e4:ac:fa:df:e3:37:e5:c3:aa:46:68:ae:b8:
         82:8f:7f:a2:59:3f:ec:30:fe:8a:91:24:e2:fa:99:57:2a:c4:
         19:cb:1a:57:2a:20:ab:dd:30:fc:8f:aa:e1:93:2a:90:70:82:
         3b:87:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:02 2024 by rpki-client on console-fra.rpki-client.org