Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File:                     ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier:          q7tcTpXSW1J+kkPBml+BeveXHM4pzpiA7qt5ZhU2yuQ=
Subject key identifier:   05:3D:39:7A:C0:2B:93:41:DE:B5:71:E1:EE:27:38:F5:A1:3F:66:52
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer:       /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial:       01935274F5BE1C20B2EE9DA28EC7826A8754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 06:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:16 +0000
Files and hashes:         1: 3waXek4Hdr5smn7q9L85HkP5gMU.roa (hash: nfqi3Uh/aMwv7IDxnPZzPN8aQWH83k2ECg8j1g6wepQ=)
                          2: IV2mFCgj0ibxGC-UczhakMfvQvM.roa (hash: I/SZu41kK3DXt17Sz0Nu8VuII2/4DoSCiy1Rk5SdbG8=)
                          3: JtqoxzlQHFdy-Xn-N6CSrg2v2i4.roa (hash: eJ8muh57pc+sUoWENtLfYgL9rTyZaHXtwR5GD5TZYrg=)
                          4: rKqbvBRxaa_Qi9ASgxRQF-OX-_w.roa (hash: wWq1izK5w4WXApNDVXwoXlEFNpJ2eCjmOXY8hQFLmlo=)
                          5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: 17dZvNsrIYRllsl1JxPSwMY4s6i4xnl/x1+PapJkgcs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:f5:be:1c:20:b2:ee:9d:a2:8e:c7:82:6a:87:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
        Validity
            Not Before: Nov 22 06:00:16 2024 GMT
            Not After : Nov 23 06:00:16 2024 GMT
        Subject: CN=053d397ac02b9341deb571e1ee2738f5a13f6652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:b5:a1:ec:09:9a:bd:f8:41:83:34:30:85:
                    d6:9a:4a:82:e2:d7:ea:92:c3:b1:00:55:fc:18:4b:
                    37:0d:01:c7:51:e8:59:0e:61:06:de:6b:59:29:ca:
                    c8:51:9c:4a:b0:a0:64:1d:96:b6:c3:a4:db:99:c6:
                    50:87:ab:f4:ec:c4:83:db:7e:72:00:01:7e:6c:a1:
                    dc:94:85:6f:e7:b9:2d:a3:ce:56:b2:5d:7b:a8:21:
                    e0:52:82:62:73:6d:2b:b1:b7:93:27:c6:14:3a:19:
                    95:72:f0:e4:bf:6d:2c:4b:f6:ee:50:dd:07:21:e6:
                    a2:a2:2e:9c:a6:b0:82:cd:e7:4c:51:fc:81:3b:f1:
                    1b:50:e6:c2:04:ee:56:2f:3d:ab:5c:ff:71:f7:09:
                    d7:58:cb:18:64:da:39:78:8a:c5:17:4b:77:2e:13:
                    24:02:48:ce:ff:59:d4:eb:28:94:df:13:95:0e:02:
                    77:2e:c4:4d:90:4f:f1:1d:0b:7c:b8:ff:14:74:87:
                    70:32:ba:62:ec:a8:d5:6d:ce:38:4c:60:8b:5c:f2:
                    b8:d0:f8:3c:7b:a5:44:ba:99:7d:cc:a4:07:f8:22:
                    04:32:9f:2a:28:8a:f4:82:c7:e1:c4:eb:f1:56:cf:
                    e5:46:13:a9:3d:47:f8:71:92:1c:ef:e7:b7:e7:b0:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3D:39:7A:C0:2B:93:41:DE:B5:71:E1:EE:27:38:F5:A1:3F:66:52
            X509v3 Authority Key Identifier:
                keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:77:80:43:01:cd:89:5e:4a:30:76:72:45:0a:a3:aa:75:
         ca:85:61:fb:84:58:9d:3f:96:98:a3:11:a1:eb:57:11:9f:07:
         51:77:9f:1a:be:0e:0f:f4:69:63:eb:8a:9e:0a:e5:f3:78:12:
         bb:3c:f3:f8:c3:54:86:c2:22:f5:4b:90:bf:bc:e9:2c:63:d7:
         fd:14:07:1a:80:ff:1d:7c:dd:89:9b:5e:70:c1:d2:0a:34:aa:
         88:97:86:55:cf:c5:ec:fc:d0:da:91:14:a1:5c:7a:ce:7d:27:
         12:77:e1:2c:96:00:8c:b2:78:c8:7f:d2:b2:7b:91:c3:3a:de:
         32:02:cb:7e:45:ce:4c:64:70:98:ff:26:ad:dc:82:8b:d3:3f:
         33:8c:77:af:71:c5:4e:88:d8:01:b0:c8:f4:15:85:f4:9a:0f:
         f4:60:ca:42:1d:10:88:62:b7:36:ff:b5:1b:12:7f:da:2a:62:
         92:e4:6a:fc:5a:e1:62:17:00:40:96:01:66:d4:55:78:9e:8c:
         7a:bb:d3:2a:e8:e6:cc:93:b5:4a:11:d1:ba:7f:e8:1f:4f:94:
         68:5f:23:0b:79:df:7b:ea:fc:84:f0:ce:09:a4:f2:0a:27:42:
         e7:08:c3:3d:87:8c:ca:7d:85:c2:e3:4c:5e:b3:b6:50:63:92:
         8f:c2:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:21 2024 by rpki-client on console-fra.rpki-client.org