Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File:                     ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier:          fni3rI41q+WeYb/CtkdwkhkPFzZoYRMif/yh8T2nj/g=
Subject key identifier:   01:92:B2:98:83:F9:D1:69:A1:08:FA:7B:D7:71:60:CB:93:15:A5:4F
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer:       /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial:       0194BABB9A6618FA24265E297CB7503BE6CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 05:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:44 +0000
Files and hashes:         1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
                          2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: ii/d2CSypnAy9bU8fntfN8r1pwfJMYTMq0rFc4Mq1ac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:9a:66:18:fa:24:26:5e:29:7c:b7:50:3b:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
        Validity
            Not Before: Jan 31 05:00:44 2025 GMT
            Not After : Feb  1 05:00:44 2025 GMT
        Subject: CN=0192b29883f9d169a108fa7bd77160cb9315a54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:df:2e:45:58:35:21:7c:84:2f:3a:fd:3b:
                    6f:85:2f:3a:5a:16:5d:b2:4e:8d:ad:f0:2a:a0:ca:
                    89:58:d6:ac:63:23:37:be:d6:d2:76:97:fb:6f:75:
                    1b:f4:8b:63:a8:4c:04:37:99:0c:ee:59:5b:03:19:
                    9f:81:1c:42:21:2e:bc:aa:d8:83:f5:28:bf:d0:72:
                    7f:ea:f0:5f:86:c7:24:8b:71:7d:13:18:f1:d9:a9:
                    c8:9a:9a:88:4d:b1:38:6d:27:89:ab:27:70:40:a2:
                    b7:37:6f:c5:86:99:d0:d4:5c:5a:fc:6a:06:f9:ca:
                    6d:8e:0d:df:29:1e:a9:fa:f6:f5:76:75:84:f5:47:
                    12:13:30:c9:37:3f:87:e9:ec:fd:4c:80:a5:85:7f:
                    e3:df:dd:6e:84:fb:5d:1c:75:1b:4b:89:a3:03:75:
                    b6:1f:c7:f8:43:47:e5:be:d5:f7:42:7f:f8:73:51:
                    51:b7:cd:cb:2e:73:68:d6:ad:9d:9f:c4:3e:40:4b:
                    3c:9e:6c:3e:e2:2c:9b:5a:15:4b:ef:49:ae:f0:bf:
                    a0:45:3e:10:79:dc:03:de:97:1c:e8:7e:8b:6c:1a:
                    1e:c2:25:b0:08:88:4d:ba:b4:8f:aa:17:a3:56:1a:
                    56:9f:d7:16:c3:ca:12:9b:a2:39:e3:34:6f:6b:8c:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:92:B2:98:83:F9:D1:69:A1:08:FA:7B:D7:71:60:CB:93:15:A5:4F
            X509v3 Authority Key Identifier:
                keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c0:c7:00:b1:80:ae:60:7a:4c:8a:28:b3:91:7f:78:f4:d9:
         75:b7:3e:7a:f0:a9:47:57:89:1b:7b:ef:fc:f1:75:7d:13:4e:
         aa:9a:48:44:f7:02:bf:92:52:b1:cd:bb:c4:ba:3a:cc:95:4d:
         be:ce:88:3e:79:7b:30:f9:87:39:9b:9c:c9:8e:dd:64:67:ce:
         c9:58:f1:67:9e:f1:f7:bb:c1:5e:3e:c0:77:4a:75:d7:b4:ac:
         1e:4c:3e:f0:93:6e:f8:46:a7:1e:0b:38:7f:e1:f7:96:a6:bf:
         9e:f7:aa:61:58:4d:6e:79:9f:9d:8b:e6:e6:ac:ac:14:70:59:
         ce:7c:25:1f:56:f8:13:5a:a4:e5:a4:86:de:f0:33:db:1d:f6:
         dc:60:28:ee:e5:f8:a9:c3:5f:5a:42:b6:e0:26:11:39:77:8a:
         c3:1d:cb:2a:d9:3d:3f:52:34:85:50:6b:f3:de:7e:d6:b5:45:
         4c:af:62:f3:5a:97:07:6b:1a:7a:87:19:0b:50:ad:3d:53:6e:
         45:bc:9d:b5:fe:10:93:9f:2f:de:38:93:c7:41:b5:fa:55:1c:
         22:3a:71:7f:84:17:29:02:ac:a8:9d:8f:0f:94:e0:bf:7c:fa:
         82:45:9f:3f:cb:83:47:64:c3:20:a5:73:49:26:5c:17:c5:c5:
         cc:28:e0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:38 2025 by rpki-client on console-fra.rpki-client.org