Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File:                     zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier:          CsQFRpr8GzSrW2s1imbYkz8+8VmqageUiscq8A0ckTk=
Subject key identifier:   6E:FE:40:89:30:69:44:85:C2:74:0F:E7:BF:E0:FF:51:A3:E7:85:C5
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer:       /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial:       0194BABBCCEF75A44263DC67673272A5743C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number:          03CF
Signing time:             Fri 31 Jan 2025 05:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:57 +0000
Files and hashes:         1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
                          2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: g4gAYjM2dWs0Kh41M7daHoy4T18TvvlpjRNr0Juja8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:cc:ef:75:a4:42:63:dc:67:67:32:72:a5:74:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
        Validity
            Not Before: Jan 31 05:00:57 2025 GMT
            Not After : Feb  1 05:00:57 2025 GMT
        Subject: CN=6efe408930694485c2740fe7bfe0ff51a3e785c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:42:a6:cd:76:8a:7a:68:9e:33:fb:4e:1f:
                    5e:f2:4d:20:c8:50:0c:a4:77:26:70:48:cc:26:aa:
                    74:95:1c:25:9f:46:b5:98:a1:f1:3a:28:ba:0d:8f:
                    b0:1e:75:8e:71:47:f8:67:e6:ed:03:25:ea:c7:dc:
                    1a:16:c0:10:6f:f6:72:76:7c:4d:66:e4:3f:b0:04:
                    cc:d2:bf:64:74:27:3c:7d:4e:1d:77:d2:29:a6:12:
                    d0:7a:c9:a1:0c:45:74:0d:ef:13:91:e6:6c:8e:ea:
                    26:b2:b9:3a:5f:75:8b:c5:97:0e:ed:77:70:95:cb:
                    78:e9:41:49:98:f1:b4:6b:93:82:10:e3:b8:fa:2e:
                    08:bb:c1:d2:61:2f:40:a4:3a:0a:01:81:57:4a:b9:
                    95:6e:fd:27:81:a8:af:24:9e:84:26:80:05:e4:e8:
                    92:ac:cf:96:a8:29:e1:c5:74:61:a1:6b:bb:70:4f:
                    ef:6b:74:f7:4f:47:9f:9b:21:e2:7f:41:47:d8:1c:
                    b2:a1:6e:f7:18:42:60:bf:f9:b2:08:6d:06:b6:77:
                    c7:cd:f5:23:ce:e3:1e:ac:82:b3:e2:94:bf:b9:8c:
                    a2:6c:47:a8:be:87:89:d2:ce:0f:5e:57:9e:24:50:
                    c2:1a:91:d9:2b:db:99:ed:a4:6b:24:3f:01:d7:62:
                    24:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FE:40:89:30:69:44:85:C2:74:0F:E7:BF:E0:FF:51:A3:E7:85:C5
            X509v3 Authority Key Identifier:
                keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:52:08:8d:40:02:b7:87:e8:71:39:a8:c1:bb:94:8b:c8:
         d0:76:86:08:5d:b6:1b:ae:31:94:f4:aa:f0:57:a1:53:02:c6:
         0a:08:3c:3a:c0:66:ba:a2:9f:a5:2b:fa:67:2b:10:66:fb:28:
         c0:8d:46:1a:00:06:b8:8b:4b:72:6c:60:b3:81:b6:97:33:65:
         d8:05:29:bf:fe:65:07:8e:91:a6:48:41:84:06:4b:b1:1a:4a:
         b3:ba:10:53:14:2b:48:14:48:c6:01:0c:61:c9:da:f0:a2:2a:
         a4:e3:82:ce:cd:d1:53:e1:6b:68:b0:92:07:02:5f:87:17:28:
         50:e2:ed:44:27:49:58:04:a9:e4:84:01:6c:49:79:37:c9:c8:
         fe:e2:68:1a:d3:25:1e:9d:7e:23:3a:08:67:16:ed:e5:aa:7c:
         50:19:b5:37:10:b6:d2:e4:11:b5:73:4b:eb:66:a4:e2:0c:0e:
         99:1a:42:24:69:26:95:6c:ea:d7:af:cb:ef:2b:5c:f9:c5:dd:
         a1:a4:91:43:d0:11:8c:2f:4f:29:cf:d3:bb:b6:0b:8f:ee:ca:
         fb:02:ab:9c:a0:53:48:dd:f3:95:e6:cb:17:ec:5c:1f:39:7b:
         86:84:e1:f7:1f:50:a2:11:2f:8d:e9:6f:2b:74:ff:e4:ac:0a:
         4f:30:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:26 2025 by rpki-client on console-fra.rpki-client.org