Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File:                     xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier:          ZnpjnsDS53H7rhXGReJ4t74p8URQLDxeu8ZxVzPN52o=
Subject key identifier:   E7:92:71:88:13:06:3C:26:18:8C:2E:54:61:D7:31:68:0A:66:D7:0D
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer:       /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial:       019356F68B3DF39168A163C4749529944B1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number:          0C96
Signing time:             Sat 23 Nov 2024 03:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:18 +0000
Files and hashes:         1: YINxsdCwZc3ub_x2FGspy_tgnAs.roa (hash: JbutJkMYaTeGRPUO+QHR/wv0jFqczlaA74cvyWatAPM=)
                          2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: LyzdUMW4J+g1QPYUu9gSwLxJwKb4oUQmRrLJk8s+6Wc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:8b:3d:f3:91:68:a1:63:c4:74:95:29:94:4b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
        Validity
            Not Before: Nov 23 03:00:18 2024 GMT
            Not After : Nov 24 03:00:18 2024 GMT
        Subject: CN=e792718813063c26188c2e5461d731680a66d70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:51:2c:55:b3:75:98:6f:4f:ea:9e:10:43:
                    a0:05:e2:7b:ae:58:22:19:49:89:84:af:59:66:cc:
                    72:1f:d8:ee:00:3c:61:14:06:9b:c8:2c:23:29:f6:
                    b2:d8:09:9c:0e:af:74:d8:ac:b5:75:27:90:c4:67:
                    cb:91:ab:d4:7c:60:38:b8:d5:00:28:a6:fa:3a:96:
                    54:98:49:f8:f7:1f:29:9f:47:b2:f6:6e:df:c2:37:
                    f1:c5:85:8e:54:44:d9:af:2b:cb:4e:21:5c:71:31:
                    0a:a3:60:f6:c0:7a:57:9d:2e:fa:52:ef:70:bb:9e:
                    f2:21:15:24:25:91:3c:b0:f4:be:a4:47:80:27:cc:
                    bf:0e:5d:62:71:82:74:eb:57:ac:82:4b:ad:26:7d:
                    05:2f:f0:b9:ee:ec:23:da:c6:21:6f:ec:c8:d3:52:
                    53:08:a3:06:d1:66:43:32:07:81:83:23:af:b7:46:
                    68:11:fa:7c:96:bf:8a:7e:f4:f6:40:6c:80:31:73:
                    22:4a:74:fa:ba:c6:d3:f8:d6:0a:ba:b5:85:fe:c3:
                    d7:c7:67:1e:0b:27:02:17:08:58:18:ef:8d:bb:ed:
                    cf:d9:85:0f:e2:be:4c:d5:d7:1b:0b:06:07:80:0c:
                    7e:1d:db:fd:f8:9b:7d:ee:76:4a:b6:a3:a7:32:15:
                    bd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:92:71:88:13:06:3C:26:18:8C:2E:54:61:D7:31:68:0A:66:D7:0D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ee:e5:bd:16:99:7f:7a:0c:a1:7e:d8:e0:4d:3f:28:9c:e2:
         28:f3:82:10:79:be:47:85:a5:19:cf:86:52:78:b4:2e:1f:68:
         b9:76:d1:38:de:0e:5b:ff:62:24:ed:4d:ce:33:c5:69:16:54:
         e8:4c:07:cb:7a:c8:ed:12:b7:27:59:f8:6d:51:45:90:e4:c1:
         98:77:da:a9:23:43:1a:07:e0:73:a4:fb:f0:45:c0:c1:77:d3:
         cd:c8:60:e4:19:c7:73:be:f9:69:4e:a7:b7:c2:9b:1c:e8:4f:
         73:79:f3:b5:dc:9f:91:b5:4a:98:da:e7:d2:9a:cf:e7:43:75:
         c7:d3:12:5f:c4:ab:54:2b:66:4c:51:41:01:ee:2e:f1:61:bc:
         57:4d:3b:5f:0a:1f:f4:6c:f9:3e:f0:ef:f6:f3:da:75:bf:7b:
         b2:bc:2a:4b:39:85:d3:20:3d:1d:e3:f7:fe:e4:13:6c:33:b2:
         6e:77:a7:cd:75:e7:86:72:03:6c:b2:ee:02:13:d7:1e:16:4b:
         ff:11:7a:b9:e5:28:3d:a8:3e:45:49:fa:e1:59:a2:0c:25:a1:
         13:fc:9d:b3:3f:90:d1:f5:16:c7:e0:1d:d9:ec:d4:63:1b:8e:
         fa:be:6a:ca:61:8e:9f:a1:60:e9:d0:36:77:bf:6d:dd:02:07:
         c8:cc:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:09 2024 by rpki-client on console-fra.rpki-client.org