Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
File:                     x0HESpzVjhJWkGY32TXDGQ9_6xo.mft (raw, json)
Hash identifier:          GbNmFhFrn89BzmhO5YvkdRWQz6PC0r5JKXBhaAeeeAk=
Subject key identifier:   80:5B:2B:54:98:08:7F:5E:D7:88:6C:E2:6F:50:09:9C:51:B3:65:F5
Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
Certificate issuer:       /CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Certificate serial:       0193549C537DF3BA8F66C19EFF1B5005CD54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
Manifest number:          1111
Signing time:             Fri 22 Nov 2024 16:02:31 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:31 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:31 +0000
Files and hashes:         1: GpsmHV8ERxI6Bkf_qVCmUC-6Yw4.roa (hash: R2IhZ/x9hNwlh+TKo8F3mQifo7UyRgek0acnMkUyUR8=)
                          2: x0HESpzVjhJWkGY32TXDGQ9_6xo.crl (hash: 8V+pZ9nwZpAzB/lu1ZH10lpHe09iXSCW/aVuRfWfgao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:53:7d:f3:ba:8f:66:c1:9e:ff:1b:50:05:cd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a
        Validity
            Not Before: Nov 22 16:02:31 2024 GMT
            Not After : Nov 23 16:02:31 2024 GMT
        Subject: CN=805b2b5498087f5ed7886ce26f50099c51b365f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:1d:91:bc:ec:96:ff:67:d2:7c:67:b0:54:
                    e6:af:c7:f0:0e:90:ee:a2:33:9c:c3:38:5d:6f:21:
                    eb:29:d2:21:11:e1:61:57:b0:af:5b:64:cd:9e:7a:
                    5d:25:79:b9:3a:4e:34:f4:69:98:48:96:b5:64:83:
                    d4:35:3d:62:9b:31:b7:f5:7b:42:fb:bb:70:94:af:
                    ba:d3:22:39:5f:ea:97:93:dc:0a:ef:17:dc:2f:97:
                    4b:be:e7:b4:f9:3a:c0:a0:b5:ac:a1:ed:1b:c7:ae:
                    2d:81:a3:5c:92:2b:0f:0a:6e:de:4f:d9:de:75:03:
                    6d:bb:6e:78:9f:0d:87:9e:58:40:7f:cd:70:89:d0:
                    1e:21:ea:af:68:8c:99:ae:8e:f6:4e:f0:1d:d2:4f:
                    ea:bb:44:16:f3:2b:a7:9e:82:2e:99:8c:28:cd:3e:
                    57:b0:1e:60:17:9f:7b:c5:34:da:57:5b:fe:b6:c6:
                    cb:0b:8c:b8:44:c7:b5:bb:1a:52:bd:95:03:e6:e7:
                    f2:88:41:b7:7e:b0:7d:7c:c4:f4:de:36:5e:24:73:
                    ee:ee:85:90:31:59:06:fb:73:f8:aa:22:bb:01:09:
                    7d:d2:7e:39:40:b6:7f:18:71:87:fb:2a:18:d4:ec:
                    b1:77:8f:eb:1a:da:74:72:d8:e2:f4:b4:df:39:dd:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5B:2B:54:98:08:7F:5E:D7:88:6C:E2:6F:50:09:9C:51:B3:65:F5
            X509v3 Authority Key Identifier:
                keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:6e:a3:34:cb:4e:b4:a9:3e:f3:3f:d8:5e:94:82:e8:d6:
         08:c9:18:6f:8d:ad:3c:8b:5d:99:ce:b8:f2:e3:3d:96:07:22:
         07:cc:9a:be:fe:da:cf:a1:9e:7f:3c:f0:c7:a2:ce:3d:aa:5b:
         bc:61:6b:d7:a8:65:54:b4:15:b1:c0:18:81:63:aa:e8:4e:ed:
         32:46:f0:04:b6:13:8f:30:b0:f7:73:35:45:68:e6:87:aa:84:
         b9:d2:c3:4e:e3:60:bb:b8:f4:fd:ae:af:ec:1e:85:ad:df:4f:
         3b:89:60:ff:75:96:68:1c:37:1f:55:72:44:35:31:19:62:d9:
         02:b9:33:3c:f6:2e:01:a8:ca:2d:f5:c1:fa:9d:9e:40:94:b8:
         f9:0b:36:ab:72:f7:d0:5b:12:d8:af:42:f7:7b:f3:a1:c3:75:
         eb:88:cc:23:23:67:dc:c1:f0:c6:18:7f:b5:21:be:86:6d:ed:
         02:36:c7:5b:72:3f:45:28:c8:7f:96:1c:d5:2e:62:ba:23:82:
         82:b1:b0:5e:44:b4:90:8a:19:d4:ba:a7:d1:b8:2c:64:8b:6f:
         28:82:61:0d:01:29:f4:86:50:70:1b:95:27:2e:13:34:ec:52:
         8f:86:cb:32:cc:d7:f7:fa:12:c1:81:26:da:39:16:c1:36:8b:
         50:74:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:47 2024 by rpki-client on console-fra.rpki-client.org