Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File:                     XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier:          TnlWwqI+2uFZOpyE0jZNLm6Ozcc01uLwHNL39K0yMCU=
Subject key identifier:   B2:CD:DE:07:3C:A1:B3:8A:E5:80:07:A9:C9:2F:B7:A3:4B:5A:E5:59
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer:       /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial:       019357D25BF2D4D78E247197707540F6EA95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number:          0C4A
Signing time:             Sat 23 Nov 2024 07:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:23 +0000
Files and hashes:         1: 0v7V0qU3F5YmHpnEgQtwX9UmPdo.roa (hash: 5GgfMIvRw2bUU4P/iCWj4UO1uRMNoRGKdy6IQRJyO3c=)
                          2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: g1qWwrx1tL7tDmfPxws9+CCsctfcagARNbjjoZWi9SE=)
                          3: YHCofV86c13WRpG9Unl6I_FRPk8.roa (hash: EdGLvgJMciz2OlHcfh+y/ytKsdgWhQbv4OPSIh90mQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:5b:f2:d4:d7:8e:24:71:97:70:75:40:f6:ea:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
        Validity
            Not Before: Nov 23 07:00:23 2024 GMT
            Not After : Nov 24 07:00:23 2024 GMT
        Subject: CN=b2cdde073ca1b38ae58007a9c92fb7a34b5ae559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:24:d4:7a:c7:31:af:45:ed:c3:24:21:56:
                    d5:5a:a9:6d:c3:da:aa:9f:f1:7f:2b:05:e0:ff:93:
                    5d:d9:ec:c1:b0:37:76:c1:e0:50:a7:9e:bb:1e:84:
                    83:26:cf:e8:9c:b8:4a:65:66:43:2a:06:70:61:25:
                    01:bd:43:a2:9e:df:c2:b3:8f:a2:33:90:76:fe:7d:
                    b8:90:c3:b2:62:f9:f0:6b:24:c2:b7:e4:0a:c2:51:
                    ce:b5:44:35:12:63:19:7d:87:07:29:ee:02:00:b0:
                    06:7b:08:3d:bc:2c:da:70:6a:b1:ab:0a:ab:53:68:
                    72:78:a4:83:3f:7b:4e:c7:77:61:25:af:56:c9:32:
                    9b:d2:a1:74:bd:b1:4a:bb:68:11:36:2b:cd:0c:a5:
                    72:b6:c4:dc:4b:13:8b:40:ed:1c:ee:f4:f9:10:0a:
                    4b:06:d5:ff:20:fe:2f:c4:26:2e:62:30:36:83:26:
                    e9:a4:89:e7:91:bc:f0:07:0a:74:dc:92:26:82:8b:
                    51:ed:59:be:26:e3:1a:0a:94:95:9b:39:72:ff:d3:
                    bc:de:b2:a9:a2:7e:f8:b8:b6:88:8d:d2:c8:c2:80:
                    94:2d:05:7d:af:f6:ed:1e:02:7e:05:86:42:db:1a:
                    cf:21:f5:69:70:5e:a3:06:49:2e:49:6f:63:d8:68:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CD:DE:07:3C:A1:B3:8A:E5:80:07:A9:C9:2F:B7:A3:4B:5A:E5:59
            X509v3 Authority Key Identifier:
                keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1e:3d:d7:ca:d1:3b:91:69:7b:8b:2b:ca:33:f4:50:ed:07:
         b7:9e:08:11:54:d7:75:67:3a:64:68:d5:45:fe:fa:74:9c:80:
         69:b3:ab:2d:01:ef:98:ee:d7:f3:bf:0f:7c:09:6e:40:ed:f8:
         2e:4f:9f:53:b2:a2:e1:c7:dd:2f:45:7d:39:7d:de:8c:3f:ca:
         9d:c3:95:d0:34:ce:9e:16:94:ae:d0:7c:ca:0c:90:e8:25:88:
         bf:59:09:f4:e9:e0:17:16:f9:be:ce:e9:f1:19:53:b0:be:cf:
         da:d1:55:ff:22:cc:86:d6:04:1d:3e:87:28:23:a3:8e:19:2c:
         7d:aa:a3:2a:6d:7c:de:e0:37:f8:36:f3:b5:b6:ff:bd:20:f0:
         88:e3:2b:f6:dd:4f:92:67:df:2f:10:df:64:fc:43:de:a5:d9:
         e9:8d:6b:90:fd:b1:ef:00:8d:dd:e1:a5:0a:58:bb:c5:13:39:
         ac:0e:e1:b0:23:68:4d:05:85:c0:67:92:7b:66:59:3e:76:5d:
         0d:74:54:42:98:e1:72:4f:2d:48:15:93:37:23:86:ab:ed:e9:
         fa:9c:7e:67:8f:50:67:f0:65:cd:42:d5:3c:ea:69:0c:f9:6a:
         ad:28:1f:e2:1c:6d:df:3f:7b:af:91:42:19:98:50:89:ec:c4:
         6e:0a:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:31 2024 by rpki-client on console-ams.rpki-client.org