Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
File:                     xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json)
Hash identifier:          uq5Gr+a3WAZeCsY2iTKdmHw8ehjlhM8P/kP+5wozdcY=
Subject key identifier:   77:AD:9D:AF:00:24:E8:36:03:99:53:EB:AF:74:E2:6A:A4:86:C5:09
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Certificate issuer:       /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial:       019351D0B9BA0C98AF83935FF2AE6690ED06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
Manifest number:          1386
Signing time:             Fri 22 Nov 2024 03:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:53 +0000
Files and hashes:         1: 34eQ23MiCAS8KsXt30F4JzbKeBE.roa (hash: yKlnVtVREToSEv2vMoiK5D+Hw2/KViguqFyI6WUqzmc=)
                          2: 5QJ-JhweHEyc80E2iAEPQ5kQaPU.roa (hash: 5FyeDcmtJvPLYhzFStuUEcfCDIDKRlGrMN5mfn3Io5U=)
                          3: AzOc36HJ8MEB0iT3X-M5lG4o6TQ.roa (hash: xLke7gfQB182MSaM5qheQBtQH+6Di7aYb4SB9oKSHCk=)
                          4: IZVtY6tB0e7V1-ELC4rvwjAUgCc.roa (hash: HxmDxlGCmZprkf9K8Q2xGHCS1GJfOjeJyNTf2yxzx4Q=)
                          5: KUVb5-zjUHjPWn3HRsPGQdMgDxk.roa (hash: Rh04AgUGocyPUJDMakPxumny7WtHvDMR8278H5vYKWE=)
                          6: RShgZMaKc2yIEYvPrUWHigreccE.roa (hash: 7CfV4hVaSXZmpD3K+sb/XopeHwRcG2l9Z/Rv2+hddRE=)
                          7: iXfRtmudxAE1lJnnD7CamGaHwOQ.roa (hash: bs+Zo96eDGbGYk6314dX8Lc92xqIBTCAonrq4A7DJ8U=)
                          8: u8ktcQMK5Tkf7e2C2IC7drl74lI.roa (hash: 3LHl9w9dPMZOWgRSu2vSnW3aYoD5mFaP92Q1DU7uvIU=)
                          9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: E2uAtXlPn5wMElmA82JT2Ri1TDDlli10egBzwbb+wmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:b9:ba:0c:98:af:83:93:5f:f2:ae:66:90:ed:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
        Validity
            Not Before: Nov 22 03:00:53 2024 GMT
            Not After : Nov 23 03:00:53 2024 GMT
        Subject: CN=77ad9daf0024e836039953ebaf74e26aa486c509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:2f:08:2c:c7:e6:f0:9c:5d:67:d4:e9:b9:
                    76:3b:fe:08:de:a1:44:27:45:53:39:0f:5a:a0:d4:
                    1b:f5:6d:04:fb:8b:00:ca:8c:eb:50:3c:c0:db:c5:
                    3b:5a:46:e8:18:4d:13:d8:99:37:15:3b:da:ab:f5:
                    0e:1e:52:79:56:45:e3:6c:9f:fa:4f:75:85:20:a1:
                    d1:0f:9c:27:40:f4:73:4e:c8:e2:3c:86:03:44:12:
                    f7:02:6a:f3:7d:aa:61:6b:ff:de:f5:6d:1f:44:ff:
                    5d:36:49:6e:36:11:9d:07:d5:f5:65:f4:72:9d:89:
                    d2:6d:49:50:23:8d:de:15:ab:49:d2:0a:e8:62:7d:
                    a5:09:d9:53:9e:bd:ee:ef:8f:8f:4c:56:2b:e8:01:
                    b9:63:70:75:46:a8:ce:84:91:92:94:4e:0c:74:31:
                    d6:d6:c5:3f:22:3d:f8:36:f0:40:78:50:aa:67:09:
                    1a:1f:d0:66:9b:9d:4c:03:da:c0:c0:84:44:d7:bd:
                    9e:5d:bd:85:6c:3b:ec:c6:c7:0f:9e:ef:aa:c5:86:
                    65:f1:b2:d5:b7:2a:8c:be:5b:11:37:77:63:39:c2:
                    94:bb:a4:60:95:03:d4:7d:26:5e:20:cb:0c:43:01:
                    6a:f2:f9:c0:56:ca:f1:b0:f2:15:74:43:0c:d0:44:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:9D:AF:00:24:E8:36:03:99:53:EB:AF:74:E2:6A:A4:86:C5:09
            X509v3 Authority Key Identifier:
                keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:b9:b8:af:12:34:4c:4b:e4:33:22:e3:41:16:09:3e:84:
         cf:e7:e6:7f:46:4d:f4:b7:ed:37:ca:de:8a:01:b8:3c:d6:f0:
         b1:9b:c2:3b:21:a2:fe:2d:6c:2f:b2:f3:31:77:7e:ff:df:3d:
         41:22:47:02:92:2a:5c:4e:31:22:82:36:ab:f2:97:03:6f:62:
         c6:e9:44:d7:46:b3:58:87:4b:f1:ba:66:0f:b3:9f:3d:ad:ff:
         26:99:63:71:ad:cf:63:f3:d6:d3:55:fd:0c:67:b7:48:af:6f:
         fe:db:a8:a6:4d:0d:f6:5f:3e:78:1f:fb:40:f2:7e:8c:d9:79:
         0f:14:b6:02:ff:01:7d:ae:08:07:23:22:6e:ad:e5:26:40:71:
         10:80:6e:ce:4c:22:55:3d:68:4d:59:c1:b6:10:47:7e:c5:fc:
         a5:fa:4f:ed:d2:f3:45:4f:f9:f1:e3:d3:8e:b2:91:2a:43:d8:
         b6:05:3c:6c:a0:41:d0:7b:e5:8d:6a:17:ab:14:86:3a:1f:f3:
         96:e2:99:aa:b7:b4:31:c4:31:f2:ec:9a:08:7f:aa:b7:60:1b:
         97:64:db:12:54:27:64:c7:ad:d1:c9:79:54:f6:0c:70:27:bd:
         89:7d:9a:71:14:8e:29:f1:d4:80:ce:c9:ae:e1:5a:d2:69:b1:
         b8:89:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:18 2024 by rpki-client on console-fra.rpki-client.org