Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File:                     X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier:          0I8/nXsmAh6dxrR5ehIrHejXsLCLpPzO5G/ZyNHp6vc=
Subject key identifier:   69:11:DF:9E:15:B5:82:C3:FF:5B:7E:C0:94:6C:A6:B4:77:71:B4:BD
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer:       /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial:       0193549ACD4C8C58E6158E9393AF1CFEE00B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number:          1228
Signing time:             Fri 22 Nov 2024 16:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:51 +0000
Files and hashes:         1: 2iOAzdGXyJ7stYatNKd5HZ0gQ5w.roa (hash: kCwrtU5YUPk1j3ARC+T/MgjLOcUI7lhQttQwoK56DQo=)
                          2: 512cblUb18gPvDykRXCVkfrEbCo.roa (hash: OKREPsF72jPzoCoVVeFHAK0366n5Ovi6E4YPFy7tF7c=)
                          3: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: b3kjE9bPZyl3sWNr1zxdvrcEYS3wA5f4GjonmMi7A5s=)
                          4: s9Gqi6-lD6Y5ZykqQlxQ42W2X-0.roa (hash: elVofcyPNutK78jSB4gfvk7J8w54zk+Pk3LJJOOwno0=)
                          5: y8amq4lghkX5hchQdRgxhmSE0oA.roa (hash: tbzSiCs3pRpP3m1fD+7aVU6065zXO2oYyaoAKzT0lmw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:cd:4c:8c:58:e6:15:8e:93:93:af:1c:fe:e0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
        Validity
            Not Before: Nov 22 16:00:51 2024 GMT
            Not After : Nov 23 16:00:51 2024 GMT
        Subject: CN=6911df9e15b582c3ff5b7ec0946ca6b47771b4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:7a:a8:ab:d2:84:63:32:b2:9a:a4:48:9f:
                    c4:05:34:72:38:a5:16:cc:79:f9:71:8f:ba:84:db:
                    23:55:53:28:11:c0:3f:f7:16:37:81:34:c5:25:f2:
                    d5:a0:e7:d0:70:75:b2:92:b0:f5:44:ff:b7:7f:ba:
                    07:91:2f:e1:69:f2:1e:23:d1:58:27:f5:f5:12:8b:
                    fb:55:b5:ee:9e:49:5d:69:d1:bd:04:8c:2e:8b:08:
                    d9:b3:f9:a8:6a:c6:80:88:2e:b7:c8:8d:b5:86:7e:
                    0b:55:38:a0:c9:ce:74:0a:78:f2:89:e2:89:fd:4b:
                    6e:f9:15:be:b0:be:94:b0:86:2c:2a:7d:bb:25:f6:
                    cc:c7:0a:ac:b9:7f:05:04:2b:cf:48:f3:ab:5c:f5:
                    d0:3f:cf:78:8e:0b:2d:69:3e:8b:4e:b9:9b:30:cc:
                    11:8c:23:50:52:d5:84:f2:24:7a:71:83:0b:13:8c:
                    d7:c2:2b:e7:44:e9:25:59:62:a3:ed:84:e2:d0:7d:
                    cc:9e:66:62:b1:8f:c7:b7:17:8a:d1:fc:cc:57:90:
                    08:30:50:a2:7f:de:3a:1c:a9:29:8d:b2:22:27:e5:
                    53:39:3d:8d:3e:81:0a:37:ee:a2:15:ec:4d:34:a1:
                    d8:00:87:be:47:93:42:62:54:63:53:c5:fe:25:61:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:DF:9E:15:B5:82:C3:FF:5B:7E:C0:94:6C:A6:B4:77:71:B4:BD
            X509v3 Authority Key Identifier:
                keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8f:c4:99:0e:0a:20:c3:9d:6f:9b:f1:37:f2:a2:cf:04:58:
         aa:e7:ef:ee:77:eb:d3:4f:76:01:f5:cf:5a:ae:76:09:56:a7:
         7e:34:c1:65:1a:c3:5b:cc:38:a0:ce:54:9f:6a:d7:61:1e:e6:
         15:74:2a:c6:ef:4e:fd:f4:17:24:64:6b:ea:6d:43:e8:3c:48:
         a7:9a:d2:4b:80:5e:28:4c:5c:30:2b:81:ba:3b:15:47:ab:88:
         ef:8a:be:46:67:e3:d8:70:03:e6:bf:57:22:fd:6d:12:97:ae:
         c8:98:56:85:df:cc:3c:d9:e0:8f:53:95:34:25:8f:1d:17:27:
         c1:6f:44:44:2a:15:4b:46:35:41:8b:53:9e:95:23:be:86:0c:
         f7:03:22:d9:8f:3e:39:80:00:aa:f5:30:01:a7:bf:fa:25:1f:
         04:eb:ea:7e:71:ca:19:73:d8:6f:70:04:6b:6c:70:02:00:85:
         4e:53:3c:0c:60:97:cd:66:da:70:23:72:73:f8:82:f4:78:ef:
         9d:5e:8d:d3:e8:5f:6f:5b:2d:1d:5f:ec:72:e7:e3:44:6d:42:
         f4:a6:43:a5:85:ef:b1:e9:36:72:67:7b:d7:ed:dc:6f:90:5b:
         a1:22:74:45:b4:9a:7b:40:3d:12:7e:86:24:bf:0c:39:9f:c6:
         2d:4f:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:51 2024 by rpki-client on console-ams.rpki-client.org