Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File:                     xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier:          zLW+MT491V06tPjHHhJS33qmAOJshfz39nMCTsTZrRA=
Subject key identifier:   6A:81:38:B8:3F:3C:79:88:E0:AE:EC:DB:6A:FB:4D:A6:81:9F:17:D6
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer:       /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial:       019358770DB2FDEBB4BD447538676795C48F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:17 +0000
Files and hashes:         1: BgbPc-EKt-YNkVit1g_N0KZ0UNQ.roa (hash: pK93oIvu+LY220BpS2TbRn89Sky1WF5kMybQDnkqTdQ=)
                          2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: VCbIF+JNG4H2JLJyah54ZFI9CEDX0IwVQPGnNJuYtvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:0d:b2:fd:eb:b4:bd:44:75:38:67:67:95:c4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
        Validity
            Not Before: Nov 23 10:00:17 2024 GMT
            Not After : Nov 24 10:00:17 2024 GMT
        Subject: CN=6a8138b83f3c7988e0aeecdb6afb4da6819f17d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:55:9b:38:3f:58:fe:9c:04:c7:d9:38:3f:
                    0b:53:41:5f:4e:1a:72:15:c8:9f:6f:43:de:7e:eb:
                    41:1d:d4:22:ad:95:63:43:fd:e8:55:ca:be:67:6c:
                    91:8f:fb:33:f5:59:aa:06:75:16:82:a4:23:0b:5f:
                    6b:a3:2e:67:cb:91:fe:e4:64:57:20:4a:3d:7e:45:
                    b8:d4:22:98:d3:64:48:b5:24:9f:5f:6a:5b:76:47:
                    d1:c9:30:a1:1a:05:7e:89:40:07:74:12:e3:d3:71:
                    94:42:78:24:b0:b4:00:01:0f:fd:fa:ba:47:bf:6b:
                    08:e6:a6:d7:23:41:20:07:c0:cd:43:e1:a0:c1:bf:
                    21:ac:01:6a:80:c2:b0:13:61:0f:4d:4f:8a:8a:f7:
                    8b:0a:8f:a1:64:59:ee:0e:43:fa:a1:88:9e:50:37:
                    75:60:b7:51:2d:b6:d4:6a:39:31:17:fe:26:6f:1b:
                    e0:9e:e7:16:0a:ee:30:8a:c1:7e:34:63:3b:22:9d:
                    16:e3:3d:6f:43:d0:18:eb:57:6d:d0:14:c8:b5:45:
                    a1:63:38:83:6e:18:1f:d3:fc:68:a7:5d:d3:11:f2:
                    74:21:a9:7f:f0:28:51:d7:40:97:b4:4d:3b:ad:8c:
                    8c:77:5e:30:75:38:cf:d8:a7:23:eb:45:f0:2b:60:
                    24:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:81:38:B8:3F:3C:79:88:E0:AE:EC:DB:6A:FB:4D:A6:81:9F:17:D6
            X509v3 Authority Key Identifier:
                keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3e:ed:0f:bf:89:a7:1c:a9:c3:1f:93:ac:33:32:05:4d:d6:
         24:93:ab:86:01:64:73:b2:19:db:c9:9c:da:f6:38:7f:69:53:
         a4:1a:a3:a7:ae:af:f6:de:f9:86:46:27:a6:ca:f3:6f:f1:20:
         af:31:55:e6:49:ac:2f:17:8e:55:f9:38:8c:2f:88:83:be:80:
         a4:f5:ae:68:5f:84:82:90:38:2a:83:15:63:72:05:ad:5a:93:
         b0:eb:a6:e6:27:87:e2:a1:d8:06:4b:f0:8b:26:88:9e:0e:70:
         f3:ad:ff:58:23:ce:38:ce:10:18:a7:88:6f:f9:c5:ee:f5:3e:
         46:64:99:9f:08:9a:67:a9:69:ec:a2:be:28:87:99:ef:11:c9:
         85:dc:d5:76:60:d5:db:04:5c:08:bc:e2:e4:1c:51:bd:f2:a6:
         f4:b9:8c:f5:4a:a7:d0:5e:28:6b:a3:1d:c8:c0:5c:a4:6a:32:
         d9:1b:8b:58:2c:97:df:96:14:32:a5:d9:bb:14:f4:2c:46:f3:
         2a:62:94:cf:8d:8c:23:09:7f:ce:9a:88:b4:c5:a0:60:d1:2e:
         d6:19:13:20:f2:3a:77:f2:17:18:57:07:6f:b4:85:dd:a0:aa:
         dd:1b:77:be:83:da:94:0a:de:86:4d:a2:f4:cf:c4:62:f8:fa:
         86:01:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:00:29 2024 by rpki-client on console-fra.rpki-client.org