Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
File:                     XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft (raw, json)
Hash identifier:          ycb333DogvF+TzXODs61aS694s2G7QfdF7Ctz/k7wsU=
Subject key identifier:   3F:11:66:81:26:DC:8C:C4:3B:1B:D8:07:E7:73:E4:CC:D1:8B:50:72
Authority key identifier: 5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94
Certificate issuer:       /CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
Certificate serial:       0193568A0DDFF0D69606659FA5550668918E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
Manifest number:          0581
Signing time:             Sat 23 Nov 2024 01:01:48 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:48 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:48 +0000
Files and hashes:         1: XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl (hash: NJkY3WKih6L7sNdhChvjdBhdan1v98paI6vVyHFw1MI=)
                          2: r6oeFTKrQLpaSlqkW_amqLF7fRQ.roa (hash: nfLc+MLO8ImnzNR/Vl6rOjtiN9xF9b4VWHuqQhSUON4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:0d:df:f0:d6:96:06:65:9f:a5:55:06:68:91:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
        Validity
            Not Before: Nov 23 01:01:48 2024 GMT
            Not After : Nov 24 01:01:48 2024 GMT
        Subject: CN=3f11668126dc8cc43b1bd807e773e4ccd18b5072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:5b:a9:ec:60:70:b3:6d:c1:fb:ee:c6:e0:
                    94:e1:ed:b9:5e:d0:c2:c7:ec:0e:11:7b:75:0f:aa:
                    da:eb:50:18:e4:94:a1:04:08:69:50:02:92:4a:6b:
                    b3:60:54:94:ca:03:24:02:1c:46:87:c3:27:04:b3:
                    14:18:c7:92:2c:f2:d2:40:ca:6d:5b:76:86:74:8c:
                    84:14:d8:87:52:9d:ac:12:05:8a:7d:08:93:ab:ca:
                    14:50:4c:d9:22:d6:e1:b0:83:a1:ed:ba:a1:19:00:
                    1f:6e:5d:af:ac:d5:5d:b2:96:cd:63:8e:9c:0d:53:
                    64:09:36:d7:68:62:c3:69:07:92:8d:db:e4:05:3d:
                    6e:54:4b:f0:cd:0f:04:5f:dd:20:f1:fa:2d:b2:86:
                    58:40:ff:a6:66:a1:57:b0:55:b8:bd:4d:51:0c:6b:
                    b9:ef:2b:7d:23:95:8b:8f:c4:a7:a2:4c:b2:4f:6b:
                    24:61:6e:33:af:6c:6b:61:83:f4:0f:73:63:8c:5c:
                    52:29:b7:8d:6f:2c:4f:f7:23:05:f9:4d:bc:53:c2:
                    5e:7f:e4:9a:ac:86:70:76:0a:8c:d5:d6:3b:16:21:
                    e5:ef:ad:cf:71:a9:1c:47:b6:06:d0:02:45:6b:c7:
                    48:99:48:5b:85:97:9d:82:aa:dc:f2:8a:6f:b2:de:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:66:81:26:DC:8C:C4:3B:1B:D8:07:E7:73:E4:CC:D1:8B:50:72
            X509v3 Authority Key Identifier:
                keyid:5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:34:c8:32:b1:19:6f:c8:72:5d:4c:4a:9b:48:4a:f8:f4:ce:
         c6:cf:8d:4e:bb:39:d6:43:e4:51:96:60:6d:fe:7b:42:e9:0e:
         a4:77:23:a9:07:93:68:e5:fd:f4:fa:65:17:24:86:80:39:ac:
         66:64:11:c7:4d:e6:35:68:fe:69:8d:03:95:a3:7e:62:50:ac:
         69:17:37:8e:e3:36:80:10:e2:51:42:5b:16:23:c4:71:27:7e:
         63:6f:c5:24:a0:64:56:cc:17:42:39:5e:b0:dd:51:22:a5:80:
         c4:2d:7e:26:c9:3d:0f:ac:3b:2c:9f:d9:44:aa:0d:01:a0:bd:
         d7:54:31:54:3a:0e:5e:4b:3e:c8:8c:e7:d8:98:b5:0e:21:37:
         38:b1:e5:a5:36:9c:bd:18:f2:7b:8d:7c:c1:bf:99:a5:e0:28:
         96:91:84:60:d3:9a:2c:7a:8a:f0:5d:55:5f:21:0c:2c:4a:70:
         b8:de:61:47:1b:17:09:66:ca:8c:e6:f9:b5:96:3a:87:bd:34:
         7e:08:11:84:fc:1e:98:4b:c7:96:16:65:19:77:a0:7b:ca:6f:
         62:56:59:1d:2f:90:d2:30:63:94:fc:27:39:5f:79:68:97:bc:
         85:37:b7:37:ee:92:f3:c2:e5:b8:3d:ee:6e:96:a1:41:31:39:
         be:ce:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:16 2024 by rpki-client on console-ams.rpki-client.org