Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File:                     xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier:          0NAZv9eq5D2kWiZ51FuHhzhgblGYnXZo9LTbXlEP8mQ=
Subject key identifier:   E4:F6:47:8A:80:A1:E2:B5:53:AB:4F:43:91:18:68:11:86:0A:19:70
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer:       /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial:       01935878627AECFD13811A3891F3FA7B8515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number:          11BB
Signing time:             Sat 23 Nov 2024 10:01:44 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:44 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:44 +0000
Files and hashes:         1: M4DdSHiOP6OMxH3GW2FACDVyPf8.roa (hash: IlPJn0dzlmwJqnqyCRY0JCRnNfi/eBmvdJ5LsquOJF0=)
                          2: n3_k8agOH5MINHyqWIzvVkTgwSI.roa (hash: K7y3JE14AGeUpK54EfwffyPsu6xPRvE+8GIAMKW3DTI=)
                          3: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: v9Oto5z78TjN1nvZp+Q5A6UDHOisuP007cNApZ3mCYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:62:7a:ec:fd:13:81:1a:38:91:f3:fa:7b:85:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
        Validity
            Not Before: Nov 23 10:01:44 2024 GMT
            Not After : Nov 24 10:01:44 2024 GMT
        Subject: CN=e4f6478a80a1e2b553ab4f4391186811860a1970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:df:77:52:ea:51:22:bb:87:3e:fb:6d:dd:
                    a3:b3:c4:43:0a:7a:21:6c:cc:29:15:17:49:33:95:
                    fb:a0:39:1f:8c:93:40:79:3b:62:af:e1:ef:1c:2d:
                    f3:90:cb:7f:20:3d:1b:36:c6:4d:73:5c:34:bf:f4:
                    86:7a:db:62:ec:58:f9:13:15:24:41:e4:9d:19:bc:
                    79:d9:47:64:f8:8d:9d:41:d4:70:de:ec:2d:4b:fb:
                    02:8d:cd:02:d9:10:10:06:5a:ce:b3:ac:d3:0e:03:
                    00:f0:85:20:4b:1f:9f:8c:a7:ea:cf:94:03:63:0f:
                    78:88:31:16:dc:fd:1e:f9:c0:b4:4d:15:5b:78:fb:
                    41:df:a7:2e:bd:c3:d2:a6:ee:40:f6:fc:e6:5b:bb:
                    c4:1c:9a:6a:49:87:38:b9:11:20:7d:15:01:c4:12:
                    05:fc:02:df:79:51:f0:4b:d0:f3:21:2c:bd:b2:89:
                    6e:77:2e:3d:f9:d6:12:71:40:66:ab:b2:1d:c5:8b:
                    c9:14:40:c5:ea:aa:38:95:41:6b:41:87:da:31:9c:
                    a9:6c:65:8c:50:17:11:04:16:d2:59:12:89:cd:ea:
                    83:23:b8:e2:46:40:e6:08:77:fc:60:5b:47:70:0b:
                    20:0b:62:2c:72:a8:41:22:b2:51:b3:a2:e2:25:f2:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F6:47:8A:80:A1:E2:B5:53:AB:4F:43:91:18:68:11:86:0A:19:70
            X509v3 Authority Key Identifier:
                keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d6:bb:c4:26:ff:cc:ba:37:7e:09:00:57:e4:ff:7b:d0:12:
         50:7b:c2:56:9b:32:7a:cd:13:af:14:0d:f8:20:31:f2:f7:ab:
         c4:83:b5:09:26:df:bb:12:b4:e7:8c:30:d7:1b:01:f6:13:70:
         3e:37:11:23:90:8e:3c:7c:d3:62:10:b0:98:8e:5b:91:fd:0a:
         14:b4:f0:cf:69:d3:66:a4:3e:16:ba:ae:66:ac:87:cb:98:d1:
         0d:77:de:c1:bd:df:06:44:39:2f:3a:60:b5:63:9a:3e:c5:18:
         a3:fe:c0:73:a7:4c:91:a4:7e:62:67:c2:ba:7a:98:99:f7:88:
         f5:35:04:a0:65:1d:0c:81:0d:5b:80:7d:dc:e0:54:da:4d:70:
         92:ac:49:50:7e:47:b3:82:8c:36:e2:52:c1:86:ca:6a:5c:73:
         d5:e8:50:df:c3:cf:72:ac:77:b4:f9:3c:e5:b0:99:b0:91:bc:
         90:f3:d7:0e:36:39:d4:3b:4d:78:51:9c:fb:e6:42:21:f7:5f:
         b4:45:ef:9a:a2:72:b7:ae:b7:5c:5e:e4:27:d1:47:ff:a8:a1:
         8f:91:c7:af:5f:3b:9b:44:49:ea:e0:e8:5a:56:2b:c5:dd:0c:
         3b:0a:1d:4d:80:bb:3a:48:64:66:30:3f:92:1d:84:f2:4a:a8:
         66:c3:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:46 2024 by rpki-client on console-fra.rpki-client.org