Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          C6X4zQLKh9qiXspsaQIB77gCvVR/h/QmVdHDNzAHub4=
Subject key identifier:   98:B8:A8:59:31:64:57:B5:0E:92:7B:1A:B9:D1:3F:B6:12:0F:09:38
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019357D2D4736BC315F3F8FCF0CB8976C8DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          0425
Signing time:             Sat 23 Nov 2024 07:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:54 +0000
Files and hashes:         1: 6dcpFHKDCDJHvYRR1pmXe0SR8XY.roa (hash: CZ/ha2MJeiD8zH7ilx8CWd1UuQwiv+CnRR+sDmpcTBI=)
                          2: LAAXyeCsKKp9Dz45YbLfoQ5KP18.roa (hash: ziZz6s3A7Ge6nTpyl3MbW3ZjCVYk7a3PlnoACkiNCRw=)
                          3: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: jXF9t1trfUQhX8uAMg7gkRFy3qVLZbp7m7x/6WOPiFY=)
                          4: nO16Kyd00zniPznM61VuC4G3uh4.roa (hash: IG3ax0RgG5q1qhPVhovGMaK7WE0GDXw42dCpJvM7RoY=)
                          5: vzv2_IPWTcI-SC77NR_Ebq2VV98.roa (hash: JkF3PLSkxYNtD65F0FtbeMcCbVYCImsJXSWvo3hpI84=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:d4:73:6b:c3:15:f3:f8:fc:f0:cb:89:76:c8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Nov 23 07:00:54 2024 GMT
            Not After : Nov 24 07:00:54 2024 GMT
        Subject: CN=98b8a859316457b50e927b1ab9d13fb6120f0938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:8c:49:ae:80:b7:a2:a4:31:f6:cc:bb:ee:
                    e1:72:46:b0:25:ea:f6:5b:f6:c3:91:15:61:dc:3e:
                    59:59:13:c1:92:b5:eb:ed:c0:1a:48:f1:d3:32:9e:
                    26:b1:00:23:23:16:9c:37:e7:f0:55:3d:a6:b5:6d:
                    e0:d0:83:3f:bc:45:7c:b4:fe:0c:14:ce:fa:fb:26:
                    ee:b0:d1:15:d3:6a:f2:d7:81:c7:47:b2:b7:57:75:
                    a6:89:f9:0a:7d:13:81:3a:8d:48:d3:7b:58:44:01:
                    e9:7f:4c:5d:35:d7:af:44:2f:37:e4:3c:f6:95:16:
                    a0:51:0f:4e:47:93:25:c8:44:cb:ec:a1:3d:4c:92:
                    7b:48:35:9f:b8:44:f5:62:a9:c2:42:c4:ad:63:71:
                    91:12:23:f6:ea:35:4f:28:20:1e:cf:5a:6f:1f:ee:
                    73:eb:d8:8c:05:b5:f6:c0:70:62:b7:e5:2c:89:b8:
                    e8:d5:80:35:54:4b:39:98:6e:c2:73:23:55:4c:e0:
                    fa:d8:b3:47:e7:70:fb:10:fb:3a:84:0c:63:89:67:
                    22:aa:87:cb:d7:8c:98:72:51:f8:69:76:35:80:21:
                    dd:a6:5f:7a:e6:89:69:1a:b2:6a:7f:33:1d:bb:32:
                    49:05:d3:99:11:69:9c:2a:d7:49:c1:ae:cb:bd:97:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:A8:59:31:64:57:B5:0E:92:7B:1A:B9:D1:3F:B6:12:0F:09:38
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:03:7d:78:c9:d3:45:f2:d5:70:33:a6:b6:33:2f:a1:b8:d9:
         f0:ba:29:87:e0:a2:ea:3f:c5:d0:e9:7a:52:fe:3a:61:20:0f:
         af:1b:59:21:7e:89:06:7a:34:d5:14:a6:ac:04:f5:37:aa:ce:
         ba:8c:66:ae:f0:23:92:4b:06:c3:da:d6:04:af:a2:1a:1c:93:
         5b:f8:c6:e1:60:28:da:31:1c:de:0d:7f:9b:2b:17:a7:eb:a9:
         e6:c6:98:03:e9:c9:68:4e:4c:ed:6b:c5:40:d1:8f:ce:30:f6:
         1d:23:cc:88:e3:0a:1e:b3:56:bd:a1:84:1f:b6:97:80:f6:6b:
         45:d0:ee:74:45:6a:1d:c5:3d:34:be:d6:f9:da:3a:7e:dd:ea:
         0f:36:7a:14:9d:48:ab:d4:0c:89:1f:a3:51:60:4d:cc:2f:52:
         8c:82:cd:68:4d:07:67:76:41:79:ba:f3:5f:14:a9:22:18:42:
         5c:27:d5:66:98:81:71:16:8d:9d:57:44:4f:d5:ac:48:db:b2:
         9c:10:a0:d5:07:ba:72:1d:02:dd:78:97:96:7c:7c:54:e1:28:
         4f:44:94:70:ab:b1:6d:38:cb:fe:95:31:0f:50:73:4e:f5:46:
         4d:63:26:d1:67:12:38:c8:0b:ba:57:30:de:da:73:e5:67:9e:
         8a:4c:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:28 2024 by rpki-client on console-fra.rpki-client.org