Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File:                     xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier:          brn9KDQWFBlE7bqrKQk+lpdG8v9vSAIYNWFWZMrlm5E=
Subject key identifier:   E8:DA:EC:2D:2F:76:FC:41:E0:93:F3:69:43:2D:9D:36:F2:CA:88:01
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer:       /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial:       0193579BD6013627C7923DB7E9AA47C7E468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number:          8B
Signing time:             Sat 23 Nov 2024 06:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:50 +0000
Files and hashes:         1: C62pPdseR_EHIirc-h0mwEx-1o0.roa (hash: IgDM5aOzLVXGWyJnPRRP15zZgixyQHUKYXbLfgOclUA=)
                          2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: e6Q3u6y/BRfUiMdO/7MSwPmlFLi/8aqZ2SaazouC2aQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d6:01:36:27:c7:92:3d:b7:e9:aa:47:c7:e4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
        Validity
            Not Before: Nov 23 06:00:50 2024 GMT
            Not After : Nov 24 06:00:50 2024 GMT
        Subject: CN=e8daec2d2f76fc41e093f369432d9d36f2ca8801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:8e:ca:1e:15:51:f7:d7:0f:ad:32:e0:3a:
                    9a:fc:b3:67:f3:ec:e8:b5:fc:8f:94:3b:60:55:d1:
                    d4:50:8a:e8:d0:51:3a:b7:6b:f2:9f:1d:3e:f9:e3:
                    1b:a7:8c:eb:4c:ef:85:cf:db:df:7e:cd:64:4e:c5:
                    d3:03:14:ef:f4:fc:30:26:fd:e3:5c:1e:0e:1e:1e:
                    07:8e:82:d5:94:c6:92:96:39:5c:85:92:31:71:2f:
                    7d:33:f1:47:62:44:62:6a:6a:16:f9:bf:0c:a0:94:
                    b3:7c:06:54:d8:0e:78:34:4a:f7:b4:25:e6:1c:c9:
                    31:eb:70:81:cc:73:47:1d:f1:86:82:f1:4e:37:4f:
                    7e:96:f2:25:40:8e:a5:18:45:9f:0b:0d:72:7a:5d:
                    49:34:1a:a5:82:82:db:9f:1d:8d:5c:f8:59:db:36:
                    28:8b:53:c5:cd:91:f2:42:f8:56:9b:c4:80:b1:bb:
                    41:26:d9:76:2c:26:d8:4e:c0:4d:dc:64:3c:95:07:
                    0a:cd:d2:dd:99:c5:67:d3:22:01:d1:86:af:be:d8:
                    3b:fa:86:16:e9:a3:28:6f:02:d2:d2:84:e2:bc:26:
                    e1:c6:8d:70:ee:8d:4d:fa:8f:a8:f9:63:7e:17:27:
                    ff:8b:bf:3c:0b:74:92:3f:9b:c8:1a:f7:87:0f:47:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DA:EC:2D:2F:76:FC:41:E0:93:F3:69:43:2D:9D:36:F2:CA:88:01
            X509v3 Authority Key Identifier:
                keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:fb:7a:75:b7:f4:e4:f0:7f:35:a2:b6:f9:c0:81:22:d6:
         2d:ff:9a:be:a6:e8:5b:d6:ab:b5:46:19:39:c6:00:b0:33:be:
         88:07:a8:f2:2c:1e:02:8c:ff:31:4c:fc:f0:fb:8a:1e:e4:53:
         97:87:75:92:83:e6:f7:b8:7e:20:ef:08:ba:b1:7f:5a:ce:22:
         16:84:49:da:65:4a:f6:70:89:93:60:85:27:14:f8:3a:45:3b:
         5f:a7:81:87:7c:37:4f:6f:6f:7e:50:cb:71:24:de:89:cf:cd:
         4b:86:eb:03:c2:5e:47:1c:d0:d5:c0:51:f0:0d:23:f3:41:91:
         3d:a2:90:70:44:82:8d:ba:38:84:cd:a4:aa:13:01:b7:94:c2:
         a3:f8:c8:34:8b:3f:2b:a8:01:b8:2b:65:b7:82:b8:d1:42:30:
         2c:99:b3:cc:dc:b5:eb:ff:73:f8:e9:83:3e:92:97:68:ce:e4:
         a7:21:5f:07:ca:60:de:2b:11:e9:1b:33:e9:62:16:e0:45:12:
         0f:a3:a1:89:41:94:3e:b8:58:70:7d:79:2c:7b:54:99:12:f0:
         2f:b3:e6:dd:37:21:93:4a:bc:ef:8c:b2:b4:94:c4:33:51:66:
         a8:2a:6b:75:b9:31:19:a5:31:86:66:8c:39:4c:d6:83:4e:b5:
         24:e6:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:32 2024 by rpki-client on console-ams.rpki-client.org