Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File:                     XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier:          DoVyHla0u0zXS50FtNkltb2FxJrOGmYsblc3oUDB6+E=
Subject key identifier:   1A:87:52:95:EC:95:F2:D9:96:7F:A1:6F:E1:9D:90:91:2F:26:61:F5
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer:       /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial:       0193568B32B09512F3BFB181815B2A906850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:03:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:03 +0000
Files and hashes:         1: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: NSZZKP7N/5j0Ttce7uDTSwvtXix5yPkZZy9o/CuxKNM=)
                          2: coHTBXMkvl3BbkWti_VKLmhuM6o.roa (hash: +KxwizG158YJ4iQfyX5f5+yhAqgIouMVE327U8GLRgI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:32:b0:95:12:f3:bf:b1:81:81:5b:2a:90:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
        Validity
            Not Before: Nov 23 01:03:03 2024 GMT
            Not After : Nov 24 01:03:03 2024 GMT
        Subject: CN=1a875295ec95f2d9967fa16fe19d90912f2661f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2d:1f:a4:fa:7a:6c:c5:ab:a3:c0:88:ef:3f:
                    5e:42:d3:df:28:a7:b1:e5:a8:a6:9c:19:37:f8:1e:
                    b4:e3:88:0b:e9:0e:de:f9:ea:c9:9d:06:9d:6c:b2:
                    21:67:28:d3:29:b1:fd:66:7e:81:43:c3:7d:f7:42:
                    88:32:2b:4f:a0:e9:69:74:88:52:eb:e2:9f:eb:2f:
                    58:fa:ca:49:6e:aa:c5:d9:cf:5a:d8:33:e6:32:d0:
                    d2:9f:a8:43:1f:1d:87:ed:44:46:12:c4:9a:39:31:
                    63:1d:7e:05:92:ce:94:9a:12:f4:46:67:f4:d5:e5:
                    02:22:c1:3d:fa:4d:d0:ad:cb:1a:9f:7e:a8:f6:ab:
                    bc:c6:7c:bb:a0:5b:13:8e:a8:55:70:5f:d3:17:33:
                    68:8d:a6:bb:8b:dc:ec:d5:eb:91:a9:22:d2:a4:1f:
                    55:ef:5b:6c:3e:8e:2e:da:0a:40:a0:21:7b:8c:a5:
                    93:32:f7:59:46:9b:dd:fd:c7:93:e3:49:1c:3d:1a:
                    ff:8d:15:9b:d9:ca:f1:ed:29:99:7e:04:6f:cc:08:
                    02:69:b5:3c:85:db:82:e8:34:6e:41:47:9a:03:70:
                    35:18:8a:26:a7:04:63:64:69:02:47:51:e4:de:96:
                    ba:cd:2e:10:91:f4:9f:3f:a7:d4:ac:61:c3:b1:1e:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:87:52:95:EC:95:F2:D9:96:7F:A1:6F:E1:9D:90:91:2F:26:61:F5
            X509v3 Authority Key Identifier:
                keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:00:30:df:27:5e:1e:40:51:68:fe:de:45:e5:51:c6:2a:
         c9:73:b0:61:30:71:e8:e1:5c:bd:d2:b0:4d:a0:74:f0:6f:f9:
         44:2d:cb:0a:dc:1b:8f:80:14:15:6c:46:0e:9c:f8:e9:a0:7f:
         65:cf:02:86:7a:f1:04:99:34:e7:f1:bf:25:de:9f:9c:e3:dc:
         52:ce:2d:9b:9d:28:52:4d:74:33:95:95:ff:dc:5a:74:41:76:
         29:e1:68:44:95:8b:e7:c8:15:c1:6a:35:80:9f:5c:e6:d0:b4:
         34:cc:07:65:ca:85:59:a4:8f:1d:76:2a:ef:a5:ce:99:27:46:
         68:a1:a0:f5:29:2f:34:fa:80:64:55:f8:1f:25:b0:05:f5:3d:
         e7:c3:50:d3:06:3d:57:50:70:da:ce:ba:5a:5c:a4:a5:e4:be:
         4e:f8:5d:d7:28:59:9b:7a:aa:39:e9:ec:e0:f4:e3:2e:c1:a2:
         f8:c5:9c:9c:cf:8c:a5:ba:cd:49:9c:cd:82:13:05:e6:8f:cb:
         52:91:0a:79:ba:aa:21:17:9b:6b:e2:03:0e:77:a6:b0:9b:fc:
         c8:f5:58:52:3d:5f:ff:30:bd:66:e9:a3:3a:f5:1d:9a:91:d8:
         ca:fb:af:c9:df:8d:00:48:52:05:41:83:f6:83:8b:10:b0:19:
         ba:f4:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:56 2024 by rpki-client on console-ams.rpki-client.org