Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
File:                     xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft (raw, json)
Hash identifier:          EhZxsKxucQYfP2PNZ6eXc3r2lzUqwDbY+z0brUttwaE=
Subject key identifier:   62:82:97:F8:07:49:EB:79:34:7A:54:2A:7C:DB:A9:F7:E4:5E:5E:19
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Certificate issuer:       /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial:       019357D2C95980D78B5B629D829B81A3F70A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
Manifest number:          03CC
Signing time:             Sat 23 Nov 2024 07:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:51 +0000
Files and hashes:         1: N-0SDNVCK11doXDpFiP2JnxdIQ0.roa (hash: gyuNRgJdY4TUvynqERP6xsMQ1qdH4yJxNFw58n4DWUQ=)
                          2: xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl (hash: YjCCjmYL5O4E5sf4A1QnHWnymkSEQlL/3OdoOpuFFfM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:c9:59:80:d7:8b:5b:62:9d:82:9b:81:a3:f7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
        Validity
            Not Before: Nov 23 07:00:51 2024 GMT
            Not After : Nov 24 07:00:51 2024 GMT
        Subject: CN=628297f80749eb79347a542a7cdba9f7e45e5e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:36:22:40:63:51:fe:35:fc:07:55:1a:ac:
                    fb:d9:2c:18:dc:c4:a7:06:07:94:80:15:15:5a:4f:
                    86:43:af:80:c7:13:83:0b:fe:a1:a4:a5:e8:b0:a2:
                    a7:5b:0c:82:12:fc:19:a3:e2:7e:9c:0d:ed:bb:2b:
                    f8:34:26:59:ae:a7:e0:28:09:27:15:29:7c:ec:41:
                    8d:bb:75:df:af:2d:c9:6e:52:c5:6c:3a:28:47:84:
                    da:cf:c6:03:4a:94:1e:8f:52:75:5f:bf:63:50:3e:
                    03:02:06:07:55:d0:2e:fe:1d:ba:bf:a5:15:ed:36:
                    9d:19:7b:ce:bd:06:90:36:a6:d4:ab:44:2c:d6:4b:
                    1e:26:f1:28:33:61:be:a4:49:c0:6f:27:5c:59:61:
                    f1:9a:54:40:53:d0:0f:87:27:2e:01:c5:e2:d3:5d:
                    09:f0:a9:de:79:c1:b8:6f:ad:94:73:5d:bc:4c:af:
                    0f:77:8d:ea:1f:f3:6f:1d:ff:43:86:72:ef:12:12:
                    35:3c:5b:b2:30:34:8d:94:af:b5:fb:0a:e5:87:1c:
                    e1:b2:82:e7:cb:37:c6:3b:80:c5:8e:01:e6:0a:b6:
                    9f:a3:e2:ae:17:99:e2:93:0d:02:9f:d7:47:4a:16:
                    65:9e:2e:81:d0:4f:f6:36:06:41:3a:e8:de:b7:f4:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:82:97:F8:07:49:EB:79:34:7A:54:2A:7C:DB:A9:F7:E4:5E:5E:19
            X509v3 Authority Key Identifier:
                keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:97:65:01:37:cd:c9:82:d7:24:b2:54:41:cd:10:47:8f:f6:
         89:93:b9:1e:34:d4:f5:d1:86:79:e8:7b:1a:74:2f:a7:42:f3:
         d4:ee:e2:4b:81:96:d1:e4:35:16:5f:9b:4d:ee:1f:f9:69:1e:
         50:d6:52:19:77:01:ef:ae:45:1f:46:86:fc:19:8e:21:9a:e1:
         af:2c:48:dd:74:9a:42:9b:58:7a:b7:a9:fd:c1:84:ee:50:ec:
         48:56:df:2f:7e:0d:ad:d1:4c:56:0a:dd:5f:d5:d2:db:c6:b8:
         6d:a4:03:b3:d7:11:12:75:df:d8:6a:78:7f:bc:55:8a:82:9f:
         d1:b9:ff:e5:79:6f:02:75:bd:29:ec:8c:3f:26:14:95:8a:75:
         0d:b6:aa:96:d0:fd:64:a7:9a:c9:2b:b5:8e:ca:41:f9:4f:bc:
         7d:7b:cb:3e:89:96:35:62:45:0f:54:26:69:0d:43:77:18:13:
         0e:1a:83:f3:56:ba:15:7c:09:ea:3a:03:31:11:b4:6d:0c:dc:
         00:f3:be:10:b1:8c:82:67:86:c3:8a:b2:01:63:b3:19:4a:ff:
         60:e8:b9:03:cd:75:b8:46:c8:00:55:d8:3a:98:6b:66:18:41:
         4f:e9:10:53:6d:12:83:75:3b:68:19:5e:71:ab:9f:c7:aa:ee:
         60:50:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:29 2024 by rpki-client on console-fra.rpki-client.org