Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
File:                     xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json)
Hash identifier:          ukfqBx8JYqX3KUMWd43uCc3EDKJGNHlVsDH6j0olUGo=
Subject key identifier:   10:C9:1F:99:91:28:40:34:11:82:0B:81:64:87:0B:02:AB:6A:7E:A2
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Certificate issuer:       /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial:       01936934400710E18B3732D57A4FA623596F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
Manifest number:          044F
Signing time:             Tue 26 Nov 2024 16:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:52 +0000
Files and hashes:         1: x_w-hOW1SYNhs733MeXtP6yvs_I.roa (hash: lyZUdbvhfzTtNpsO2DBVGhy/De7vg0zZwFFqYo6RODw=)
                          2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: Gq45TNlmSKb0ySm4aeBv0JnYLdwnJDBALGrctjeXOT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:40:07:10:e1:8b:37:32:d5:7a:4f:a6:23:59:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
        Validity
            Not Before: Nov 26 16:00:52 2024 GMT
            Not After : Nov 27 16:00:52 2024 GMT
        Subject: CN=10c91f999128403411820b8164870b02ab6a7ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:08:4a:1b:be:2d:ab:64:85:02:74:e1:ef:
                    6d:a7:86:8f:73:9f:ab:2d:e6:da:cf:76:12:a9:df:
                    b7:e3:23:a0:44:e9:57:da:8e:53:da:a2:20:24:ee:
                    b0:df:5c:49:4f:6b:36:f5:de:62:d4:8d:0b:7c:76:
                    5c:bb:96:ad:61:64:87:d2:36:8a:9f:d0:db:63:9c:
                    84:06:56:17:fa:39:90:a8:6e:77:e3:de:b7:b9:00:
                    28:1b:83:30:01:8f:fe:07:ad:25:f1:15:a2:fe:f5:
                    34:63:00:a6:21:70:04:53:21:93:ae:3f:38:68:4c:
                    50:57:d4:78:55:3b:87:32:9f:7a:8c:a2:52:9e:39:
                    b6:ce:6d:78:87:5d:75:42:e8:87:b6:6b:a5:4a:6c:
                    7a:b7:f0:25:cd:28:00:e0:d6:a9:c0:b4:f2:a1:16:
                    45:e6:c9:c3:7a:65:e6:db:24:41:b9:23:98:bd:be:
                    30:cd:72:48:89:cb:1e:06:1d:10:39:c6:e1:5d:85:
                    ca:37:a4:c2:9a:ab:e3:fd:33:c3:de:5a:0d:13:e1:
                    97:0c:02:fb:e4:a1:44:86:5b:27:38:20:c3:49:99:
                    08:67:f9:f8:aa:87:02:f1:81:2e:3a:27:19:bd:a7:
                    94:10:62:c8:bd:3f:39:d3:1c:ef:5a:b9:aa:2c:a6:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:1F:99:91:28:40:34:11:82:0B:81:64:87:0B:02:AB:6A:7E:A2
            X509v3 Authority Key Identifier:
                keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:f1:4c:66:8f:cb:ae:4b:22:b7:f6:11:8d:23:cc:c0:ea:
         14:fd:ea:96:58:fd:9a:c3:ba:a6:09:71:45:c2:69:c4:6b:8b:
         b7:33:a9:e3:91:45:a8:ba:83:1e:1a:35:bf:01:b7:f0:70:bc:
         e2:c2:fc:80:9e:eb:00:59:b4:7d:b6:9e:e6:86:4a:61:73:26:
         8b:51:36:13:83:77:5c:61:be:9b:be:be:dc:c4:4b:fc:ac:3d:
         66:64:67:d7:1d:ef:17:40:3e:a0:17:3d:f3:6e:27:00:b1:7b:
         7d:1d:f7:a1:3a:a6:a3:7f:0d:c7:c1:b4:56:f5:d5:10:c6:54:
         a0:cc:28:4f:19:43:92:05:20:07:d8:bb:fc:ce:a4:59:97:00:
         95:08:af:a8:f8:59:df:41:31:2d:b8:7f:54:cc:ce:a1:58:bb:
         42:3a:66:a8:54:84:8a:21:22:d7:f1:f6:5f:0d:69:a6:ab:2e:
         79:0d:4a:21:94:47:47:ba:88:b6:80:80:6d:d7:c6:98:cb:bc:
         62:fd:ff:c4:76:51:c9:81:6f:c1:cb:57:8f:68:29:f8:4e:b7:
         da:33:3e:dc:f2:81:25:a6:1a:41:ec:11:00:6b:1d:7d:ea:fb:
         31:dd:e8:e6:b8:74:ea:de:b4:9d:91:55:ad:65:1d:94:ac:da:
         8c:95:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:24 2024 by rpki-client on console-fra.rpki-client.org