Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File:                     xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier:          AWpjMJV+dbAhQXM6V256UTt+mPgBF9c8NP7p0hJGvkQ=
Subject key identifier:   05:06:94:2A:49:AB:8A:9D:C3:C8:7C:EC:C9:25:3C:74:0F:57:D2:3E
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer:       /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial:       019358E57F56E9AA91A39F92C51B62A5ED42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 12:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:55 +0000
Files and hashes:         1: 4g84e6YQAmr9HXrOX5sNN_Tl2J4.roa (hash: f7tS/kBDTAK/wZ09NwSzn1wqx36ywFTtVeLDVO1FT/8=)
                          2: cZp46vnuVnFoojq0pLZZ-QY61QA.roa (hash: blzJ0Dmh5tAJMmpkyX8UZpIu81IzFCfN1Vz+lTC5Ywc=)
                          3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: UvKepW3sfGZt4tB/g2xjuqIxIUKLNwZBOfXyyGl24aU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:7f:56:e9:aa:91:a3:9f:92:c5:1b:62:a5:ed:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
        Validity
            Not Before: Nov 23 12:00:55 2024 GMT
            Not After : Nov 24 12:00:55 2024 GMT
        Subject: CN=0506942a49ab8a9dc3c87cecc9253c740f57d23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:5c:48:34:92:d0:a6:ac:f6:43:6f:20:99:
                    ab:8b:82:12:f3:56:0d:f1:35:e9:11:25:39:55:3e:
                    d5:3a:18:cd:bd:de:aa:72:14:e5:0f:47:f0:e4:d0:
                    a5:03:46:a6:37:e2:a9:4e:e7:e3:5d:31:e9:fd:75:
                    55:1a:4c:5f:64:24:96:38:a4:12:15:5d:1f:18:28:
                    d4:a5:b4:0a:02:48:21:28:9c:44:0f:68:61:a1:41:
                    fe:64:98:74:48:0f:44:f5:9c:7e:16:d0:d5:de:b8:
                    b9:61:5f:51:a1:64:3e:48:12:69:56:16:d2:38:7c:
                    0c:99:27:f2:7b:8c:9f:6f:1a:d0:4a:52:96:ca:64:
                    b2:10:0d:aa:2e:4b:17:7b:cb:d7:8a:ce:c2:25:84:
                    bf:01:28:93:d0:2e:15:d4:2b:1c:ad:24:e0:34:61:
                    e3:b1:e3:10:6c:f4:a8:b3:c5:9c:36:92:b9:73:35:
                    64:f8:a9:6d:ea:73:24:d1:b7:af:3e:5e:eb:af:ea:
                    f7:7c:ce:cd:b8:f9:0c:c0:92:3d:b8:80:6c:10:82:
                    53:fd:47:93:cd:c2:40:bf:00:e0:ac:76:ce:8e:d0:
                    70:e8:bf:27:04:39:76:8f:0a:8d:45:6b:cd:19:bb:
                    0e:8e:5e:c5:16:6e:79:42:82:95:bb:67:52:dd:b9:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:06:94:2A:49:AB:8A:9D:C3:C8:7C:EC:C9:25:3C:74:0F:57:D2:3E
            X509v3 Authority Key Identifier:
                keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:17:bf:70:56:25:59:1e:00:b5:b8:78:5e:28:3f:53:69:b4:
         72:ca:b4:3b:f8:c4:b5:e8:88:83:98:87:89:c9:a6:2e:ae:00:
         54:53:3a:11:9e:10:7b:f8:75:7f:31:13:22:21:58:14:8d:a3:
         c1:a5:8f:f6:54:fe:98:5e:22:91:00:2a:7d:3c:38:13:d1:37:
         03:41:56:b0:e7:39:53:d6:0b:e0:f6:f6:dd:84:0f:e8:96:88:
         d1:c1:66:1d:ef:a7:67:76:eb:89:b7:70:fd:20:3b:58:af:a9:
         12:4f:e0:b1:f4:6d:ec:5c:b0:ff:a6:7a:ac:dc:62:c5:3c:b5:
         e9:83:e8:84:89:89:68:3f:e8:48:7f:c1:93:ea:3e:82:b0:98:
         c1:00:d7:bb:10:2f:40:14:ff:13:a6:ad:07:ac:1b:34:c7:e5:
         8d:67:84:b6:10:b8:f4:69:11:d5:c6:62:7b:87:a8:e2:6a:a6:
         10:f2:88:b6:52:ce:e3:fc:80:51:43:cd:60:e2:3b:fa:41:4e:
         cd:8e:00:c9:33:ad:c0:94:d8:6f:24:fb:c3:73:9c:85:50:34:
         c6:0c:7b:8c:de:a7:e2:75:ae:c2:24:e8:02:62:55:a0:6a:00:
         7e:c3:86:d0:29:33:d9:9a:1f:af:2c:1e:f5:27:a5:7c:3f:61:
         f0:34:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:38:53 2024 by rpki-client on console-ams.rpki-client.org