Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File:                     _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier:          TYmw/1arOABqtBAdYgGDE1pZwFnX3M0mcGLlQVPO6gU=
Subject key identifier:   B3:25:3F:50:8D:E9:37:D2:6F:11:4D:CB:E3:9E:ED:18:88:4C:F2:D0
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer:       /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial:       0193568975171A2A8D09C702428003F49689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number:          11CB
Signing time:             Sat 23 Nov 2024 01:01:09 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:09 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:09 +0000
Files and hashes:         1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: DDjPM4Y6BKNlL6iklBl76J3yfTz18YKEr8i7tZC9ht4=)
                          2: lHd7xqftLAEpkoOWzQgys_oMo1o.roa (hash: QV+zHFcW4RwbAVZAzU7oK7t9vsa1pYMso+duAWIlBCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:75:17:1a:2a:8d:09:c7:02:42:80:03:f4:96:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
        Validity
            Not Before: Nov 23 01:01:09 2024 GMT
            Not After : Nov 24 01:01:09 2024 GMT
        Subject: CN=b3253f508de937d26f114dcbe39eed18884cf2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:dd:2d:3b:ed:40:8c:55:66:5a:d8:04:be:
                    4b:2b:06:68:0b:d4:4d:a0:a2:02:2a:a3:61:78:06:
                    c2:d3:fa:bd:9b:14:18:8d:03:7a:83:c1:2a:17:49:
                    54:88:98:f9:47:47:73:98:ee:a1:09:e0:94:21:57:
                    cf:f7:e0:c1:d3:de:8f:98:4d:b7:6d:22:53:db:3a:
                    bd:f8:6a:e5:a6:c8:b6:26:9d:3e:09:fe:b9:a7:10:
                    27:d4:e6:08:f1:5e:82:1e:c0:59:51:96:7d:9e:8d:
                    09:5c:8b:f8:16:a8:ce:54:d1:38:c9:1b:6e:3b:f7:
                    5d:d4:40:e3:d1:6c:a1:c6:b3:79:3a:cb:57:9e:c7:
                    9b:83:f0:1c:ea:f9:30:cd:ab:08:44:a8:2d:d4:2f:
                    0d:0e:17:2c:4c:f5:89:97:55:1c:a6:da:df:43:b7:
                    7a:90:ae:07:49:03:56:52:f2:dd:79:70:85:0e:bc:
                    93:78:a8:e1:0f:91:85:7e:0a:3b:31:12:9d:73:92:
                    4e:2e:e6:5a:0a:37:56:c9:d9:0b:10:f2:62:61:81:
                    99:ec:a8:0e:5c:a6:55:8a:e0:ca:43:bc:1a:27:74:
                    2a:fd:24:4a:2b:1d:ec:ff:de:ec:af:1e:ed:f1:50:
                    07:eb:8d:0c:77:08:98:a4:f5:98:62:8f:c3:37:42:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:25:3F:50:8D:E9:37:D2:6F:11:4D:CB:E3:9E:ED:18:88:4C:F2:D0
            X509v3 Authority Key Identifier:
                keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:08:32:1f:3f:9a:2f:ba:c3:58:41:36:9b:c4:d2:e3:26:
         bd:b5:41:57:bd:60:a7:94:1a:3c:21:23:9c:8b:26:52:57:08:
         cb:9b:48:aa:c6:35:45:8f:ad:2a:6f:c1:f0:8e:ca:3f:76:ed:
         bd:b5:50:95:ca:a3:02:4b:2e:09:18:7b:6c:19:bb:a2:35:ea:
         7d:bd:46:f1:f8:76:76:7b:1d:58:f3:df:05:23:b7:fe:5b:7d:
         fc:76:51:f0:90:d6:90:91:fd:b5:34:76:74:1f:9d:28:14:7b:
         fd:5b:0e:1d:cc:06:bb:70:74:c0:16:35:ed:75:72:5f:25:06:
         54:d3:e9:9f:cf:27:03:fb:2d:b9:4e:39:d4:87:40:8c:b5:62:
         0c:60:1e:ca:cc:fd:16:4a:d8:fc:4e:0c:aa:6c:d4:45:1f:14:
         00:fe:b3:a9:5d:69:6d:fe:29:9e:22:b6:13:7a:a7:9f:d0:4c:
         cd:06:c1:5f:4d:9f:f4:80:ea:b3:ed:bd:3a:88:3b:9a:02:85:
         a6:55:e3:8a:28:e1:ce:9b:62:ed:67:4e:2d:e1:26:dc:54:e0:
         1b:17:da:23:8a:40:7f:32:a0:4c:5c:05:e3:78:24:ef:5d:9b:
         2e:56:d1:5f:de:69:a2:5a:14:67:a4:30:f4:b0:ac:14:24:cd:
         cd:91:fa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:26 2024 by rpki-client on console-fra.rpki-client.org