Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File:                     XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier:          6wDUH+x04vl/pazZqTz1jEf+BA0IdCDmFJX7tsQ+BTA=
Subject key identifier:   97:C4:FC:B5:5B:EC:E9:61:74:17:EC:10:FB:81:52:05:36:84:3F:82
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer:       /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial:       0193568A1C59747CFEE6A03B4399CC8AFC6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:52 +0000
Files and hashes:         1: 59rrrfwoWsJlljrqnfzeyzpu7MI.roa (hash: vx1pzoTjZHW0pZvxOXUs59auvdOvVA4bKoyMDGDHRtg=)
                          2: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: eA4wZ/fEH8pHCq0aqw+wpiSJSbGYWar2WqEZNZCOCmo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1c:59:74:7c:fe:e6:a0:3b:43:99:cc:8a:fc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
        Validity
            Not Before: Nov 23 01:01:52 2024 GMT
            Not After : Nov 24 01:01:52 2024 GMT
        Subject: CN=97c4fcb55bece9617417ec10fb81520536843f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:60:77:cf:cc:8f:9d:f3:51:65:23:82:37:
                    93:b5:91:d8:c7:0a:0b:49:18:15:74:95:95:60:6a:
                    3e:7d:48:1e:25:d0:ad:45:ec:70:f9:f6:e3:7f:67:
                    6e:70:56:47:ab:71:5f:04:53:69:50:ea:df:ae:5b:
                    63:22:2f:8e:84:60:2d:b0:24:97:fc:f5:af:0e:0f:
                    54:0b:c7:0b:89:f2:24:a7:98:71:87:b3:23:b9:92:
                    0a:0e:08:21:17:ee:48:88:83:4a:73:c6:e6:e5:b9:
                    3f:27:c2:49:89:34:87:b2:90:64:a1:31:06:df:68:
                    ce:db:13:8f:7c:fa:a3:85:bb:47:a4:cb:8d:78:00:
                    6c:4e:fd:ed:5e:b1:b9:06:93:58:8d:75:8d:8d:20:
                    55:3a:d6:d3:9d:ff:a5:3c:eb:17:a0:98:15:9e:2b:
                    20:ef:6c:76:01:fd:84:9a:19:28:ec:d0:f1:51:12:
                    3c:b6:4a:e8:92:1c:87:c0:3d:73:05:ae:76:62:67:
                    ad:fa:b4:78:c2:72:0a:65:b5:6a:0b:f7:5c:5f:8f:
                    d0:12:1e:6a:45:d3:6a:b0:32:c8:55:75:67:d7:4b:
                    b5:be:69:c0:9f:7b:be:02:88:5d:45:c4:19:ec:3e:
                    84:aa:f2:b3:a5:1c:79:e0:83:4e:9f:8c:62:6e:a6:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C4:FC:B5:5B:EC:E9:61:74:17:EC:10:FB:81:52:05:36:84:3F:82
            X509v3 Authority Key Identifier:
                keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:ee:fc:b0:92:bc:e7:42:81:64:fb:31:bc:16:4c:f4:ce:
         c5:0a:76:fc:bf:49:11:f0:a2:51:7f:a5:b2:7a:be:2e:d7:1f:
         67:06:6e:b1:2c:1d:c6:97:4a:49:14:04:f2:53:13:1b:36:4f:
         7b:33:2e:61:eb:82:51:4e:6a:52:35:49:0c:42:39:95:6c:98:
         d2:7b:03:9a:0a:f2:7d:fc:4d:1b:ac:1c:b1:b6:4f:3d:53:ed:
         e7:21:b8:43:e0:c9:ee:08:f6:ba:d5:64:f2:ce:88:85:67:60:
         6f:4d:bb:64:70:8f:04:2b:aa:cf:95:cf:e5:a6:1d:6f:aa:8e:
         46:21:85:1f:72:d0:49:08:ad:94:0d:80:04:3a:39:1d:b5:de:
         ba:96:8f:ac:29:dc:a1:da:aa:b9:61:dc:45:8b:81:dd:be:30:
         6d:a8:34:47:61:1d:84:ce:a4:60:94:d4:82:e1:38:09:98:c5:
         f0:45:67:a5:d4:32:14:22:d2:84:49:3c:16:a0:b4:31:9b:7b:
         70:82:a9:d4:4d:69:76:e5:a5:61:b4:c2:c0:f0:b6:c4:fb:80:
         39:63:ee:31:f8:c8:b7:d2:01:68:16:01:f1:26:26:bf:3f:67:
         50:e2:2d:bc:49:3b:01:a6:e3:12:e7:40:a0:07:e7:55:71:30:
         0e:6e:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:42 2024 by rpki-client on console-fra.rpki-client.org