Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File:                     XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier:          L73L+AQTOmTUat3AcA26obUQ0DBl4TYnKWMlZ+kAFvc=
Subject key identifier:   C0:76:6F:70:36:2C:92:B3:62:37:83:5B:74:73:E5:B5:89:CA:2C:A1
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer:       /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial:       0193520710629AEC8A54F560C4FF5C523BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 04:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:14 +0000
Files and hashes:         1: 86GDzxR4i-ntXsEjVx1DqpFWVvI.roa (hash: prNtSh0x3JQ5Z79ZzoGVnff1Xkp2ptFpVmjIp//A1Lk=)
                          2: Me5r2Nm9YJCMcMuL7P_zmlrKaDM.roa (hash: OPyK3AmzDouuv3s3J7TbAA/anm1D/IXyhrI34EjdiHk=)
                          3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: gA3DgiJpxWYcSg5ou/v3bT6e4hlvWM2vTyepJlWj6wI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:10:62:9a:ec:8a:54:f5:60:c4:ff:5c:52:3b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
        Validity
            Not Before: Nov 22 04:00:14 2024 GMT
            Not After : Nov 23 04:00:14 2024 GMT
        Subject: CN=c0766f70362c92b36237835b7473e5b589ca2ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:7f:d6:56:b6:79:9d:b8:6d:02:5b:a2:b6:
                    83:21:fd:78:83:57:72:f9:ec:7d:9d:0e:a8:74:06:
                    b8:a8:67:db:77:22:13:00:38:a4:9c:3c:23:18:2a:
                    24:a9:aa:2b:2c:47:83:24:c4:b9:ec:f7:e2:3d:24:
                    50:0f:44:91:2c:e8:fa:54:9e:dd:df:df:42:2b:ae:
                    3d:e4:32:01:11:a0:a2:61:7d:b5:fb:bf:f6:88:13:
                    38:fc:bb:a7:01:8f:c1:b9:7f:82:dd:c1:46:0e:a4:
                    cb:84:2f:a8:fa:41:5f:7d:4b:09:0c:98:dc:ff:11:
                    0e:cb:ce:14:4b:fd:2e:b4:78:d4:8d:f1:6a:34:14:
                    9c:bc:1f:e4:80:8e:83:99:4f:08:c8:24:4e:ca:c5:
                    55:10:fc:e1:8c:5e:2f:1b:07:4b:b5:c2:80:35:6b:
                    93:a0:d7:4d:2a:e3:9a:90:8a:21:43:56:cf:fe:2a:
                    9e:01:fb:23:50:26:dd:8a:5b:b3:e7:99:df:0b:94:
                    a5:8b:7d:c0:5a:aa:89:2b:d7:ee:55:98:d8:70:cc:
                    08:ab:73:85:3b:68:9f:b7:8e:ca:8c:4a:10:18:b6:
                    8f:ad:49:95:2c:64:15:ba:90:73:ea:27:9b:50:b4:
                    a7:b5:c3:c6:1b:5d:11:3f:b8:2d:2c:32:5c:07:73:
                    d7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:76:6F:70:36:2C:92:B3:62:37:83:5B:74:73:E5:B5:89:CA:2C:A1
            X509v3 Authority Key Identifier:
                keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cf:dc:4a:5f:3f:66:de:ad:02:fe:47:d4:b8:a5:9d:bb:f0:
         a2:0d:ba:63:a0:09:fa:44:89:03:98:9c:3a:a8:12:d6:a3:ad:
         68:ca:d0:59:c5:42:29:f9:a5:95:d3:3b:4f:53:27:ca:ec:e4:
         06:cd:0d:53:65:09:c8:b3:aa:7d:aa:fb:84:c4:fa:5c:fc:c9:
         e5:ba:69:3e:d4:4e:8f:b0:35:35:77:3c:91:80:3b:92:7f:31:
         a4:7d:8e:96:d4:e5:f9:2f:e7:c7:e8:ee:a5:c4:56:45:bf:17:
         2e:3b:40:d8:cd:cf:22:3d:c9:5a:66:79:38:91:a5:5d:0e:e2:
         6e:12:fe:8c:6d:be:92:03:a5:51:2a:4e:47:c0:5e:af:be:35:
         2b:de:df:60:eb:21:64:ce:ac:54:82:8a:7c:6c:9c:2e:88:22:
         f0:d9:c2:0b:78:6f:fc:ab:1f:5f:ea:92:d1:c4:14:95:5a:88:
         56:84:8d:c5:b1:3a:79:48:b2:5d:61:70:f3:94:74:59:2f:54:
         c7:99:24:b4:13:08:24:6e:ef:5b:e1:e2:9a:d2:df:b2:9c:33:
         a5:c2:ba:09:57:1c:b1:e3:9c:fa:dd:f5:8c:93:4f:90:96:7f:
         3e:3c:74:27:f8:e8:96:ce:e2:b3:e9:0c:ab:41:90:43:4f:b5:
         80:97:81:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSBxBimuyKVPVgxP9cUjvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTA1M2RmZTc3MTJlZTYzZGJmZjY0MGZhZTA3MzA4ZDY2
Y2U3NDgwHhcNMjQxMTIyMDQwMDE0WhcNMjQxMTIzMDQwMDE0WjAzMTEwLwYDVQQD
EyhjMDc2NmY3MDM2MmM5MmIzNjIzNzgzNWI3NDczZTViNTg5Y2EyY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKR/1la2eZ24bQJboraDIf14g1dy
+ex9nQ6odAa4qGfbdyITADiknDwjGCokqaorLEeDJMS57PfiPSRQD0SRLOj6VJ7d
399CK6495DIBEaCiYX21+7/2iBM4/LunAY/BuX+C3cFGDqTLhC+o+kFffUsJDJjc
/xEOy84US/0utHjUjfFqNBScvB/kgI6DmU8IyCROysVVEPzhjF4vGwdLtcKANWuT
oNdNKuOakIohQ1bP/iqeAfsjUCbdiluz55nfC5Sli33AWqqJK9fuVZjYcMwIq3OF
O2ift47KjEoQGLaPrUmVLGQVupBz6iebULSntcPGG10RP7gtLDJcB3PXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB2b3A2LJKzYjeDW3Rz5bWJyiyhMB8GA1UdIwQY
MBaAFFygU9/ncS7mPb/2QPrgcwjWbOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmIt
ODBjM2VhNGZkMDAwLzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmItODBjM2VhNGZkMDAw
LzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASM/cSl8/
Zt6tAv5H1Lilnbvwog26Y6AJ+kSJA5icOqgS1qOtaMrQWcVCKfmlldM7T1Mnyuzk
Bs0NU2UJyLOqfar7hMT6XPzJ5bppPtROj7A1NXc8kYA7kn8xpH2OltTl+S/nx+ju
pcRWRb8XLjtA2M3PIj3JWmZ5OJGlXQ7ibhL+jG2+kgOlUSpOR8Ber741K97fYOsh
ZM6sVIKKfGycLogi8NnCC3hv/KsfX+qS0cQUlVqIVoSNxbE6eUiyXWFw85R0WS9U
x5kktBMIJG7vW+HimtLfspwzpcK6CVccseOc+t31jJNPkJZ/Pjx0J/jols7is+kM
q0GQQ0+1gJeBuQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:29 2024 by rpki-client on console-fra.rpki-client.org