Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File:                     XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier:          VoBC/Jpgm8ATU0xcOWli/H1lW9R5IC73gZ/lN1v45nI=
Subject key identifier:   36:C0:5B:C9:9C:A8:7C:F8:0B:48:B5:14:16:C9:FE:E3:89:2D:A4:10
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer:       /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial:       019350BDD5F606C40D7CC352B8449E9D7C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number:          0CE5
Signing time:             Thu 21 Nov 2024 22:00:38 +0000
Manifest this update:     Thu 21 Nov 2024 22:00:38 +0000
Manifest next update:     Fri 22 Nov 2024 22:00:38 +0000
Files and hashes:         1: 4WL3iDNHSh-yBr7VybLOCKHER2g.roa (hash: aUIcNQ50drdtfo1K26QP9tjWp9DL6fo3oDL00UtQMMY=)
                          2: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: KBgI4h5csC2KBtj/9y0EXNZn7SsPbXCIH6IVb1E2AFk=)
                          3: _kz3z_VRhm7dyVtAzGoJc4SUA3U.roa (hash: 8GICgT8R2xZQkDD/ZnywihX7XVgfwF4tqY+MPTv9hAw=)
                          4: fbxHFLin9ksvuy9jq9u7YbAgONQ.roa (hash: 2eJ3K+Dv78yWSXEGfUhEQWA1O4qDaEdQiQdBYmRACHI=)
                          5: xPPX_HWiMgJuIFCBIk7PWl2V66U.roa (hash: Go3yOS0sUjC/iX2iAiLDnX93liPcNHV+lLlRFO0f6+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bd:d5:f6:06:c4:0d:7c:c3:52:b8:44:9e:9d:7c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
        Validity
            Not Before: Nov 21 22:00:38 2024 GMT
            Not After : Nov 22 22:00:38 2024 GMT
        Subject: CN=36c05bc99ca87cf80b48b51416c9fee3892da410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:0d:95:ad:f4:5d:81:18:fa:43:9e:dc:af:
                    34:04:c4:b9:b2:de:e6:77:2f:63:4a:9d:e1:24:d5:
                    f7:35:0d:7c:86:3e:84:04:2a:cd:ec:1e:45:34:95:
                    bd:bf:0e:8d:e2:9d:c4:2f:fe:b4:34:78:39:f4:12:
                    66:d0:af:02:c8:19:bd:0a:1d:d2:92:1e:f5:f1:ad:
                    62:e6:45:ef:89:59:4f:93:7c:5b:59:cc:46:33:2a:
                    7c:6c:5e:1e:72:2d:48:3e:ac:18:f0:f8:fc:22:33:
                    b3:3e:6d:6d:02:f3:8f:97:f5:1e:85:75:94:df:3c:
                    01:f7:b7:a3:3c:c7:86:96:5f:3c:33:3c:20:86:10:
                    05:42:2a:82:42:ed:59:72:fc:1c:2c:7d:f5:50:63:
                    63:5d:96:2f:83:fe:54:43:f3:34:1b:06:02:24:4d:
                    35:ff:a0:f5:d8:d3:ae:bb:8a:66:71:0a:9e:01:dc:
                    aa:cc:7c:54:97:0a:9d:e1:0a:2d:11:07:2f:9e:62:
                    a2:81:8b:a2:cd:fd:47:f3:56:d5:21:2f:62:01:cb:
                    ed:c2:71:25:6a:eb:6b:a5:c5:d5:05:ca:5a:da:89:
                    9e:ec:2c:1f:e2:05:12:f6:9e:31:77:2f:75:4e:7f:
                    90:fe:e7:58:5a:8a:85:43:7a:43:de:65:49:53:44:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:5B:C9:9C:A8:7C:F8:0B:48:B5:14:16:C9:FE:E3:89:2D:A4:10
            X509v3 Authority Key Identifier:
                keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:eb:c1:5b:a4:7b:f0:0a:ee:db:a0:ae:bc:e8:d5:18:74:00:
         66:46:e6:22:bc:83:80:93:86:d6:3c:c3:00:c8:3a:51:4b:9c:
         d9:f0:ef:61:c3:c2:32:84:7e:ae:75:6a:fd:b2:ec:f6:ba:9b:
         22:ea:02:0c:71:33:3b:68:76:56:1c:58:d5:d6:ee:a1:ea:4c:
         14:3c:7f:a9:4e:e9:12:48:59:87:cf:07:77:18:dd:9d:6a:aa:
         03:63:ca:66:59:d4:2f:c0:d3:5a:5b:26:18:24:b9:09:53:af:
         80:1d:af:68:a4:b6:b2:18:46:58:62:9b:cc:79:3a:87:63:bd:
         ef:47:39:29:a9:bf:28:a4:0e:54:ae:9f:f5:84:35:0d:6c:4c:
         21:fe:ca:fd:8a:f6:54:62:eb:0b:8a:df:62:e5:3a:d0:9c:f0:
         08:c6:35:99:d2:34:fe:27:d6:06:19:41:2a:f9:40:39:ca:8e:
         80:0c:ca:83:8e:be:23:e4:0a:e9:f6:b2:ca:78:56:98:cb:c3:
         32:a2:b6:61:93:59:14:48:72:62:78:47:b6:9a:2f:f1:8b:0f:
         22:51:55:6c:93:7c:ec:f7:dc:c3:5c:58:11:f9:25:d3:db:73:
         2d:a0:21:10:29:9e:b7:3b:af:b5:c9:18:0e:0c:ce:6f:ca:06:
         d6:83:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:39:06 2024 by rpki-client on console-fra.rpki-client.org