Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File:                     XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier:          RXTjcSTMu1N+MP68i+1lvUAWFuL2xlKELdUcgjWqwrc=
Subject key identifier:   27:3C:F1:A5:63:92:16:6D:2D:30:3C:11:4E:2F:FD:D7:4D:62:27:27
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer:       /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial:       019368FD029EDFAA66B012F53E18FE100C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number:          0644
Signing time:             Tue 26 Nov 2024 15:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:31 +0000
Files and hashes:         1: B8y1kCwpGiLQEvaVWkqHENau-Sc.roa (hash: B4in8Xzl6a4AQaFy6gNV/dVcz09nHn4UiMZqVplrac8=)
                          2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: 660cp7Se0xlfUH3l5gBj/aUQ6L0gz/HZ4Bicw56lqRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fd:02:9e:df:aa:66:b0:12:f5:3e:18:fe:10:0c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
        Validity
            Not Before: Nov 26 15:00:31 2024 GMT
            Not After : Nov 27 15:00:31 2024 GMT
        Subject: CN=273cf1a56392166d2d303c114e2ffdd74d622727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:eb:17:48:fa:30:69:ff:f6:36:68:27:ea:
                    45:fd:f9:d1:5d:f6:73:54:3f:9d:fb:a4:41:15:36:
                    e2:d1:37:f8:94:30:fb:38:e1:e8:64:5d:a2:eb:76:
                    4e:a6:dc:11:fb:3c:76:07:a3:b9:61:97:83:3a:45:
                    e8:0c:22:38:80:b8:4b:32:3b:d2:cc:91:fd:02:4c:
                    53:ec:bf:6b:20:56:b0:e1:55:3f:51:ef:e5:77:53:
                    cf:1a:c7:d7:40:9f:92:21:10:0d:bb:0b:80:c9:01:
                    96:b1:b1:9b:e8:bf:f2:0c:8e:a0:0a:43:1a:2f:28:
                    a7:98:35:dd:7e:03:c3:46:66:ec:bc:b7:1d:99:13:
                    64:2b:a2:a0:29:2c:45:d7:72:95:21:23:f6:33:94:
                    cd:5e:98:17:cb:0b:98:0b:2c:20:fd:17:ac:87:89:
                    5f:98:9e:64:19:57:20:c0:a5:e8:d3:67:94:85:a9:
                    aa:d3:dc:9c:ff:68:63:95:32:c2:09:5d:2c:1e:9b:
                    71:01:3f:58:0c:a1:ff:0e:7d:7c:d9:f1:ea:74:39:
                    45:95:d2:e3:8a:ed:f2:bd:53:43:c3:67:28:66:ae:
                    a7:03:07:90:a2:5f:bc:b1:3e:92:f6:b1:14:f9:9f:
                    8f:8e:21:45:81:52:9d:05:6a:7b:f8:f0:f2:56:98:
                    e2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3C:F1:A5:63:92:16:6D:2D:30:3C:11:4E:2F:FD:D7:4D:62:27:27
            X509v3 Authority Key Identifier:
                keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1a:5c:7f:e9:0f:cb:4c:7b:15:31:05:52:4f:e0:7e:4f:a2:
         0f:f4:a9:c3:07:84:ad:53:29:b3:92:83:7c:09:5a:02:49:7f:
         7b:b0:77:88:42:c1:dc:8d:41:62:98:88:e7:07:d0:86:7b:d2:
         71:38:6d:91:73:c1:e2:17:8d:62:a4:c8:17:ed:ca:75:cf:c9:
         71:06:cb:6e:20:ee:c6:f5:b7:24:dd:6d:ab:f5:66:d4:e5:e2:
         c4:e1:72:2a:dc:06:7c:4d:7a:76:8c:be:ef:2a:ef:df:e3:a8:
         aa:8f:73:4d:f8:eb:a0:18:9e:3f:8f:7f:8a:ee:5e:e3:05:3e:
         f6:29:c0:41:de:08:f5:05:6d:59:45:b4:d6:1d:07:4f:ac:64:
         01:d2:05:e7:12:be:35:54:0b:ce:d9:de:73:f6:ec:ff:15:a1:
         98:ec:a6:b1:c7:6e:92:86:27:b0:ae:59:87:77:3a:d4:e0:f7:
         df:88:43:c7:33:25:12:3a:33:4c:13:10:6c:28:35:fa:a4:a2:
         88:cf:8b:11:63:10:34:c4:a4:a3:54:aa:a3:e8:79:56:e6:e6:
         7e:b2:cd:8a:59:4c:04:85:84:c0:04:7c:44:09:14:b7:92:3f:
         84:25:2c:b9:c1:65:c3:73:2d:ed:22:82:c9:13:41:5e:fa:5c:
         1f:7c:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:55:47 2024 by rpki-client on console-fra.rpki-client.org