Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          gvPbG3qyG2fIdH3TVY91J9asiFg+Vu2WgkO9XRftSJg=
Subject key identifier:   03:58:2C:C7:C0:22:21:F4:79:0F:BA:BE:77:60:46:8B:2F:D7:84:79
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       01923A38C46115BB5FB2CAAFC35A71C2DEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          0AA6
Signing time:             Sat 28 Sep 2024 20:00:51 +0000
Manifest this update:     Sat 28 Sep 2024 20:00:51 +0000
Manifest next update:     Sun 29 Sep 2024 20:00:51 +0000
Files and hashes:         1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: agaHJXpO0GnGooT6qklseGDPpb+jQGB6O6nknApkNiI=)
                          2: lI69GbRkaPtLjAXvYDryLHilHVY.roa (hash: wurkX2WgkSI7IlnqPTwSEbjr/BypOIG6p9LFO6sI8XY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:38:c4:61:15:bb:5f:b2:ca:af:c3:5a:71:c2:de:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Sep 28 20:00:51 2024 GMT
            Not After : Sep 29 20:00:51 2024 GMT
        Subject: CN=03582cc7c02221f4790fbabe7760468b2fd78479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:f2:69:ac:fe:f3:ac:82:6c:9d:f1:61:7b:
                    2c:d1:10:e3:b5:4a:c0:a9:02:75:13:87:9e:62:f0:
                    37:38:78:8a:90:c7:b1:d2:51:6f:7c:1c:8b:44:e0:
                    fa:10:c5:d7:61:5f:ac:47:89:07:1d:ba:b3:a9:74:
                    29:72:58:9f:13:43:d3:4e:47:92:e8:94:f7:21:fe:
                    91:37:4f:8b:79:8a:74:bc:f4:df:00:dc:fd:8a:3e:
                    f8:86:07:52:b5:e9:6a:74:fc:46:fb:38:ce:56:1b:
                    28:9d:3a:09:c0:02:0a:2e:66:5b:59:8f:d4:03:ec:
                    25:e0:f9:fa:25:7d:90:02:ca:fc:4c:d1:0a:96:8b:
                    d3:7b:e8:aa:62:9a:3e:2b:8c:12:56:28:04:72:e1:
                    13:df:6c:b1:5d:80:7e:80:65:eb:a5:45:03:69:c8:
                    20:71:f0:a0:aa:83:c8:00:e6:46:de:27:cd:38:0a:
                    23:23:a4:a0:20:53:2a:40:e9:2c:9c:cb:17:9b:bd:
                    e4:81:f9:07:8c:97:85:e5:36:55:5d:2a:06:dd:c2:
                    0a:f7:91:92:34:ac:74:a6:e7:0d:01:9f:a4:2e:eb:
                    dc:7c:1b:ac:89:22:7a:89:47:22:78:85:c3:34:a3:
                    87:7d:cd:53:ba:4f:b9:9e:b6:27:84:b4:76:6d:c2:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:58:2C:C7:C0:22:21:F4:79:0F:BA:BE:77:60:46:8B:2F:D7:84:79
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:44:b4:10:18:e1:9c:30:10:d2:57:f5:49:f7:68:d9:af:77:
         8d:3d:87:36:65:5e:c8:43:f6:fc:7e:27:a8:99:f8:08:55:e0:
         c7:4a:ba:2c:ce:5c:ac:4e:0e:39:01:dd:2b:ed:40:0f:5e:c4:
         54:4f:e3:b8:a5:00:e7:16:94:85:63:b7:3c:1e:9f:5d:d1:59:
         66:e4:90:34:7e:c1:49:9e:62:16:5a:84:8c:22:28:89:14:06:
         30:52:ae:dc:14:ef:33:af:9d:11:4e:eb:5f:72:94:98:99:16:
         4e:00:8c:10:90:f1:a6:7a:b5:7c:e6:4d:d0:34:7e:5b:9f:93:
         33:6c:a0:a1:ed:87:a6:3e:8f:b5:d5:d6:41:e4:50:3d:cc:3f:
         4c:53:d6:7b:3d:8f:f4:f2:c4:17:48:fd:be:c4:17:9e:6d:bc:
         58:23:df:f7:fa:9a:8e:f8:54:dd:4e:12:b1:df:3f:25:0d:4b:
         58:84:27:37:2f:e0:9d:46:78:70:87:b6:e1:c0:71:fb:aa:d5:
         1a:d3:95:34:2d:a0:0c:1b:fa:27:63:6e:dc:30:d6:c8:27:0c:
         c9:2b:7a:23:63:b8:b2:ab:82:9d:88:13:ad:ae:1e:9f:9a:8c:
         db:a9:ff:e7:d2:20:a9:68:6c:b2:d9:90:62:f4:65:ab:be:30:
         3a:14:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:04:46 2024 by rpki-client on console-ams.rpki-client.org