Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          B8Tw6CKaCxYKtRxTK7hVCj7Ad66bnOPQp2b9HutARL8=
Subject key identifier:   47:CF:DD:F8:F9:B8:0E:F3:58:96:0F:C7:3D:3C:D2:DD:2A:3B:6D:21
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       0193523E10586A752F98CB52AF9B9C69CF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          0B37
Signing time:             Fri 22 Nov 2024 05:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:19 +0000
Files and hashes:         1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: EZEOX550MCpu0xcJYl+P7dUwH/D8cscCRT1PeBWk2IU=)
                          2: lI69GbRkaPtLjAXvYDryLHilHVY.roa (hash: wurkX2WgkSI7IlnqPTwSEbjr/BypOIG6p9LFO6sI8XY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:10:58:6a:75:2f:98:cb:52:af:9b:9c:69:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Nov 22 05:00:19 2024 GMT
            Not After : Nov 23 05:00:19 2024 GMT
        Subject: CN=47cfddf8f9b80ef358960fc73d3cd2dd2a3b6d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:79:5c:97:ee:a3:94:9d:f2:4f:5a:98:ca:
                    cc:c7:8a:63:e0:a5:f6:5e:36:7c:eb:c6:08:61:80:
                    5e:b5:83:41:ee:14:f9:cc:99:38:e6:5b:8e:6f:1d:
                    78:57:8e:8f:b4:7b:7f:0d:43:60:7e:87:7c:cf:1b:
                    13:f8:ee:2e:65:56:4b:15:91:5b:7f:0d:5c:71:09:
                    fe:54:89:d4:7a:9a:37:8b:ac:9e:25:56:7f:19:b3:
                    eb:ac:1f:60:91:87:bc:81:10:9c:a4:82:e1:f0:5d:
                    ff:f9:93:c7:34:b6:85:fb:87:5f:26:37:0b:5e:74:
                    a1:2b:62:36:0f:07:c2:73:06:4f:80:2d:c8:30:d5:
                    ee:42:0e:9d:53:7a:46:ae:3a:ff:fd:f5:ce:0a:14:
                    4d:16:e2:61:b0:3e:63:4a:22:ae:c7:6a:78:83:45:
                    63:fc:a8:f4:a1:b5:82:b0:bc:7d:af:40:c9:3b:a4:
                    fd:d5:76:b9:c1:b5:2a:2e:9f:68:06:9d:e2:44:70:
                    4d:39:65:c1:5f:2c:cc:82:30:7f:b7:54:6e:73:22:
                    4a:b0:77:86:e3:0d:17:3d:79:e1:dc:1c:42:43:43:
                    40:aa:85:3b:1f:fc:2a:1e:67:66:8c:a2:86:0d:29:
                    aa:e4:d6:74:d2:1e:16:f5:4c:56:5f:28:79:f0:77:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CF:DD:F8:F9:B8:0E:F3:58:96:0F:C7:3D:3C:D2:DD:2A:3B:6D:21
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:96:36:cd:64:b1:25:e0:39:f8:7b:f9:52:d4:67:eb:ab:0a:
         8f:b5:dd:17:f5:4b:80:4c:bb:d9:cf:23:ea:89:b8:c5:de:38:
         b7:d9:db:cb:53:1e:4f:a3:49:85:da:2e:6c:33:ea:bf:50:f2:
         db:32:02:7b:2a:59:03:54:cf:19:48:57:39:e7:d8:35:80:95:
         9f:dc:87:78:30:6c:3c:a9:c9:d7:b7:26:48:43:f3:91:75:c1:
         68:b3:13:2d:b4:af:c0:d7:c2:42:0c:ba:a4:6e:a1:16:fa:c4:
         db:66:f9:e7:94:36:f0:5d:0e:f0:c0:da:e8:df:39:e9:bb:80:
         83:ff:b6:20:cf:29:8c:7b:59:f6:39:b3:d2:43:3f:35:09:86:
         55:1c:6b:ba:e7:85:12:87:56:1f:a5:5b:cb:4b:c4:44:a8:10:
         97:3b:c8:62:0d:cd:c5:a2:38:b0:52:c5:db:b5:00:90:4a:ce:
         c4:4b:2f:32:a2:46:07:6b:2f:34:74:5e:13:e3:6b:99:2b:96:
         d5:43:54:b4:9d:79:e5:65:c0:ef:c1:32:cc:d5:d9:43:91:43:
         70:73:fb:02:a1:3a:f8:a2:9e:f4:0e:a8:a7:5a:8d:ac:ab:0e:
         59:fe:59:52:8a:55:d7:24:e9:79:78:8f:b0:71:23:04:b2:c8:
         86:66:7f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:18 2024 by rpki-client on console-ams.rpki-client.org