Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File:                     xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier:          piTOsn+toCxRUAnpBKHka04DX2fcW/1mqvqPH6aV1JQ=
Subject key identifier:   AD:88:FA:9F:62:19:3C:57:A2:26:E8:18:97:D3:F4:C5:94:28:1E:DD
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer:       /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial:       01935764BB5A731AFB6576185D3D2998FA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 05:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:39 +0000
Files and hashes:         1: X7kMx1kMRS-H2kcOkSFoUc_7enY.roa (hash: U3yCCUszVPVm9LM8wpsO2Pkkyp5Rr9rqKUKakYmvS/Y=)
                          2: u3neHGntDt95dz05wDP8ysoR2wQ.roa (hash: 4X0IWoouLLAosmMEAqakvpj6XHBAaZQoHM5TKd0N9y8=)
                          3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: UeQUafqPr8p405kXKvAKZjYjxtPBp49wL7nahhBB9N4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:bb:5a:73:1a:fb:65:76:18:5d:3d:29:98:fa:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
        Validity
            Not Before: Nov 23 05:00:39 2024 GMT
            Not After : Nov 24 05:00:39 2024 GMT
        Subject: CN=ad88fa9f62193c57a226e81897d3f4c594281edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:e2:66:25:05:cc:6a:eb:bd:e4:15:45:7c:
                    7a:30:c7:99:59:20:a1:a5:76:bd:9e:25:9a:2c:b1:
                    22:91:91:79:14:44:60:a9:d9:ee:b0:2d:6b:c0:01:
                    18:8e:bd:c4:62:cb:72:6b:10:06:f8:c3:c4:d1:07:
                    eb:7c:e8:24:b1:b3:7b:43:c4:97:8c:d7:e1:82:ac:
                    ba:88:78:f2:4a:a7:ab:7c:d2:be:67:1d:15:43:34:
                    de:d8:22:cf:51:9a:76:47:1c:fb:8a:82:ed:60:c8:
                    f1:60:50:1e:0a:05:27:69:3c:fa:78:85:25:0c:2f:
                    6b:9e:65:b9:86:dc:f0:5a:45:7e:de:ae:ac:31:30:
                    34:f2:f3:b0:e9:04:96:dc:7a:6e:48:6a:d5:0d:cb:
                    8d:e7:8e:0f:82:26:7b:82:7f:73:71:97:88:12:b0:
                    f4:96:2f:dc:c2:81:30:a9:b8:51:c7:8b:2b:d9:28:
                    ee:f7:b1:3d:ce:74:32:b3:02:cb:68:c0:ac:78:c7:
                    ea:94:ba:58:d2:62:4d:58:e1:d7:f6:fe:1c:f6:7d:
                    e2:3e:07:22:f1:e8:a6:3c:ee:52:6f:78:c1:2f:60:
                    4b:07:76:ed:59:3f:b7:69:56:57:3a:a9:8f:d0:4d:
                    ed:67:25:a4:75:97:90:86:22:9e:f5:78:9b:77:64:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:88:FA:9F:62:19:3C:57:A2:26:E8:18:97:D3:F4:C5:94:28:1E:DD
            X509v3 Authority Key Identifier:
                keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:e2:b6:12:8e:ae:50:98:e7:40:e7:87:ba:04:fc:e1:86:be:
         9f:ca:e2:50:ba:dc:bd:64:1d:34:0e:60:72:46:f1:4c:64:c6:
         46:94:fb:7d:70:79:26:34:ec:ce:4d:69:fd:24:1c:5a:24:02:
         22:a0:84:1a:61:36:5c:21:50:cd:6d:14:a8:49:1c:5d:67:b3:
         4b:de:df:55:77:0b:3c:27:5e:79:6b:ae:60:30:b0:68:6b:c8:
         5e:05:07:c6:6d:bc:64:23:a2:6d:c8:fe:fa:58:f3:88:9f:70:
         f3:8e:30:cc:aa:01:84:99:35:17:07:4e:96:a7:2c:c5:9b:a9:
         8e:21:39:59:6d:6c:4f:c1:fc:eb:d4:b8:a5:01:19:1e:de:28:
         0b:0b:3b:66:76:5f:4c:ca:1d:32:e8:04:0f:8a:23:23:be:24:
         67:40:f9:5d:a4:a3:60:0f:ce:89:15:62:cd:d7:f7:e2:c3:2e:
         09:0e:84:71:4e:70:34:81:5b:20:f1:42:d2:59:c1:e9:2d:6c:
         59:ba:a9:f0:f7:20:31:18:65:8d:bf:c1:80:09:2f:36:63:9a:
         87:20:2d:7a:a6:c6:72:29:34:9b:25:c5:03:76:03:45:62:74:
         dd:17:b4:a4:6f:fe:53:0f:f8:5d:84:05:c9:18:20:94:ec:31:
         0a:44:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:39 2024 by rpki-client on console-ams.rpki-client.org