Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File:                     XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier:          rRfx9JEnK9cZNwFHkrfBuiC9eRH8zZIX+UhkC/bJMwY=
Subject key identifier:   34:45:DD:73:67:D0:1E:12:73:60:FA:0B:E1:C6:2A:88:4C:A0:98:5C
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer:       /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial:       0193519935C1D5F130FE00C1BDCCF81FBDC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number:          1383
Signing time:             Fri 22 Nov 2024 02:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:15 +0000
Files and hashes:         1: 0kUd1EeUIjBmsa074USfckpjA0o.roa (hash: 56IlBV3XGfqD8ZoBRbBBulCi5K13GRbvz8YOwk8ZC4k=)
                          2: 1-2nkQy8xVvyeeTSWaf-YiBW5lrI.roa (hash: a1ImM42LpM8DiL7ktEQ9/xXGrlO1MXyE3BwfxKPy2k0=)
                          3: 1-tIKLppcC_x50ywEog_wMS6OXdY.roa (hash: aBlzLCkx4goimQh4gnJFH4o0RYnD0T0wyvWh/azyG4c=)
                          4: 6WzV27VQOT_W3DI6w__OOUdX9NM.roa (hash: eeqPRoCbSyiphNpHuze8Ndb3BWGt8ITomgmYIiQv/Bg=)
                          5: GmafaugibLTFYWAsa4Wq47m2A9E.roa (hash: H5+d/q5RSHlWEyGVJDY5pTTrrOdAhhc7MGsGK3AK4hg=)
                          6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: 1MlUUj9WnzbR6h1n8dpQyQ1gM8vm6RSdWQezZ3AwSko=)
                          7: ZSrioKfzjiikRJ1Qnzs_I9-X_vQ.roa (hash: ZicTSuhgS/bGFB7uxfWTSfXW4KfIQN9k+zMf9EMMjgo=)
                          8: spBm7jvxg35uuEvkSoplPgnK4jA.roa (hash: LpQkAbNV5ucU8pjyeAWRHKwSIkJ/xw+A0FuJDb+tl3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:35:c1:d5:f1:30:fe:00:c1:bd:cc:f8:1f:bd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
        Validity
            Not Before: Nov 22 02:00:15 2024 GMT
            Not After : Nov 23 02:00:15 2024 GMT
        Subject: CN=3445dd7367d01e127360fa0be1c62a884ca0985c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:b7:ea:e9:e0:cd:74:92:97:04:88:c8:b2:
                    65:81:7c:7f:5d:2d:42:a9:f3:9a:3d:74:5e:2a:7d:
                    87:22:f8:08:67:0a:68:56:2a:dd:50:05:fb:07:6f:
                    36:6e:e8:32:af:fb:24:25:d3:cd:b7:2e:1a:09:13:
                    50:a5:f5:9d:22:61:a7:fb:63:b9:c6:02:7d:84:cc:
                    3c:2a:0d:bc:39:6f:63:89:72:0a:64:fe:93:f7:30:
                    07:57:76:a5:0d:46:29:c4:87:cd:d3:95:e9:5f:1d:
                    2b:f5:5c:5c:f1:52:f3:fc:d4:fb:5d:53:6d:58:3e:
                    d5:8f:f2:0d:55:30:30:74:03:d3:9f:84:18:a9:89:
                    e7:46:4c:19:06:d4:41:3d:37:9b:e5:70:24:0d:2b:
                    aa:86:33:95:4c:f2:b0:aa:7b:b4:71:0b:ae:f7:50:
                    71:a4:1b:b4:32:28:be:9c:66:40:08:3e:3c:3f:5c:
                    2f:83:10:00:8b:81:86:4d:70:5f:75:61:f6:99:c4:
                    a6:c6:73:70:d7:77:35:20:d9:7c:96:70:bd:58:bc:
                    d5:6b:1c:e8:4f:19:58:6d:70:9a:1d:6d:0b:1f:f3:
                    c0:a9:a2:88:66:0c:95:5c:65:0e:ab:86:e2:07:29:
                    ae:a8:42:75:3b:2f:e6:1a:96:2a:4b:e9:8d:ea:3e:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:DD:73:67:D0:1E:12:73:60:FA:0B:E1:C6:2A:88:4C:A0:98:5C
            X509v3 Authority Key Identifier:
                keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:2a:52:88:62:19:46:f5:55:4b:29:d6:be:bd:f2:9a:de:
         63:c0:7a:65:59:08:4d:c3:d4:62:bb:eb:d4:3f:ff:82:07:18:
         b2:59:6f:df:4e:fb:ad:c0:30:f0:41:19:28:a1:2a:63:7c:fc:
         be:9c:ef:55:a9:23:22:69:94:de:55:ad:6f:78:6d:e7:40:79:
         94:2e:01:a2:f0:69:9e:cf:d2:60:b2:16:5d:0b:2b:71:44:b3:
         44:30:91:b8:ad:40:cd:37:93:21:59:b4:4e:ba:fd:53:85:12:
         03:57:0d:57:dc:26:7c:ba:57:f7:fd:83:39:c2:08:ca:3e:3a:
         8b:3f:d7:c1:2d:8c:9a:a9:ea:ab:6f:f5:28:d8:5a:dd:37:f7:
         97:87:05:6c:76:aa:25:3c:06:52:df:c3:d7:af:fe:19:91:67:
         15:6f:7b:b9:84:67:30:14:45:2e:2c:1c:0e:eb:40:4a:5a:d1:
         3a:c6:2c:3e:cb:b3:29:02:b7:5b:43:21:7f:46:32:be:fa:e1:
         8b:ea:35:8e:ed:1e:78:0d:35:89:f3:1f:7c:aa:c7:8b:2c:fb:
         3c:cf:b1:24:8c:e3:80:4d:41:b5:2c:78:66:87:bd:72:5a:d6:
         77:13:9f:fb:02:14:f3:8a:68:ce:16:3a:93:b4:cb:8d:52:ab:
         69:2f:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:10 2024 by rpki-client on console-ams.rpki-client.org