Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File:                     xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier:          6l35jxR/a1LLHk84QW+7iWEruegNT+vZQN400SMK7r0=
Subject key identifier:   A9:EF:2D:5B:87:9B:4F:F0:81:22:64:C1:6F:B3:60:1F:6E:B1:4E:C0
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer:       /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial:       01935953108F7FEC56ADFD8E62924FEB8376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 14:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:36 +0000
Files and hashes:         1: 3asJo343y8LGvp1pLIBe5yKd6E4.roa (hash: P2KkVYb/crTTyktoFoAqyjxbzjRr3DCqPqbD3rBDK2Q=)
                          2: i0gzSmWPuZh-Z40-E7aUBRExmKM.roa (hash: Y1bx0tbrbuUEkRKQqg5HDXbBSo712JGBMgIRgZyQI0U=)
                          3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: Q0ntKVrtm1WGRsAUIuGbFRhep1QHUEPOQUtj+O89gQk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:10:8f:7f:ec:56:ad:fd:8e:62:92:4f:eb:83:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
        Validity
            Not Before: Nov 23 14:00:36 2024 GMT
            Not After : Nov 24 14:00:36 2024 GMT
        Subject: CN=a9ef2d5b879b4ff0812264c16fb3601f6eb14ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:26:07:98:a0:a5:57:06:34:48:49:f9:94:
                    14:71:23:6f:30:d3:0a:ea:90:92:9c:2a:e6:af:eb:
                    a6:10:88:2f:7d:e0:ae:37:d1:9c:3b:fa:39:aa:17:
                    0c:a8:f3:5b:5e:d5:7c:e7:07:ab:b6:db:43:43:00:
                    e3:8d:06:8e:b0:24:5a:ef:85:db:ca:c4:e5:6e:a2:
                    45:1c:c4:d4:1d:da:4b:2c:6a:0c:55:92:c6:56:26:
                    76:33:ee:6d:d0:58:3c:14:a8:38:54:d9:13:9d:d5:
                    07:b4:b8:40:ee:f1:7f:ab:cd:77:d3:24:1a:3a:cf:
                    e1:45:55:8f:7b:aa:5c:73:10:60:6a:6d:a1:5d:45:
                    54:49:2a:ac:98:99:a1:9c:82:85:23:bd:9f:fc:00:
                    e0:55:07:98:20:08:79:f3:df:e9:ef:f3:4b:d6:be:
                    52:1c:4e:38:f7:f8:f6:ad:d4:7b:d4:d2:f7:0d:fc:
                    3b:31:4d:d2:91:61:6c:a8:2a:a0:f7:b8:da:de:6a:
                    5c:cc:a2:77:a7:24:d0:2f:2e:f5:cc:d3:f5:8c:d4:
                    c7:7d:a4:84:59:78:c1:6c:ab:a8:46:91:ae:fa:8c:
                    a9:4b:ac:13:e5:e0:dd:47:2e:05:e5:bb:2e:83:9d:
                    e7:df:67:1e:c8:7e:29:5a:c8:21:34:e6:e0:59:d4:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EF:2D:5B:87:9B:4F:F0:81:22:64:C1:6F:B3:60:1F:6E:B1:4E:C0
            X509v3 Authority Key Identifier:
                keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:cd:59:d9:39:46:2b:7c:3d:8f:17:1a:ab:05:ea:aa:59:
         a0:98:20:e7:6d:52:a6:09:9d:0f:ff:47:e5:43:d4:c8:6c:18:
         3e:72:8a:fd:dc:15:e0:9b:2c:eb:87:6e:13:4f:ce:fe:0a:14:
         25:3a:90:a6:34:96:79:ec:2e:84:7f:11:ce:27:8f:64:78:9e:
         0e:b1:86:eb:40:63:a4:1f:2b:c9:e3:87:f5:01:83:83:03:9b:
         07:65:ac:1a:d4:57:79:32:3d:e0:38:a6:ca:d5:b0:3c:1e:ee:
         eb:60:3f:88:85:d6:f3:a0:dc:e2:a5:32:a2:2c:e8:2d:42:8c:
         8f:51:d7:98:5a:92:de:29:9a:69:05:01:79:8f:7c:7d:10:da:
         af:26:12:9a:79:57:b4:c1:c5:80:bb:10:61:93:cf:4b:8b:64:
         fe:f5:37:e7:98:c8:b7:c3:7d:b3:a3:12:1a:18:67:d4:19:25:
         9e:27:29:eb:fd:92:ab:a4:af:e3:97:58:90:22:e3:cd:eb:aa:
         6e:76:b3:cf:cc:32:af:6b:1a:09:84:af:a3:ed:74:c3:3b:47:
         8d:f6:13:51:20:72:ed:f5:ef:30:7e:6c:87:31:ca:f5:a8:c8:
         3f:fa:8b:87:5e:c4:ce:6c:93:91:ca:4c:d1:3f:b1:9a:69:27:
         a8:de:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:40 2024 by rpki-client on console-fra.rpki-client.org