Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
File:                     XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft (raw, json)
Hash identifier:          +mcY1E/UgLtMVm0FZ3o1elkYTyNeuRd0vC0EVsA5q/Y=
Subject key identifier:   96:E8:E0:0C:F0:2E:FC:0B:76:EB:0E:E9:CC:04:AE:D4:7D:67:41:D2
Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
Certificate issuer:       /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Certificate serial:       019368C610F7542A3164621CEA90AE914AE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
Manifest number:          12E6
Signing time:             Tue 26 Nov 2024 14:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:31 +0000
Files and hashes:         1: XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl (hash: BCkDpkuYOWPqFvZYEnGffR/92H5qe+AF4h/yWt3dB/I=)
                          2: lT-_B0i6MbIEFKuIF309sw_OIA4.roa (hash: covV7acXAFyh94WgnlVejQvJwTjj7PrcJiUHTWZeIvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:10:f7:54:2a:31:64:62:1c:ea:90:ae:91:4a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
        Validity
            Not Before: Nov 26 14:00:31 2024 GMT
            Not After : Nov 27 14:00:31 2024 GMT
        Subject: CN=96e8e00cf02efc0b76eb0ee9cc04aed47d6741d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:cd:8c:a0:a0:d1:69:f5:9f:29:8b:81:52:
                    28:79:d0:cf:4f:26:68:66:ed:ac:2f:a0:b3:2c:ab:
                    d6:c0:db:73:03:38:60:43:ae:ed:3e:dc:4f:e4:5a:
                    1f:5e:20:6d:9f:9f:84:76:6b:f4:9b:f0:75:5e:d4:
                    de:c0:ba:21:b3:f5:d1:97:67:81:8f:7a:12:9d:65:
                    d4:89:80:c7:8d:ad:e4:a0:10:fd:2d:16:1d:35:7a:
                    27:0e:cf:41:9f:1f:72:2c:73:17:a9:f9:b4:1e:b6:
                    cd:d1:a4:19:c4:29:39:40:a2:63:e6:8a:5b:9c:52:
                    9c:9f:f7:47:c6:d4:a6:1a:f2:d8:d8:a1:f6:bd:39:
                    fb:bb:1d:bb:d9:50:74:a1:06:88:92:eb:79:34:e7:
                    ec:6e:62:b8:9a:16:7c:b8:d8:e6:9d:c6:c8:02:2c:
                    1c:92:e4:57:4c:24:b0:d3:8b:1e:d1:70:14:8c:d0:
                    84:88:2d:ee:cf:51:4c:1d:19:f8:db:09:96:25:be:
                    b2:40:bd:65:74:6a:0c:6d:47:98:1a:b5:94:23:fe:
                    d7:6f:00:3b:92:f5:5d:cf:13:72:28:27:21:40:dd:
                    eb:85:7f:61:70:b1:55:8e:3d:9b:06:81:2b:49:66:
                    56:1a:ed:f4:d5:8e:78:b6:5d:3a:1d:8a:a1:62:6c:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E8:E0:0C:F0:2E:FC:0B:76:EB:0E:E9:CC:04:AE:D4:7D:67:41:D2
            X509v3 Authority Key Identifier:
                keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:62:a0:78:9b:a4:08:b7:20:66:3b:3f:23:7b:e5:39:c9:d6:
         61:3a:7b:a1:fb:6c:cf:a2:91:1b:9a:76:95:8b:5b:cb:51:ee:
         bc:a4:35:64:76:92:80:b3:29:d1:86:d0:79:25:b1:db:98:50:
         a5:8a:8b:19:0a:4a:73:54:58:7f:9e:ba:91:38:1c:30:fb:b6:
         fd:13:e4:fb:5a:7c:e6:b9:8a:8d:5d:c9:1f:b4:33:b6:b2:08:
         0c:f9:73:27:6b:1c:7f:7d:6f:71:44:a3:c1:2c:a2:d1:56:68:
         5f:ff:61:d4:07:97:c4:26:da:03:21:58:79:86:04:15:8d:3e:
         72:be:09:28:db:2a:bd:97:d3:48:60:9e:1a:22:20:3c:56:25:
         e4:8c:78:9f:42:b7:25:8b:c9:7d:09:04:d8:01:eb:f7:80:f2:
         7f:4e:62:a2:32:1d:30:3b:0b:0a:df:3d:8c:80:c2:24:dc:06:
         d4:cb:8b:a9:3e:7d:94:4c:a4:f3:b7:0f:cf:c3:38:44:08:c0:
         b6:c4:8d:f8:ba:0f:9a:39:84:91:63:9e:0f:37:01:e3:9c:f1:
         3d:db:d3:fd:b0:aa:12:7d:83:2c:53:80:9f:db:92:b4:07:87:
         7f:b2:62:08:4a:0a:28:c0:37:a7:bd:c2:eb:9a:16:73:8c:25:
         72:23:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:40 2024 by rpki-client on console-ams.rpki-client.org