Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File:                     xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier:          pTmoy8EZ8kdKNNzGj6PZHXP2Wd1vp33LpCy7g5EEVpw=
Subject key identifier:   38:A4:32:F5:49:85:EB:97:EB:66:2D:CC:CD:6F:69:65:E4:F0:2A:58
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer:       /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial:       01935878FB615452ACC3370847F14ACF96D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:02:23 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:23 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:23 +0000
Files and hashes:         1: ebIBj7VAD6AyvBAFMeLSXREMaZc.roa (hash: JJWuW6PlZMMbEQlRIFhHDnpRGaZyd62DVDJbl2Mfs6I=)
                          2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: 4fHdVy78pWbKDcJxhxZHun1AMS9ET+QtXiXpE3sOpOI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:fb:61:54:52:ac:c3:37:08:47:f1:4a:cf:96:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
        Validity
            Not Before: Nov 23 10:02:23 2024 GMT
            Not After : Nov 24 10:02:23 2024 GMT
        Subject: CN=38a432f54985eb97eb662dcccd6f6965e4f02a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:87:88:f3:02:c5:78:5e:03:08:6b:1b:bf:
                    d0:ee:52:7e:df:eb:82:7e:45:bd:32:ae:11:0a:f9:
                    0c:38:d9:ab:a1:f1:a0:55:4b:aa:20:cd:ff:22:1d:
                    de:33:3d:e3:22:80:66:08:a2:00:b1:f8:a9:fc:4e:
                    ba:e5:95:81:0b:7a:e5:c1:5b:91:de:70:9b:4d:bf:
                    a2:0d:c0:83:7d:95:be:e4:c2:ad:d4:2f:46:65:da:
                    c2:0a:45:b5:20:49:65:28:33:70:d1:f7:9f:27:0e:
                    f8:c6:f1:1a:e4:c1:d0:7a:28:2a:e8:92:27:00:ae:
                    27:9c:04:5f:16:00:67:b3:75:e3:92:aa:aa:02:b1:
                    94:70:86:69:a3:de:62:d2:8b:ff:2a:99:8a:4d:35:
                    7f:b4:de:70:7e:fa:04:38:50:35:aa:a1:6b:88:f8:
                    02:a0:ea:13:aa:69:65:49:22:34:d2:e4:6f:16:48:
                    87:cd:a2:d4:3b:76:00:bc:4f:a9:e0:b9:3e:7e:59:
                    3f:24:8b:ac:6f:ed:02:2f:7d:97:ed:8e:0e:9f:d2:
                    3c:38:99:17:38:eb:bb:6c:bd:4f:19:8f:05:aa:a4:
                    ad:d4:ba:a2:b6:2e:3e:4e:a3:1d:8e:9e:3d:52:0c:
                    50:56:37:e7:11:b8:06:fa:9f:2a:db:86:7c:57:28:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A4:32:F5:49:85:EB:97:EB:66:2D:CC:CD:6F:69:65:E4:F0:2A:58
            X509v3 Authority Key Identifier:
                keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:9a:e3:6e:d0:fb:b0:39:89:b7:ed:93:04:c3:0c:42:0c:
         69:1b:c3:8b:d9:41:55:83:c3:e3:90:9b:a4:5c:7a:25:12:84:
         0c:68:d7:0b:ed:6b:fe:92:12:3d:fa:5d:21:5d:8f:9c:8a:dd:
         ed:7c:e4:1d:36:80:3b:6a:ce:31:a5:5b:8a:53:7d:f6:9e:27:
         1f:1a:48:c3:d0:53:3e:6d:bd:a4:b8:cb:61:58:de:54:24:96:
         53:6d:36:9f:42:77:a2:f9:ad:20:b8:d4:81:5b:84:e2:59:ab:
         eb:63:62:c1:ed:30:f1:ec:54:0f:39:10:e8:87:6f:0f:5b:4c:
         ec:91:d6:e2:53:96:34:ce:f0:14:09:30:e3:5e:e9:eb:85:ca:
         c4:39:98:b2:e7:ba:2e:84:65:d3:e7:09:f1:cc:54:92:58:56:
         c0:24:69:ca:e9:a7:ba:72:26:79:96:3c:5c:55:b4:4c:f5:d2:
         29:c9:ac:86:be:4e:56:c8:73:3f:e3:d7:4e:5a:d8:5b:e4:56:
         76:bb:d9:e6:9c:9c:ce:1b:1c:8b:98:3c:d3:d0:8d:09:6c:1b:
         48:8e:1b:81:6e:7d:92:e0:84:34:ef:b3:d7:ff:bc:02:68:f1:
         c7:32:18:94:e3:ea:68:03:54:6f:b8:60:3a:f0:72:da:c3:4e:
         0f:65:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:29 2024 by rpki-client on console-ams.rpki-client.org