Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
File:                     XU_MyZTpQTHcEb_JXGRYWzReAfU.mft (raw, json)
Hash identifier:          3ddgqjLKY/mFN1/tblbQRYt4ac81kxSiOKUpOL1OG0U=
Subject key identifier:   41:C5:94:A5:C4:65:41:14:73:5E:B1:83:ED:4B:2D:F6:7A:75:D9:D8
Authority key identifier: 5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
Certificate issuer:       /CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Certificate serial:       019356898F5B02856D4773A2A615DCDBE8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:01:15 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:15 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:15 +0000
Files and hashes:         1: XU_MyZTpQTHcEb_JXGRYWzReAfU.crl (hash: MMe93E19EktLbYsKCwd0gGcSSFPW1gw8VRg7zEjHvwo=)
                          2: Y1uXLcbZO8SHz1YiiCvOr72qzto.roa (hash: 03XrAGWG0N77XxqDX/vvL0jc6oXLOSZKSJovkvB+9WU=)
                          3: rIsJ9XmzSKrpXg4uKtK5oYdnjHs.roa (hash: e6vCbHcGpwkyz2EN99JIiCNP/R0qPw+V90cGLtYCSXI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:8f:5b:02:85:6d:47:73:a2:a6:15:dc:db:e8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
        Validity
            Not Before: Nov 23 01:01:15 2024 GMT
            Not After : Nov 24 01:01:15 2024 GMT
        Subject: CN=41c594a5c4654114735eb183ed4b2df67a75d9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:05:a3:80:31:62:f9:3e:0a:e8:48:88:63:
                    2b:fa:86:e9:49:ee:51:32:7d:db:e1:eb:35:35:fc:
                    a9:f5:e4:a2:96:ba:7e:4d:34:79:4b:30:c9:1f:75:
                    f4:7f:5a:19:56:0c:25:79:c3:a3:45:b7:eb:7a:f5:
                    f3:1d:94:94:bb:fc:c8:85:d2:8e:1c:29:a7:6d:c7:
                    1d:5d:45:e8:c0:83:4f:7a:8d:99:86:bf:6f:db:65:
                    1a:f6:37:1a:28:03:10:0b:b3:80:8c:54:80:30:13:
                    cf:61:27:1b:de:28:40:65:97:d9:83:13:d2:16:9a:
                    33:6b:4b:e8:6c:52:27:66:24:85:f2:0f:27:0d:13:
                    be:2f:84:79:e8:d3:13:54:55:48:3b:ea:80:ad:8a:
                    c9:1c:c6:a7:47:d2:f6:87:a6:a2:af:67:06:2b:5d:
                    2e:0c:d1:14:6a:e4:3c:76:ab:c0:09:38:05:9c:ac:
                    9e:68:88:ee:dc:d0:e5:b4:6c:a6:93:4e:e2:04:46:
                    51:71:b5:93:9f:bc:e2:91:eb:50:eb:33:93:c6:39:
                    c3:99:28:19:b3:4e:d6:cd:f1:2f:c1:d2:39:26:4b:
                    43:fd:89:96:8d:59:84:9d:82:70:30:03:16:aa:53:
                    ff:fd:51:da:0b:4d:25:5a:77:5c:ae:25:95:03:1a:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:94:A5:C4:65:41:14:73:5E:B1:83:ED:4B:2D:F6:7A:75:D9:D8
            X509v3 Authority Key Identifier:
                keyid:5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:67:07:9c:58:af:68:da:3d:63:66:95:d3:92:e0:e1:e5:
         09:e0:54:ce:e9:3a:3f:43:8b:4b:ad:75:2c:7f:a5:5c:76:9d:
         9f:8d:76:54:c3:5d:06:7b:b4:b7:7f:53:24:71:ec:9a:a4:72:
         64:e1:f5:b0:ae:f6:a2:1b:c7:0f:de:68:96:c9:af:fd:f6:ff:
         e4:f9:97:4e:c7:d4:ae:e1:15:6c:4a:c1:e4:09:17:52:f0:8d:
         fc:ce:f6:56:20:12:1c:00:e7:7c:40:8c:24:55:5f:cf:2f:04:
         0c:89:a8:c9:65:2a:77:c4:3c:be:57:88:ae:bf:12:87:71:69:
         5c:a8:b4:49:43:f3:81:74:b9:ae:00:82:f8:51:dd:22:ce:4d:
         bb:b0:21:55:ae:02:a9:e5:b2:db:b7:62:a5:5c:4a:97:1e:d5:
         37:7e:fa:ce:ae:91:41:d3:c2:55:a7:70:30:d2:29:64:a5:64:
         ac:84:57:46:8d:2a:f5:99:1d:69:05:4a:2d:87:8c:bd:80:ea:
         46:76:74:30:64:58:7a:68:a5:e7:4f:c2:7a:56:ea:08:7f:c0:
         10:e3:32:77:3d:56:b8:b2:05:df:cf:87:58:03:8a:0f:14:04:
         3e:82:18:6b:52:c3:c3:81:76:32:e7:f0:f8:09:1c:1d:6d:cd:
         dd:6a:03:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:21 2024 by rpki-client on console-ams.rpki-client.org