Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File:                     PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier:          SsXcLYfVfnIRaIONJYnCAET3sKl0vI9QvxVD8VM1wCM=
Subject key identifier:   D8:70:87:1D:C2:DF:EA:6B:CE:66:7B:D8:07:25:14:B6:25:A1:95:54
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer:       /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial:       0193670E6AF28B374E30165C921B00705541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number:          12E7
Signing time:             Tue 26 Nov 2024 06:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 06:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 06:00:18 +0000
Files and hashes:         1: 6J-J8LZo94z6gE063U9AgVwDGt4.roa (hash: 8BoZffFQcM/CGtS3sVHPCj980ZnJQQvhJUUCSHQzeWw=)
                          2: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: ZXlwYDX7zx0UpV44VofL6RPZKrKfI38NISRJTAFF1uo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:0e:6a:f2:8b:37:4e:30:16:5c:92:1b:00:70:55:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
        Validity
            Not Before: Nov 26 06:00:18 2024 GMT
            Not After : Nov 27 06:00:18 2024 GMT
        Subject: CN=d870871dc2dfea6bce667bd8072514b625a19554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:35:2f:5d:2b:16:f0:27:dd:87:d0:a9:47:
                    ab:f6:6d:a4:ac:c9:50:f3:dc:ce:3c:2a:69:f3:f5:
                    d2:f4:52:e0:1c:75:42:d7:3d:f9:0f:6b:5b:c7:7b:
                    db:26:d2:79:d9:ce:a7:92:88:93:8a:82:67:68:34:
                    90:be:74:ae:e5:b8:e3:04:c8:5a:e0:54:7b:bd:4f:
                    63:a4:bc:01:82:1d:d2:c9:10:81:91:1b:29:f0:f9:
                    41:db:55:5c:df:9c:6e:83:04:67:70:0c:1d:db:2d:
                    96:1e:92:b7:d0:a6:8c:de:d3:16:b6:16:99:ee:a2:
                    5a:c1:85:37:b9:f8:8d:36:d9:04:31:70:42:22:51:
                    ec:c2:ba:21:75:27:df:ad:86:97:08:25:69:14:24:
                    08:50:01:6a:de:46:fa:8d:8d:f5:e7:87:19:d4:63:
                    be:6b:5f:94:66:d1:5b:7e:ba:67:8a:f5:d5:49:da:
                    ee:65:0c:14:53:04:5e:e3:b1:f3:a9:dd:d8:3c:44:
                    28:94:06:4a:6a:33:e0:41:99:ff:1c:5e:53:44:88:
                    0a:82:60:d0:f2:ef:87:9c:a1:d9:61:03:58:fa:7c:
                    54:88:8c:4f:5f:ee:65:29:fd:de:61:9c:ef:4b:bd:
                    e3:c5:87:9f:f5:08:91:cc:9f:e4:47:4b:e9:0f:53:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:70:87:1D:C2:DF:EA:6B:CE:66:7B:D8:07:25:14:B6:25:A1:95:54
            X509v3 Authority Key Identifier:
                keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:63:20:f0:50:26:80:24:19:8c:69:9c:08:d7:16:16:0b:
         07:e0:c5:d8:9e:d7:59:84:99:a9:15:58:4e:28:c0:72:f1:c4:
         b8:3a:c9:c8:09:7d:af:9c:e1:60:ce:58:9a:ac:ed:9c:79:eb:
         79:3e:3b:f7:ca:ba:84:0a:20:8a:c9:9c:a7:1a:ba:4a:b2:85:
         df:89:0a:92:ea:dd:90:46:74:28:a3:a2:f6:dd:9e:cc:31:d8:
         de:41:f7:d5:01:a3:40:d1:76:75:f9:e8:90:ed:6f:b3:66:12:
         4c:28:4e:04:1b:a7:ff:80:d7:e2:24:55:8b:41:13:0a:20:a4:
         73:58:15:fc:b2:de:e0:84:a3:76:72:d5:23:a1:81:f8:7f:05:
         84:24:12:af:db:3f:1e:74:39:e5:9a:ce:7b:d0:9b:ae:ba:63:
         6c:cf:46:5c:3b:e0:9b:14:75:39:f3:ea:c6:ec:41:ab:5f:09:
         b6:8d:fd:b9:29:b9:42:ab:ff:e5:31:f4:22:0d:ca:e1:f0:68:
         0c:30:92:7d:48:32:7e:77:b4:43:b5:26:d6:d5:dd:60:96:60:
         26:fa:0d:9e:25:a9:fd:7e:ac:1e:d3:17:33:dd:36:f6:56:41:
         56:8e:37:2d:88:df:6e:19:2b:79:0a:85:d4:7c:da:e9:59:53:
         da:19:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:18:30 2024 by rpki-client on console-ams.rpki-client.org