Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File:                     XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier:          KcXKHfD7no6brALy0AVyf9K84XmGb1ZFtYYd/gwPVwA=
Subject key identifier:   62:55:C5:82:2D:2B:A3:C4:93:ED:5B:2F:91:FD:54:00:1C:9E:58:2F
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer:       /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial:       018F8824870F75B9E86B012111A29766612F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number:          110B
Signing time:             Fri 17 May 2024 20:00:46 +0000
Manifest this update:     Fri 17 May 2024 20:00:46 +0000
Manifest next update:     Sat 18 May 2024 20:00:46 +0000
Files and hashes:         1: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: bu8X0D6DET61GdpvwymAwIY8pZ/Wr+/8kpuR9SpT0ac=)
                          2: xWojBYc0KgkHqSoH2lENuzD_LRc.roa (hash: 4GNqjZQRRpl3/24mhiahOxpMfgIRDW4DEbsvF9+OTLM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:87:0f:75:b9:e8:6b:01:21:11:a2:97:66:61:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
        Validity
            Not Before: May 17 20:00:46 2024 GMT
            Not After : May 18 20:00:46 2024 GMT
        Subject: CN=6255c5822d2ba3c493ed5b2f91fd54001c9e582f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:cb:f4:79:cc:d2:be:f4:37:2a:5c:8c:d4:
                    fb:84:58:29:f2:93:46:7c:e3:79:21:6f:30:f4:b1:
                    df:c2:a6:8a:db:8b:d0:a4:23:3f:4e:98:5c:60:7c:
                    be:92:a8:f8:59:a1:5f:89:ff:5a:33:1a:50:2d:d6:
                    a4:7c:f2:32:80:c8:c4:0a:90:14:bc:c4:f7:e9:ff:
                    68:c0:d8:a0:4f:03:ae:91:06:51:9c:48:93:f3:0f:
                    6e:2b:62:b8:05:b0:66:66:cb:71:9b:00:4b:b7:65:
                    7e:4f:1f:49:46:7d:4c:46:c3:8c:02:21:50:39:5d:
                    f2:43:c7:0a:6f:e7:62:23:d2:3d:17:a9:8f:6f:41:
                    d0:1b:10:4b:2c:d5:68:7b:f9:d0:bd:a3:53:1a:d4:
                    04:3d:05:44:05:58:9a:73:97:23:21:13:6e:b5:d4:
                    37:54:4c:cd:42:2f:55:dc:81:85:d6:7b:b1:d4:87:
                    82:41:ad:c6:b0:e6:44:29:e2:91:5f:d7:c4:52:2b:
                    fc:30:59:89:13:c9:14:3b:23:5b:99:97:c7:a3:26:
                    5a:a5:c6:df:4e:d2:de:92:bb:ac:f0:db:98:fc:2e:
                    52:b2:25:51:b9:ff:15:09:17:5d:a2:46:d2:20:9d:
                    70:5c:5e:11:c0:93:7a:67:4c:5c:f1:27:eb:09:63:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:55:C5:82:2D:2B:A3:C4:93:ED:5B:2F:91:FD:54:00:1C:9E:58:2F
            X509v3 Authority Key Identifier:
                keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:3f:34:79:c3:ae:5a:c8:51:b7:25:a5:cf:87:85:4f:e6:
         ba:a3:f0:ed:ba:bb:a0:c7:68:4d:35:c8:3a:bc:ca:07:de:9f:
         53:f6:cd:66:91:8b:85:fa:93:f8:fa:0f:bb:b4:e4:ff:e7:ea:
         dc:f6:7d:2b:71:43:17:f2:74:d9:71:c3:be:ca:5c:ec:da:e5:
         d8:e7:3d:c0:c2:33:97:be:68:a1:c7:39:db:63:21:7f:92:48:
         b3:b1:94:d7:75:76:39:e7:63:d2:6f:80:64:ac:6f:2f:56:a3:
         c5:af:f1:59:65:70:bb:4a:e3:f9:4e:6f:04:c3:35:7b:4d:4b:
         d8:6b:57:df:59:2b:96:ee:75:9d:b4:9f:6a:54:36:d5:08:5d:
         5f:8d:de:38:00:e0:9d:25:a7:5a:dc:8a:9c:e4:f4:67:56:52:
         95:63:9b:c2:fe:fe:ec:c9:bd:eb:09:93:e2:d1:85:94:88:3f:
         02:8d:7a:85:fb:7e:ed:7d:66:3f:9d:df:5a:fd:59:cf:61:b8:
         3a:3c:9a:be:4a:37:54:90:ec:af:8c:23:02:21:8f:53:d8:e0:
         7f:87:67:6f:94:8c:91:ab:a7:3f:50:a4:82:ff:81:21:5c:fc:
         62:36:8f:49:6e:f1:db:28:9c:10:72:39:5b:c5:a1:20:53:46:
         ee:17:58:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJIcPdbnoawEhEaKXZmEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDRlMmZjMmI0MWU4NTZkYmE1YmE2MjIzNWJhNjQxYTBk
ODFiNDgwHhcNMjQwNTE3MjAwMDQ2WhcNMjQwNTE4MjAwMDQ2WjAzMTEwLwYDVQQD
Eyg2MjU1YzU4MjJkMmJhM2M0OTNlZDViMmY5MWZkNTQwMDFjOWU1ODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP/L9HnM0r70NypcjNT7hFgp8pNG
fON5IW8w9LHfwqaK24vQpCM/TphcYHy+kqj4WaFfif9aMxpQLdakfPIygMjECpAU
vMT36f9owNigTwOukQZRnEiT8w9uK2K4BbBmZstxmwBLt2V+Tx9JRn1MRsOMAiFQ
OV3yQ8cKb+diI9I9F6mPb0HQGxBLLNVoe/nQvaNTGtQEPQVEBViac5cjIRNutdQ3
VEzNQi9V3IGF1nux1IeCQa3GsOZEKeKRX9fEUiv8MFmJE8kUOyNbmZfHoyZapcbf
TtLekrus8NuY/C5SsiVRuf8VCRddokbSIJ1wXF4RwJN6Z0xc8SfrCWNjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJVxYItK6PEk+1bL5H9VAAcnlgvMB8GA1UdIwQY
MBaAFFzU4vwrQehW26W6YiNbpkGg2BtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYt
MTYzY2Q4YmJmNDMxLzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYtMTYzY2Q4YmJmNDMx
LzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlc/NHnD
rlrIUbclpc+HhU/muqPw7bq7oMdoTTXIOrzKB96fU/bNZpGLhfqT+PoPu7Tk/+fq
3PZ9K3FDF/J02XHDvspc7Nrl2Oc9wMIzl75oocc522Mhf5JIs7GU13V2Oedj0m+A
ZKxvL1ajxa/xWWVwu0rj+U5vBMM1e01L2GtX31krlu51nbSfalQ21QhdX43eOADg
nSWnWtyKnOT0Z1ZSlWObwv7+7Mm96wmT4tGFlIg/Ao16hft+7X1mP53fWv1Zz2G4
Ojyavko3VJDsr4wjAiGPU9jgf4dnb5SMkaunP1Ckgv+BIVz8YjaPSW7x2yicEHI5
W8WhIFNG7hdYoA==
-----END CERTIFICATE-----
Generated at Sat May 18 00:34:50 2024 by rpki-client on console-fra.rpki-client.org