Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          1O68ftbvkMfMRUqWlumxTwvMhYTof/vF5FVjBFIc7QA=
Subject key identifier:   EE:91:23:A2:E0:8B:0B:13:03:99:D2:1F:D4:49:9A:4C:18:2C:73:80
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       019356BF9ED4A4BFE627DB9FA7606DA9A4D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          0BC1
Signing time:             Sat 23 Nov 2024 02:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:18 +0000
Files and hashes:         1: 9KUKC6uFuWLC0F_7LD223u9irDs.roa (hash: h5WYpbw2FVbNZLFJY9yZC50sx2ihBkLJaxrVvVAbKyo=)
                          2: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: klOkR47ZdY5vBX9ZQ3MgTkHzMi/xXtk8Sb9DHiQymwI=)
                          3: Dd8bDgkGBMfYelW5gr3DOleDkGQ.roa (hash: yACpJFGtiBTKUWxclXA8OUwLY3Nxf71AeJ4gQWwDDk0=)
                          4: MvitbM-SE1U5jASxm1C3UEa_45o.roa (hash: cvq/vRtvVQ1WxpN3sku57DrYZGTg3hKCA9aTuMME1WU=)
                          5: mbN774R2FxWr1iCu6DFKxgODBng.roa (hash: z2Tvg4zLRdxLoMv21UIVvaEb2trHA9vdwaXGO0Ua6YE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:9e:d4:a4:bf:e6:27:db:9f:a7:60:6d:a9:a4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: Nov 23 02:00:18 2024 GMT
            Not After : Nov 24 02:00:18 2024 GMT
        Subject: CN=ee9123a2e08b0b130399d21fd4499a4c182c7380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:0a:43:97:56:17:dc:2b:34:e3:9d:87:6a:
                    55:fb:03:3f:f7:74:48:af:88:ea:df:1c:ca:e9:cd:
                    77:1c:05:6b:8f:80:5a:6f:84:31:0b:25:ee:24:1d:
                    73:7f:c2:69:04:c2:8f:b5:ce:44:66:73:98:6f:f4:
                    bf:23:66:3a:4d:04:67:94:c2:1c:1a:55:a0:d9:09:
                    ba:42:94:df:d3:a1:3e:07:cd:a8:d4:a8:d4:ea:9d:
                    9c:20:8d:c8:4e:30:96:11:1d:2a:0c:41:0c:cf:d4:
                    8a:f9:cb:b9:9d:b6:ec:79:2b:a7:24:da:00:86:16:
                    2a:cd:70:2a:ae:c3:9e:a6:6c:c2:df:5f:2b:09:2a:
                    73:a7:41:38:f5:eb:7d:93:52:1c:4a:02:e1:ec:ff:
                    36:5d:b7:f2:d0:b2:ec:6a:43:f4:3c:c3:8b:0a:18:
                    2f:2a:71:04:74:f0:ce:44:10:30:72:9c:02:5c:f4:
                    d9:4d:80:be:29:db:ed:97:39:ac:2f:4b:6d:6c:98:
                    fb:cd:b5:d9:fd:02:8e:8b:32:08:e7:20:8b:cc:d2:
                    34:bc:aa:2b:f6:b4:dc:13:66:c9:56:2a:d2:75:7c:
                    45:77:44:7e:38:57:95:2b:b7:7a:85:ea:78:65:ae:
                    99:a0:49:cb:e6:17:8e:71:91:fc:f2:2d:9a:c8:45:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:91:23:A2:E0:8B:0B:13:03:99:D2:1F:D4:49:9A:4C:18:2C:73:80
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e2:e2:35:02:0f:82:bc:c0:97:41:5f:6e:c0:2a:bd:12:b6:
         05:9f:40:87:30:0f:44:92:a7:fa:66:01:b4:de:ae:69:12:97:
         b6:fa:92:59:14:14:4d:a2:de:26:c7:50:3d:71:69:df:94:07:
         b3:fe:f4:f8:15:e3:7d:ae:75:6c:ab:82:7c:74:80:d0:05:67:
         14:98:b2:f6:8c:40:f4:d1:c3:ff:d4:7a:e9:52:5e:00:1d:a9:
         30:95:3a:c9:14:fd:31:8f:47:4c:8f:ad:66:17:f1:6b:80:79:
         f0:3b:b5:98:69:1b:43:c5:59:19:bf:a1:bb:aa:8d:84:71:90:
         3d:20:f2:12:8b:61:67:d5:57:bb:55:4d:9e:51:3b:a6:e0:79:
         fd:69:62:c9:e9:8c:83:05:f0:cf:79:3e:fa:f8:36:d5:30:3a:
         51:7e:fd:a5:fc:10:95:56:38:d6:4c:10:f0:31:ba:51:e6:1b:
         70:d5:fe:a2:f7:7b:13:c2:be:5a:86:2d:fd:2e:6d:75:75:16:
         2b:5e:a5:dc:51:e0:f1:5c:62:df:1a:5e:65:28:06:9a:53:64:
         f5:f8:e5:9c:cf:cf:a5:43:c0:88:b5:4e:22:7f:46:b6:d4:be:
         aa:c6:2c:5c:e5:86:59:bf:52:a1:d2:9c:d0:cb:1e:ff:12:b8:
         ce:88:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:44 2024 by rpki-client on console-fra.rpki-client.org